Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/E8YETCZugmMxxAsrTpKWbV3sU1U.roa
File:                     E8YETCZugmMxxAsrTpKWbV3sU1U.roa (raw, json)
Hash identifier:          It+nJhKRoZ04WCCGi7GHUVUsT4NBj22dpP5iTwiLK04=
Subject key identifier:   13:C6:04:4C:26:6E:82:63:31:C4:0B:2B:4E:92:96:6D:5D:EC:53:55
Certificate issuer:       /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial:       018570D548A8D03B19B5E2A5E56AAE23A5FF
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/E8YETCZugmMxxAsrTpKWbV3sU1U.roa
Signing time:             Mon 02 Jan 2023 04:55:04 +0000
ROA not before:           Mon 02 Jan 2023 04:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.73.224.0/24 maxlen: 24
                          2a10:f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:48:a8:d0:3b:19:b5:e2:a5:e5:6a:ae:23:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: Jan  2 04:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13c6044c266e826331c40b2b4e92966d5dec5355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:37:9b:78:cd:f4:9a:e7:59:27:c4:7b:1f:
                    ea:20:a1:a6:29:d8:5f:e2:65:25:fb:40:d7:85:0a:
                    ed:07:87:48:50:c8:06:62:01:a8:ce:d1:dc:0d:44:
                    56:34:69:0f:b9:e2:a3:19:c1:d9:9c:32:6c:ad:60:
                    d7:cc:dc:07:96:db:c8:b0:ca:a2:6f:c5:9b:8e:01:
                    74:05:88:71:47:cb:46:c7:d1:59:3a:3e:4b:f7:04:
                    77:d8:9b:64:99:4c:99:61:1c:8c:98:77:d0:d4:7a:
                    8e:db:46:10:ef:16:36:40:8d:84:eb:33:57:16:e4:
                    2a:9c:6b:57:44:b1:33:4d:9c:0c:7c:63:c9:b8:81:
                    15:bc:f6:51:82:5a:e7:73:7b:42:09:db:3a:51:7b:
                    15:47:50:7c:51:c2:3a:11:57:53:35:bd:e6:92:7a:
                    89:37:c0:24:c9:63:42:c3:fd:e3:b4:a0:26:02:c0:
                    fb:9e:12:8e:93:9c:50:a8:d4:15:06:94:15:fe:e0:
                    37:29:6f:c2:6d:b3:a3:96:16:77:76:87:66:12:03:
                    36:0d:3f:a2:32:da:e6:96:b3:5c:14:fe:e5:da:bb:
                    4d:f7:5a:3b:89:f4:ac:63:a6:fd:bd:77:ff:7c:44:
                    0f:29:65:d5:10:7f:8e:f6:6d:00:47:5c:d3:f3:41:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:04:4C:26:6E:82:63:31:C4:0B:2B:4E:92:96:6D:5D:EC:53:55
            X509v3 Authority Key Identifier:
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/E8YETCZugmMxxAsrTpKWbV3sU1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.224.0/24
                IPv6:
                  2a10:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:67:e6:61:be:b7:f8:ba:ad:f2:8e:ed:a0:a2:57:04:8c:
         07:35:40:2e:9a:2e:3f:96:49:7d:e8:a7:87:b0:66:43:39:2a:
         c8:9d:b6:fa:af:09:86:f2:25:5a:16:ca:07:b7:d1:e7:77:37:
         62:ae:06:75:92:b1:9b:3a:35:3e:5e:b3:a0:66:95:58:9b:0c:
         ec:ad:a5:b9:b5:de:ae:30:24:f2:b2:7a:2a:9a:a9:16:76:1a:
         47:74:39:07:62:60:e1:31:4a:13:e8:b5:eb:ae:2d:d6:7a:d7:
         f9:23:39:96:4f:c2:d7:fc:10:71:e3:c4:c3:ff:81:b9:b5:e2:
         a6:60:fa:89:86:29:30:41:56:f2:44:02:ee:9e:d5:3a:6a:cc:
         7c:19:9c:79:05:60:80:a1:14:37:37:0e:ce:f2:1c:c5:2b:17:
         14:ad:64:d7:1e:dd:61:7c:35:4f:87:df:20:f6:23:b7:d4:14:
         f8:69:42:59:0d:8a:e9:44:79:86:20:be:30:ba:65:87:a9:82:
         ff:ac:b5:0b:f2:97:d6:7b:00:f2:79:89:c7:d4:7a:5a:4b:c4:
         b0:a7:22:d3:d2:52:fe:46:4e:c1:0e:c7:4e:e5:11:9f:ac:19:
         47:b3:91:cd:6b:c0:fd:53:ca:6e:ee:c4:da:af:e7:90:67:fc:
         36:c0:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----