Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa
File:                     DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa (raw, json)
Hash identifier:          4/JQq6Fy9YUZN9tY5Ed2pR0j8LXKq/UJkYuaCgffgiI=
Subject key identifier:   0C:1E:0B:16:BE:76:8F:FF:99:B1:95:C6:07:B7:4A:64:AB:12:A5:95
Certificate issuer:       /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial:       0185701ED46B88B14845155621DA5EF7F024
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa
Signing time:             Mon 02 Jan 2023 01:35:46 +0000
ROA not before:           Mon 02 Jan 2023 01:35:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203180
IP address blocks:        185.142.172.0/22 maxlen: 24
                          2a0d:540::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:d4:6b:88:b1:48:45:15:56:21:da:5e:f7:f0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
        Validity
            Not Before: Jan  2 01:35:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c1e0b16be768fff99b195c607b74a64ab12a595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:3e:e6:6a:0f:5a:0d:9f:2f:a4:94:90:a6:
                    41:97:79:eb:01:2f:2d:41:4c:95:dc:e5:25:13:51:
                    93:8c:b6:53:c8:97:91:cc:b5:bd:3e:5e:89:fb:ba:
                    b8:e1:f3:e9:a0:c2:84:da:71:c0:f4:7a:77:2e:fb:
                    79:87:2a:08:03:54:c3:c7:58:c6:57:2d:75:ef:fc:
                    36:a3:02:9b:49:39:9d:82:81:bc:e8:10:09:98:b5:
                    01:72:82:06:96:cf:71:c3:c9:30:00:58:32:c6:1f:
                    d4:68:ee:35:3b:91:d0:5e:ef:89:22:d2:99:e4:58:
                    3a:6f:d1:a1:7d:49:95:c9:04:aa:24:3d:dd:61:1c:
                    ea:07:18:c9:5a:6e:3a:6e:15:6d:16:f7:c6:81:f0:
                    d4:84:52:a9:19:f2:db:cd:62:ba:86:44:96:68:3f:
                    ae:8a:98:8d:83:42:78:90:16:1e:6f:0b:5a:18:48:
                    58:12:15:e7:ae:fa:97:ad:7c:53:04:ab:36:c8:85:
                    b5:6a:a5:16:6f:af:70:5d:80:b4:a6:ee:69:ef:60:
                    80:2a:20:fb:f3:c3:dd:5f:5f:ac:a0:f1:64:2b:0d:
                    da:70:83:07:50:57:5d:62:ee:e9:b1:76:e6:ff:cb:
                    d6:dd:fc:a9:7d:88:67:d2:7a:c0:36:f1:26:91:5b:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:0B:16:BE:76:8F:FF:99:B1:95:C6:07:B7:4A:64:AB:12:A5:95
            X509v3 Authority Key Identifier:
                keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.172.0/22
                IPv6:
                  2a0d:540::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:49:a6:06:c0:57:fb:1d:2e:e4:51:51:84:67:3f:df:59:
         a3:cc:e7:29:f2:ff:0e:12:f7:2d:f0:31:dd:94:6c:e8:1e:90:
         85:19:05:d0:51:ef:98:40:72:08:35:6c:ca:14:da:9a:56:43:
         87:dc:c9:69:18:73:61:1f:32:c5:04:65:27:e9:95:86:57:76:
         87:cf:6f:63:00:44:8b:c1:66:44:ee:8a:85:9b:57:6f:bf:be:
         c4:5c:b3:53:c8:26:00:ba:65:f3:4d:e1:73:d4:ff:be:a7:b0:
         8c:40:0d:06:ff:8f:33:2c:c5:43:92:66:7a:e5:0c:74:8b:1c:
         c1:24:10:c2:8d:86:3f:d0:25:e3:fc:2b:5f:74:f7:ae:93:3c:
         d3:55:a1:5a:84:5e:03:53:2b:57:27:5a:08:1f:16:bb:8e:48:
         3e:eb:51:d5:2a:21:2d:20:24:84:1f:77:56:1a:3e:50:81:a4:
         e3:c2:c4:2c:98:44:b9:f8:7c:c5:85:c5:a2:7e:8e:27:ad:9d:
         0a:10:25:c6:e6:ca:02:76:8f:94:c4:a8:87:8b:9f:b8:64:6c:
         7c:b4:9c:a1:bf:4c:1c:e6:34:bf:63:6e:a2:3c:ec:c2:79:ea:
         25:47:7d:46:7b:4d:89:59:6c:f1:3d:ae:6c:60:2d:96:a9:51:
         18:7e:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----