Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa
File:                     eMwmsssVAWLyPyq4cmVlpvjQrVw.roa (raw, json)
Hash identifier:          OERn0rfsatoS9Xbr6vxSkYoHwBp0GRiE6fjL1Q4HtB8=
Subject key identifier:   78:CC:26:B2:CB:15:01:62:F2:3F:2A:B8:72:65:65:A6:F8:D0:AD:5C
Certificate issuer:       /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial:       0185729EDA258BD9F791D9D0FB31E9A3C649
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa
Signing time:             Mon 02 Jan 2023 13:14:51 +0000
ROA not before:           Mon 02 Jan 2023 13:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        185.220.149.0/24 maxlen: 24
                          2a0b:f841::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:da:25:8b:d9:f7:91:d9:d0:fb:31:e9:a3:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
        Validity
            Not Before: Jan  2 13:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78cc26b2cb150162f23f2ab8726565a6f8d0ad5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:55:12:d0:7c:13:a9:a7:bd:b9:7a:d4:ae:
                    21:a2:a4:ff:f9:a9:b0:b7:3b:2f:60:de:38:d7:ff:
                    bc:d0:41:e8:84:f8:65:68:b4:21:be:99:1c:85:69:
                    82:b6:a8:11:4e:dc:1e:47:e0:90:70:c8:65:f1:71:
                    f4:f9:bd:10:30:b4:92:d1:12:8f:12:ae:3f:a2:86:
                    c1:2e:dd:9a:42:6e:34:51:3a:7d:fc:fa:2e:0b:96:
                    5c:75:61:b9:f2:b5:00:8d:30:6e:85:4a:c8:a0:5a:
                    5f:cd:69:ad:68:a8:05:43:cf:78:ee:ca:35:fb:5f:
                    84:3d:ef:33:58:ca:57:cc:84:d2:e9:60:03:71:de:
                    34:0b:76:35:9b:0d:fe:5d:41:5c:93:73:74:01:3e:
                    b5:a8:e6:f3:78:37:a5:67:67:00:4a:be:e8:2a:19:
                    aa:60:3e:02:05:b4:4b:20:24:ff:39:44:d5:b1:c7:
                    b6:62:de:3c:91:e7:3a:90:78:cc:fd:c8:f4:a1:4c:
                    a2:68:18:64:24:85:21:f2:0a:40:d7:09:ca:0a:f6:
                    af:7b:22:fe:79:68:b9:45:2f:1e:1f:4f:a2:9c:e0:
                    fb:0b:1d:5b:5b:76:5d:80:9c:51:f0:d0:e5:56:eb:
                    8f:28:6a:d3:ff:a6:a4:c7:aa:33:cb:38:72:54:c7:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:26:B2:CB:15:01:62:F2:3F:2A:B8:72:65:65:A6:F8:D0:AD:5C
            X509v3 Authority Key Identifier:
                keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.149.0/24
                IPv6:
                  2a0b:f841::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:01:50:6f:ff:2d:7a:cc:57:4f:61:7b:8c:f7:d2:89:b7:f1:
         c1:05:3e:12:4e:32:2c:e7:f1:1e:b9:47:44:34:04:7d:38:73:
         a2:a6:22:25:e6:13:8b:fc:c3:91:30:65:01:fc:3f:62:5c:a2:
         dc:54:a0:70:49:af:5d:53:f0:51:59:20:64:2f:e0:f1:1f:ac:
         18:74:cf:7b:0a:4e:f1:b2:25:d5:e8:9d:71:14:4e:60:5a:a6:
         99:da:d5:08:2d:0f:cb:e9:46:0d:29:a8:36:a2:2a:69:cd:e3:
         16:bb:57:cb:62:79:4a:f3:6c:b4:3c:72:eb:3d:96:1f:50:13:
         a7:63:a6:06:49:01:b1:aa:e5:d5:6c:c7:93:8e:b5:c1:e8:3e:
         2e:f2:e7:dd:37:c9:16:d5:1c:24:57:60:27:30:bb:3f:71:89:
         bf:37:7e:52:a4:b8:f4:48:fe:23:d6:64:31:c9:25:8d:00:12:
         5b:fe:9d:cf:06:be:c8:d4:70:ba:40:9b:f7:15:10:43:c6:6b:
         cc:45:86:49:83:4f:cf:e9:3b:9f:26:17:80:a0:f9:46:bc:e6:
         ee:78:e7:3b:cd:bc:74:46:72:97:8c:a8:f5:86:1b:c6:e7:09:
         e7:48:fb:3f:11:b9:8c:00:f7:66:8e:eb:8e:c3:4d:90:f4:9a:
         d9:5b:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----