Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/auIPuGAbItecuBaxSAMGzOuKZT4.roa
File:                     auIPuGAbItecuBaxSAMGzOuKZT4.roa (raw, json)
Hash identifier:          WGqxlQotcZ/xuV/Sgke2+kIEvZcyUxYuTwXMnBtDQ+w=
Subject key identifier:   6A:E2:0F:B8:60:1B:22:D7:9C:B8:16:B1:48:03:06:CC:EB:8A:65:3E
Certificate issuer:       /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial:       01856FC278698F244382660B9213C54B0C65
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/auIPuGAbItecuBaxSAMGzOuKZT4.roa
Signing time:             Sun 01 Jan 2023 23:54:53 +0000
ROA not before:           Sun 01 Jan 2023 23:54:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51324
IP address blocks:        185.80.144.0/22 maxlen: 24
                          2a05:7dc2:1000::/36 maxlen: 36
                          2a05:7dc2:3000::/36 maxlen: 36
                          2a05:7dc2:4000::/36 maxlen: 36
                          2a05:7dc2:5000::/36 maxlen: 36
                          2a05:7dc2:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:78:69:8f:24:43:82:66:0b:92:13:c5:4b:0c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
        Validity
            Not Before: Jan  1 23:54:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ae20fb8601b22d79cb816b1480306cceb8a653e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:8a:1e:e6:57:4e:26:a9:de:04:56:8b:be:
                    51:62:93:07:7c:2a:63:ca:90:93:d8:68:4a:c4:6a:
                    da:ab:fe:63:90:3b:5b:c3:c4:c8:b2:3c:14:9c:ef:
                    69:9a:d7:8a:8c:78:07:c1:84:b3:b6:2b:3f:f1:e0:
                    ad:5d:85:81:5c:48:05:04:0f:25:8d:94:ef:ea:5b:
                    e4:86:95:1f:16:fb:a5:22:ca:47:3c:23:d7:a8:1d:
                    57:28:ca:c9:ec:4d:d0:44:04:23:ed:51:4b:f4:5d:
                    6a:5f:67:56:5f:62:3e:a8:b8:4f:61:c6:86:e6:ce:
                    92:c8:09:dd:2c:4a:0e:37:26:9d:86:1f:10:de:5d:
                    86:fe:6b:30:73:7c:0d:64:d1:33:02:84:1e:97:9a:
                    46:88:65:60:f5:05:f5:d9:bd:32:a8:02:e8:2c:ac:
                    e8:34:cc:9f:c6:bc:f0:21:a1:a7:2e:ed:53:e5:b9:
                    08:5d:8b:31:77:67:fe:95:c9:f8:5c:86:8e:ee:f9:
                    5a:64:08:4d:1c:bc:71:40:fd:7b:0e:aa:b5:0d:c1:
                    f2:48:80:c6:84:9a:eb:d9:07:0b:53:d7:dc:f6:fc:
                    ac:0c:34:3d:54:11:b1:ce:0e:68:9c:9b:4f:7f:9b:
                    79:12:2d:2e:fd:fa:6f:ac:8a:2d:3f:d0:e1:41:35:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E2:0F:B8:60:1B:22:D7:9C:B8:16:B1:48:03:06:CC:EB:8A:65:3E
            X509v3 Authority Key Identifier:
                keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/auIPuGAbItecuBaxSAMGzOuKZT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.144.0/22
                IPv6:
                  2a05:7dc2:1000::/36
                  2a05:7dc2:3000::-2a05:7dc2:6fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         53:14:40:6f:fe:80:92:98:d9:94:0c:79:60:69:7d:b0:26:d6:
         43:5c:28:22:84:4d:b7:db:b4:2f:ce:e9:b4:d2:5f:33:9f:24:
         69:01:f8:da:c5:50:e9:24:a6:aa:b4:9b:31:38:bf:8f:d9:47:
         20:cc:79:f5:15:63:10:01:c9:cd:60:c4:dc:b9:af:a1:63:66:
         b5:36:06:c8:13:74:4d:d3:78:61:b9:5c:e2:b3:26:12:35:2a:
         1b:da:29:93:96:8e:83:f7:0e:64:43:ed:74:53:54:11:3e:22:
         fd:e2:74:13:49:08:23:be:92:da:b2:e3:ab:68:87:2d:c7:79:
         e4:cd:bb:30:96:64:a5:2a:3d:cb:07:b7:22:d8:4d:b6:52:f9:
         71:65:47:76:99:04:de:49:04:5f:1c:30:f6:1e:6d:78:81:be:
         32:24:e9:b2:d6:23:97:8f:33:ef:e7:3c:9c:19:b9:5a:b9:b1:
         b1:dc:02:3b:be:0d:06:16:af:2a:ad:42:95:d5:f8:26:bf:70:
         2c:9e:9f:13:c8:47:44:cb:70:1a:1f:bd:c1:17:5e:71:d3:3c:
         b7:ca:16:4e:55:cd:7c:c8:3e:5d:b4:9b:6c:1b:20:aa:d0:70:
         60:dc:50:7a:a1:19:cf:19:f0:ac:45:9e:d9:f2:ed:91:01:1e:
         cf:83:70:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----