Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TchJCvOaY5zhNbuJOZx_Mf5UTyg.roa
File:                     TchJCvOaY5zhNbuJOZx_Mf5UTyg.roa (raw, json)
Hash identifier:          SkNid6RWe9OZraXT3HfSU4LS9FtsbiYrHzmV4mWEAEw=
Subject key identifier:   4D:C8:49:0A:F3:9A:63:9C:E1:35:BB:89:39:9C:7F:31:FE:54:4F:28
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0185EC67F308201FF76023FF9AC3D7BACC03
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TchJCvOaY5zhNbuJOZx_Mf5UTyg.roa
Signing time:             Thu 26 Jan 2023 04:48:33 +0000
ROA not before:           Thu 26 Jan 2023 04:48:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43624
IP address blocks:        46.161.56.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ec:67:f3:08:20:1f:f7:60:23:ff:9a:c3:d7:ba:cc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan 26 04:48:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4dc8490af39a639ce135bb89399c7f31fe544f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:46:1c:8b:6d:1b:86:99:23:37:f0:0d:1b:e3:
                    3a:28:de:b8:9b:d6:e0:02:21:8e:da:c1:39:4c:34:
                    d7:c9:52:0b:de:a8:b4:6f:83:29:fe:9b:f7:2a:1c:
                    3d:74:2f:9a:cd:61:6a:3e:a7:66:72:2f:06:1e:6b:
                    f6:89:a8:82:24:25:83:cf:c1:b6:2e:ef:15:e1:11:
                    6f:47:ea:0f:46:5d:df:68:bd:e8:ba:34:04:52:50:
                    55:b9:01:83:6f:9e:22:5c:68:e2:54:d7:e2:e4:3c:
                    f3:73:af:71:f7:64:3c:a4:4a:8d:0a:e4:0e:ec:06:
                    17:7f:81:40:62:2c:a4:72:69:3c:4d:5a:04:c4:ea:
                    04:48:31:ab:59:40:08:c3:e1:25:b5:75:e1:08:bd:
                    3a:04:95:67:fa:4b:d4:0c:a7:ab:b9:06:25:64:90:
                    8f:3e:6c:be:a0:1f:79:a4:92:7f:76:a8:e4:93:8c:
                    4b:3f:f0:67:9c:5f:dd:6a:fc:d8:f8:25:2a:c6:89:
                    a6:ac:43:5e:c7:a9:45:08:e9:a9:a0:f1:ba:6c:c8:
                    7e:6f:8c:85:79:51:13:20:d6:93:dc:99:11:30:ee:
                    86:18:67:1e:3e:87:a6:a0:dd:52:44:21:5f:d7:8a:
                    00:53:59:41:73:32:ba:0b:d1:7a:03:52:43:40:b7:
                    6d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:49:0A:F3:9A:63:9C:E1:35:BB:89:39:9C:7F:31:FE:54:4F:28
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TchJCvOaY5zhNbuJOZx_Mf5UTyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.161.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:90:32:37:dd:39:54:73:76:38:3c:eb:5e:90:78:79:35:
         cb:ac:8b:a5:a6:9d:df:9e:cf:e6:6e:fd:b9:0b:c9:94:ed:a1:
         4b:b9:b2:bf:d0:51:d2:15:d3:d1:e0:07:ef:a2:2a:1f:3a:74:
         46:cd:ac:c4:f6:2a:57:17:61:2d:eb:83:8c:d4:96:af:0b:40:
         f9:b0:da:c5:c7:26:ff:e6:56:6f:7e:b5:a7:ec:4e:9a:e5:b3:
         bd:7f:2c:f0:6f:e6:e8:ba:06:62:2c:2d:a6:a8:23:a4:2e:07:
         4f:e3:ac:f5:04:35:38:e1:4f:c6:f5:b0:7e:98:bf:07:ec:08:
         18:fe:1b:f9:63:cb:41:d1:ba:79:2d:77:39:60:da:f0:82:1b:
         14:98:60:ed:52:16:68:b3:02:dc:43:12:61:e5:e9:ec:bb:25:
         1a:70:04:d3:6b:c8:f2:c1:e8:4b:7c:75:58:92:d8:97:fd:7d:
         b8:d4:1b:72:20:1f:8e:a3:ee:9a:d1:8a:e0:ab:c8:e6:fe:04:
         10:64:ad:33:cb:2a:04:46:d5:ec:1f:03:f6:39:c9:04:08:ee:
         7d:06:79:11:97:0a:45:7e:ff:1c:59:a4:82:10:dd:de:d3:17:
         f2:13:19:6f:7d:0e:4b:4b:38:d8:9d:31:3f:18:9f:0a:61:f6:
         bd:2a:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----