Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/x4StFHR33YUc_NHUpF26MaTiVYw.roa
File:                     x4StFHR33YUc_NHUpF26MaTiVYw.roa (raw, json)
Hash identifier:          LjWNIgV+vyPW/biQIOAl2y0Zc7dQWAoXZCI49qBUgZw=
Subject key identifier:   C7:84:AD:14:74:77:DD:85:1C:FC:D1:D4:A4:5D:BA:31:A4:E2:55:8C
Certificate issuer:       /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial:       0185708CB677269394C7AF072715120AEAAA
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/x4StFHR33YUc_NHUpF26MaTiVYw.roa
Signing time:             Mon 02 Jan 2023 03:35:47 +0000
ROA not before:           Mon 02 Jan 2023 03:35:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        185.124.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:b6:77:26:93:94:c7:af:07:27:15:12:0a:ea:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
        Validity
            Not Before: Jan  2 03:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c784ad147477dd851cfcd1d4a45dba31a4e2558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:35:77:6a:a3:6f:44:61:20:b5:ea:a4:27:
                    5a:67:6a:55:55:4d:40:5a:c2:af:44:30:85:3f:5b:
                    3e:7a:c3:e6:cf:7d:ce:21:55:bc:d2:4d:6e:ae:6e:
                    6e:3e:e7:b0:30:8b:28:dc:f6:02:16:18:4c:72:35:
                    fc:a6:5b:b5:6d:3a:b9:71:64:98:ba:9e:3b:d8:fd:
                    49:d7:03:32:f7:82:27:2b:dd:d6:e1:ef:8a:0b:23:
                    31:de:5c:b1:96:a5:26:61:71:36:26:8d:25:63:72:
                    2d:bd:65:64:c1:0c:15:12:66:63:9a:91:a5:b3:f2:
                    99:29:19:a5:40:86:9a:54:20:78:5e:52:4d:05:75:
                    91:b9:1f:90:05:08:6f:72:df:45:97:19:9c:d9:75:
                    df:3a:d7:73:3b:18:61:42:ab:c6:04:69:34:ec:8c:
                    f0:83:84:b1:ac:cf:7c:0e:a3:4d:e0:f2:03:de:a5:
                    63:0c:b0:3f:1e:b4:51:53:c5:31:4a:10:71:90:c2:
                    8c:84:76:dc:b4:da:f6:bd:b4:53:5e:40:45:ba:90:
                    e3:60:55:d7:b7:1a:c5:59:a8:83:63:e3:b4:a3:dc:
                    72:e7:e6:5e:f5:9d:3e:b1:b7:44:93:53:08:f7:98:
                    75:17:3e:90:e3:0d:04:7d:54:67:99:4b:4a:a4:9a:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:84:AD:14:74:77:DD:85:1C:FC:D1:D4:A4:5D:BA:31:A4:E2:55:8C
            X509v3 Authority Key Identifier:
                keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/x4StFHR33YUc_NHUpF26MaTiVYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:e8:6f:5f:3b:98:55:ce:31:bb:a4:d2:f8:61:ce:dd:92:
         fa:a9:f8:6b:ac:b9:b6:60:0c:e8:8a:c1:03:11:68:0c:0b:fc:
         79:4b:0e:1f:cb:12:cf:ec:99:bf:4e:a3:e0:93:54:e4:01:3e:
         6f:9e:79:ed:c5:9b:0c:00:19:7f:0e:01:0c:9e:fa:40:06:67:
         87:8f:3e:8d:9b:09:48:62:d0:93:f8:d4:cd:b7:61:ae:41:24:
         70:50:18:e7:ca:51:78:0f:61:9b:b6:80:e4:ca:eb:4a:32:ca:
         ee:d3:86:b7:ad:98:1c:22:14:a3:f6:0a:57:ac:91:58:ba:bc:
         81:2a:79:84:c7:fc:21:ef:ab:32:e1:74:ae:81:ad:81:b6:7c:
         5d:f4:7c:f8:cb:bf:3f:fe:91:62:6e:4f:f8:3a:84:4a:bf:7e:
         b7:0b:e1:c3:59:ae:f3:0b:90:73:37:fc:17:7a:b9:08:34:78:
         c2:fd:c4:d2:37:41:39:49:75:4e:4b:48:f1:54:27:bc:6c:89:
         1a:c0:31:75:9b:9a:b9:89:25:c5:77:c1:6f:53:34:32:4f:f2:
         a5:86:46:4b:67:86:57:66:75:a7:b7:9f:f2:44:9a:4f:25:4c:
         2b:8c:d5:47:67:de:06:79:b6:27:7b:d5:82:be:3a:e6:cd:0e:
         0d:16:c8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----