Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/EbvBt-bpk-cPT6leFqzkgnHa3UI.roa
File:                     EbvBt-bpk-cPT6leFqzkgnHa3UI.roa (raw, json)
Hash identifier:          fmf+ts8jISvDxdDexBXrlFW84XKTyfmM665m/jG/Vxw=
Subject key identifier:   11:BB:C1:B7:E6:E9:93:E7:0F:4F:A9:5E:16:AC:E4:82:71:DA:DD:42
Certificate issuer:       /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial:       01856FCB819FEC1A2E02F311C6B511306846
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/EbvBt-bpk-cPT6leFqzkgnHa3UI.roa
Signing time:             Mon 02 Jan 2023 00:04:46 +0000
ROA not before:           Mon 02 Jan 2023 00:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49432
IP address blocks:        185.210.224.0/24 maxlen: 24
                          2a0b:5cc0::/29 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:81:9f:ec:1a:2e:02:f3:11:c6:b5:11:30:68:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
        Validity
            Not Before: Jan  2 00:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11bbc1b7e6e993e70f4fa95e16ace48271dadd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:dc:87:12:1c:f1:b5:06:7a:4e:22:6e:12:
                    e4:42:ed:2f:15:92:44:3b:fb:3d:f9:a7:31:fc:7c:
                    4f:8d:b1:98:8b:8f:46:b0:d3:79:26:e2:d7:da:29:
                    28:80:99:ad:0d:b0:7d:b6:55:61:e3:23:fc:cd:9c:
                    52:f8:68:00:57:1e:f4:f8:34:9e:7b:38:97:1f:22:
                    0e:8f:af:1d:b6:66:74:5c:c1:bf:f9:1a:00:97:5f:
                    bb:b3:98:1c:e7:32:d8:d1:dd:c5:be:d9:dd:2a:94:
                    fc:3b:4a:63:0b:50:54:fa:78:3d:a6:c6:c5:46:6a:
                    28:06:1d:8b:87:dd:de:9f:8a:fe:d3:64:d8:80:ef:
                    c3:88:52:42:6e:9e:5e:06:ce:98:26:32:9c:fa:9a:
                    5f:aa:fb:1d:65:61:d7:10:94:85:fe:0c:b1:35:68:
                    21:ef:8b:e4:ec:5a:20:9c:1b:b6:54:8c:20:97:84:
                    00:08:92:7c:2c:8f:ec:c0:d0:86:3c:18:90:b0:35:
                    42:82:ae:d3:38:4b:9f:d8:f4:c8:4d:1a:21:3c:01:
                    c1:4c:6e:91:54:73:96:9e:1f:b6:ec:3a:d5:df:5a:
                    1c:0c:69:d9:11:6c:3d:8b:8c:b1:0b:83:d2:bc:c0:
                    7e:db:2f:90:50:82:c0:d3:a4:84:8b:68:6f:72:f5:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BB:C1:B7:E6:E9:93:E7:0F:4F:A9:5E:16:AC:E4:82:71:DA:DD:42
            X509v3 Authority Key Identifier:
                keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/EbvBt-bpk-cPT6leFqzkgnHa3UI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.224.0/24
                IPv6:
                  2a0b:5cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:aa:c9:27:19:ea:24:fc:2a:47:e0:68:f1:9d:1b:d1:be:
         7f:1a:34:89:5c:65:2f:b4:c1:39:91:55:8e:ac:c7:44:4a:c3:
         dc:7e:60:6c:99:a0:fd:b3:8e:9c:9e:bd:66:b1:9f:23:02:59:
         c1:e4:0a:06:f7:81:ca:07:1b:a0:54:60:79:73:ae:a5:9f:9f:
         f6:9d:b4:4d:b7:01:da:5e:11:45:c2:d9:8c:0a:84:a5:d5:28:
         81:9d:ec:ce:a7:6b:66:e2:bc:36:a3:f1:ab:4a:3f:78:b0:07:
         99:93:46:7a:69:94:bd:8e:d6:ca:f4:d0:34:14:50:7e:75:11:
         d1:02:59:ee:2f:80:07:81:e7:bb:d2:54:5b:30:6f:3e:f8:38:
         3a:86:7b:09:0a:d4:69:f5:0d:ce:06:e9:dc:e7:7d:88:22:22:
         09:e2:2a:e1:32:51:07:93:7b:52:fe:1a:14:b6:32:52:b5:bc:
         e9:f0:85:e7:3e:b6:ae:07:1b:9f:39:f7:c2:55:99:45:66:a9:
         65:b0:ab:cd:36:cf:16:5c:cb:f4:50:55:f6:bc:87:87:8f:cd:
         27:ce:e6:27:bc:0a:29:25:b4:6a:7c:7f:12:72:81:99:1a:fd:
         e4:0e:3b:31:92:04:dd:39:52:3b:9f:67:40:69:80:27:d7:26:
         5b:06:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----