Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa
File:                     o-Clinf7CVod9-wDUKthGzHxxVw.roa (raw, json)
Hash identifier:          bQoo4a9Uq18Y2B/5m56L8Tz+eV6QsmYWNW2KHk9sYc0=
Subject key identifier:   A3:E0:A5:8A:77:FB:09:5A:1D:F7:EC:03:50:AB:61:1B:31:F1:C5:5C
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       0186BE3C2EC698DD8CDFFB24AC572CF46BF3
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa
Signing time:             Tue 07 Mar 2023 22:41:00 +0000
ROA not before:           Tue 07 Mar 2023 22:41:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208171
IP address blocks:        185.224.30.0/24 maxlen: 24
                          2a12:8d40:1024::/48 maxlen: 48
                          2a12:8d40:2022::/48 maxlen: 48
                          2a12:8d40:4096::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:be:3c:2e:c6:98:dd:8c:df:fb:24:ac:57:2c:f4:6b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Mar  7 22:41:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3e0a58a77fb095a1df7ec0350ab611b31f1c55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:bc:53:aa:4e:00:c1:b4:3a:df:f5:01:fa:
                    ab:90:ce:3a:f1:33:0a:6e:86:d2:5a:10:b0:c8:20:
                    7e:14:5d:d9:bb:5f:6d:60:f6:2d:0c:59:57:e9:fe:
                    5c:b3:5d:a8:d7:4e:17:32:60:c6:b8:6f:8d:eb:99:
                    dc:d7:20:45:be:e9:71:57:61:71:0a:d2:e5:cd:ea:
                    17:1b:58:6c:48:33:6e:de:db:3c:c8:28:7a:68:a3:
                    33:3d:d7:47:c6:8a:37:99:11:33:5b:1b:da:ae:67:
                    cc:eb:46:94:f0:ef:39:60:5f:07:66:8c:46:28:f0:
                    8a:b1:43:45:1e:76:55:26:de:04:68:18:48:1e:45:
                    ea:0f:9c:0b:2e:40:55:f5:6a:55:1a:cd:63:85:e0:
                    c3:70:b6:c7:d6:35:8a:35:f7:b0:57:9c:e3:50:4f:
                    eb:b0:37:c9:48:96:5d:7b:68:91:1f:4e:30:53:e6:
                    aa:d8:6e:31:e6:a6:2d:a3:23:d1:3b:0f:50:9e:7a:
                    82:4b:c6:a8:fa:c0:4a:69:eb:68:e4:67:1c:c2:3b:
                    10:f7:44:bd:b9:d4:89:fe:e0:cf:e3:f9:db:ec:04:
                    9e:76:af:88:7c:4f:e6:a2:be:4e:80:c9:4f:9a:09:
                    99:0f:cf:eb:51:2e:cb:06:8b:fa:ff:5d:64:e0:e5:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:A5:8A:77:FB:09:5A:1D:F7:EC:03:50:AB:61:1B:31:F1:C5:5C
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/o-Clinf7CVod9-wDUKthGzHxxVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.30.0/24
                IPv6:
                  2a12:8d40:1024::/48
                  2a12:8d40:2022::/48
                  2a12:8d40:4096::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:16:05:66:89:bf:ad:3e:4b:ac:2d:56:61:72:53:39:2d:3d:
         51:fd:e0:6a:45:47:79:2f:1f:7e:9b:3f:18:06:6d:5c:75:ba:
         4a:a7:cd:b5:31:9b:8d:1c:e9:ac:49:45:18:fb:ab:8c:b7:3f:
         47:95:92:fb:88:3e:75:30:a7:11:ba:95:f3:c3:b0:69:bf:ae:
         6a:aa:f9:30:a6:ba:6c:d9:90:fd:d7:ac:73:92:6c:7e:06:40:
         f4:89:46:19:55:dd:da:be:de:d5:ee:6b:15:df:a4:3c:5c:b2:
         d8:a9:4a:c4:7e:7c:d8:51:dc:c3:33:fd:8f:16:71:55:99:18:
         6a:1b:98:c3:4d:6f:73:a2:70:a6:28:ed:1d:49:70:6f:b4:7f:
         07:d4:db:ba:64:04:a3:d6:58:c5:46:7a:05:6b:94:dc:d1:3f:
         c0:61:8f:7e:95:c1:f2:db:c0:a5:02:65:19:45:41:6a:44:dd:
         52:b6:35:da:db:af:1c:4c:0d:82:dc:54:9c:a2:8d:2b:75:72:
         be:17:93:21:2f:30:8a:c5:67:ee:20:2d:b4:03:dc:6e:2d:60:
         e0:2c:18:de:7c:d6:28:ab:2f:35:e5:69:71:57:6f:07:be:72:
         5d:11:8d:0b:62:48:f3:00:1f:d0:43:2d:68:83:ec:22:50:59:
         8d:40:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----