Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa
File:                     sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa (raw, json)
Hash identifier:          RsstvDfBjGJpXjV7T5hOQAdF/zfvjQGtL9dWSvJI+Nw=
Subject key identifier:   B1:DC:1C:3D:95:08:83:79:C8:27:6C:3C:4B:A2:7E:12:00:1B:E9:38
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       0189018DCE8518AC855A7A4AF4C020EF8419
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa
Signing time:             Wed 28 Jun 2023 10:30:17 +0000
ROA not before:           Wed 28 Jun 2023 10:30:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9199
IP address blocks:        185.57.46.0/24 maxlen: 24
                          2a04:7580::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:01:8d:ce:85:18:ac:85:5a:7a:4a:f4:c0:20:ef:84:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Jun 28 10:30:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1dc1c3d95088379c8276c3c4ba27e12001be938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:94:ae:96:64:34:2c:08:89:d7:12:d5:aa:
                    79:f3:f7:8a:c1:25:24:94:9a:f1:07:69:80:74:01:
                    4e:22:be:2b:6c:5d:cb:ce:25:8e:7b:58:a6:c2:a5:
                    5f:8c:51:9a:c8:78:62:cf:d0:ed:89:f3:89:45:76:
                    76:6d:16:8d:0f:e4:67:c7:14:da:a9:bf:dc:08:40:
                    10:e2:7a:65:83:6c:d6:55:25:f9:65:60:0b:8b:68:
                    89:20:16:b8:9d:20:3d:f5:90:34:7a:cf:0e:34:aa:
                    7e:03:aa:8d:39:95:a2:eb:4f:a3:c6:ac:01:85:3a:
                    20:87:37:b3:b2:d8:74:f8:c4:31:df:35:39:cf:98:
                    76:ea:f5:0b:95:7d:46:ad:18:12:50:5b:60:a7:fa:
                    18:c3:a6:5e:64:14:cb:65:6d:a3:a4:d0:57:d0:fd:
                    76:16:03:d3:ac:2f:97:0d:5b:c2:6d:bc:d0:82:4b:
                    81:fb:0b:c0:e4:0c:e5:4a:ab:74:9a:7e:61:7f:68:
                    9a:20:06:e1:80:4f:38:a1:dd:d8:96:b6:d8:e9:d1:
                    39:24:4b:39:58:07:b0:4c:e6:88:41:55:68:9c:1d:
                    80:25:aa:aa:c2:ea:5e:f6:29:04:96:cb:28:a9:af:
                    8e:c7:da:bd:2b:fe:bd:3e:46:d8:e9:49:06:76:95:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DC:1C:3D:95:08:83:79:C8:27:6C:3C:4B:A2:7E:12:00:1B:E9:38
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.46.0/24
                IPv6:
                  2a04:7580::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:19:5f:bb:2b:32:6b:be:03:58:d3:2d:17:2a:f2:83:16:e8:
         c0:b6:82:b8:b3:3b:8e:43:f1:a7:fd:3c:c3:08:99:fb:7b:53:
         2b:ba:82:bf:ba:c1:46:16:bf:fb:af:91:d5:0e:61:2e:35:39:
         20:f9:71:69:32:30:77:d2:72:77:0c:63:f0:0e:6e:7e:35:f2:
         ba:90:39:fb:e5:6c:41:93:f7:29:82:a8:12:78:f7:03:2e:d7:
         72:b4:3f:d8:1a:e7:6a:08:dd:5c:71:0a:d2:ab:ba:3f:38:73:
         c3:e4:b0:58:9a:d4:4a:0b:97:0f:a8:4e:69:07:df:cb:f3:70:
         9c:6e:34:e8:5f:10:13:84:b9:72:4a:0d:dd:9c:83:0b:d1:9f:
         7d:a2:af:89:6b:54:c1:05:b2:45:f8:8c:9e:27:51:fa:00:f9:
         f7:30:d1:2a:03:65:e4:29:ba:93:12:38:53:38:df:00:a4:a0:
         7f:8c:69:59:4e:ac:17:dc:21:f8:ed:ea:29:ef:42:c8:87:b0:
         8f:b8:8b:8e:8b:ce:9d:67:f4:94:c8:60:22:8f:8a:22:40:0f:
         8d:57:e6:ba:77:93:47:34:8e:93:38:39:97:eb:be:24:54:69:
         a6:52:34:57:9e:db:02:69:cf:69:19:e2:9c:d1:fa:63:04:b3:
         21:5e:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----