Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa
File:                     KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa (raw, json)
Hash identifier:          Pfz40fyQVDkc4WGOFrDOoeR/TpO+ZVzlt2147ug7JDA=
Subject key identifier:   28:31:14:60:5F:E5:4C:8E:86:B3:D3:A0:8D:E0:41:C0:D1:EA:B4:84
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0185BB366386E04D1C0AF6A446DAFD7DBBB1
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa
Signing time:             Mon 16 Jan 2023 15:33:01 +0000
ROA not before:           Mon 16 Jan 2023 15:33:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140::/29 maxlen: 48
                          2a05:4143::/32 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:10::/48 maxlen: 48
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48
                          2a05:4140:4::/48 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:5::/48 maxlen: 48
                          2a05:4140:15::/48 maxlen: 48
                          2a05:4140:8::/48 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:bb:36:63:86:e0:4d:1c:0a:f6:a4:46:da:fd:7d:bb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan 16 15:33:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=283114605fe54c8e86b3d3a08de041c0d1eab484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:89:54:d4:3c:5e:f6:29:5e:86:d5:68:69:
                    15:27:57:b3:87:6f:9e:30:d4:ad:66:fc:3d:eb:7a:
                    93:90:b7:27:ae:3d:b3:14:30:13:4c:72:f7:3b:b9:
                    13:c2:3b:52:17:cd:dd:7d:4a:7e:39:5d:9b:d2:3d:
                    a8:57:1e:57:25:4d:01:f0:27:83:c5:76:94:8a:3b:
                    d5:2d:1c:9e:a4:ab:70:80:00:33:4f:97:4f:a3:55:
                    1f:32:8d:a2:b5:a7:43:55:7f:13:f1:a0:06:85:aa:
                    64:a6:60:16:a6:cb:bc:95:10:82:c9:14:0d:04:95:
                    e6:8a:ee:74:bd:9a:74:2e:0d:ce:91:93:1d:72:ee:
                    52:44:8a:e1:db:2d:83:20:f6:21:60:4b:f6:1f:aa:
                    0f:1a:d2:d4:0a:98:c2:b4:fc:1a:e4:00:3c:ba:38:
                    c6:51:cd:9d:82:14:0c:27:01:6b:a1:df:74:4c:c8:
                    8b:3b:be:7e:12:48:0b:4c:40:42:a3:a5:81:5e:62:
                    e0:2a:ed:eb:54:07:bb:41:2a:eb:65:9d:c9:d3:3d:
                    fd:30:6c:e5:1d:b6:db:58:48:ac:55:c8:5e:90:f1:
                    bb:e8:55:13:f5:7c:e8:08:3b:70:c0:99:c4:6c:b3:
                    b4:70:43:4a:08:02:90:a4:fc:a6:dc:8c:bd:f0:f9:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:31:14:60:5F:E5:4C:8E:86:B3:D3:A0:8D:E0:41:C0:D1:EA:B4:84
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:98:c4:8a:5d:0b:d2:de:26:18:02:97:10:4e:82:0a:3b:
         e8:34:63:df:2e:3b:a7:f6:8d:f4:0a:16:fb:96:f0:08:27:d4:
         bc:22:6d:9e:2f:46:7d:4c:7b:6d:e5:74:fd:e1:c4:a3:cd:09:
         47:da:76:15:4c:0b:5f:df:04:85:97:d2:af:11:39:15:ab:cf:
         2b:db:cc:ef:0f:80:6a:97:9a:3a:cd:c5:c0:13:bf:c5:00:fa:
         37:c2:00:65:b0:c5:ca:b4:90:11:8a:71:76:6f:68:16:07:4c:
         20:25:71:4d:35:89:5d:51:d8:92:09:1c:5c:ac:ea:23:ff:35:
         17:fb:ac:e1:04:c4:9b:8b:e9:22:e4:63:6a:1e:0e:ca:dc:c1:
         1a:6e:57:88:77:f5:38:59:d9:5c:6e:6f:7b:ea:91:d2:98:90:
         9b:e7:53:85:f5:0d:11:36:06:89:97:c5:4e:59:0a:a2:3b:73:
         79:5c:ef:7c:c1:7c:fa:28:18:65:90:96:7a:e1:29:38:17:03:
         cf:b4:3c:4e:11:6f:5f:5d:f5:52:d5:2a:80:7e:7d:53:6d:d2:
         58:5a:56:64:9d:c9:48:3f:82:61:20:1c:7e:9d:c3:09:61:e9:
         48:9a:21:f5:6c:fc:53:61:16:54:a4:ad:82:d9:27:aa:30:e4:
         67:70:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----