Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/GFexdHKJF-HST4VDrF3AO0h76JI.roa
File:                     GFexdHKJF-HST4VDrF3AO0h76JI.roa (raw, json)
Hash identifier:          qCjEkg5xZOF48BgOuYBViUaFq+M6AQqK4zmuglPZo1E=
Subject key identifier:   18:57:B1:74:72:89:17:E1:D2:4F:85:43:AC:5D:C0:3B:48:7B:E8:92
Certificate issuer:       /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial:       018570D5493291974CD277EC4F62B4F274E7
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/GFexdHKJF-HST4VDrF3AO0h76JI.roa
Signing time:             Mon 02 Jan 2023 04:55:04 +0000
ROA not before:           Mon 02 Jan 2023 04:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.73.224.0/24 maxlen: 24
                          2a10:f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:49:32:91:97:4c:d2:77:ec:4f:62:b4:f2:74:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: Jan  2 04:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1857b174728917e1d24f8543ac5dc03b487be892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:cb:d7:55:e0:2c:a1:6d:7b:e7:fe:19:6e:
                    ca:06:9b:42:93:41:2d:5f:06:ec:b8:be:93:bb:25:
                    11:91:e5:cc:6c:10:9d:17:3a:bb:5b:3a:99:de:5a:
                    9d:3f:71:ef:ed:27:21:8c:71:c9:3a:4d:0f:f8:b8:
                    7a:49:ff:a2:fa:92:aa:6c:44:70:30:e4:0f:83:ab:
                    6b:66:c5:97:ff:39:55:08:32:e6:72:6e:1e:35:d3:
                    eb:5a:d8:00:f5:46:03:83:7a:53:c0:1a:0e:2b:ce:
                    2a:5e:1f:fe:27:a0:7e:ea:ac:a7:c2:36:e4:08:0e:
                    b2:a5:7c:f4:f8:0a:a0:97:c4:06:45:30:7d:9b:a3:
                    86:50:7c:b1:0b:18:2a:71:27:84:ef:57:8e:46:a1:
                    82:a5:f9:59:7d:e1:c2:e8:91:0e:de:a9:89:7b:bc:
                    3a:94:36:c3:f5:bf:cf:af:ee:58:02:a4:0d:74:e4:
                    9e:7a:4b:d4:33:8c:c9:6d:28:6f:d2:f0:06:0f:e0:
                    dd:c7:76:15:36:a5:1a:36:84:77:f8:24:78:f3:4e:
                    11:af:df:ef:0b:9e:95:e8:be:81:20:5d:c5:5b:3b:
                    e2:8c:7a:58:19:bc:a7:b2:03:d4:cd:33:73:d7:34:
                    9c:96:af:31:15:00:66:c1:e7:1d:34:82:34:2e:be:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:B1:74:72:89:17:E1:D2:4F:85:43:AC:5D:C0:3B:48:7B:E8:92
            X509v3 Authority Key Identifier:
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/GFexdHKJF-HST4VDrF3AO0h76JI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.224.0/24
                IPv6:
                  2a10:f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:ad:8f:47:91:0a:61:6f:44:95:2b:cc:71:11:ac:bc:15:bb:
         03:5f:21:96:f8:5c:f7:9f:0a:c8:bc:13:23:f6:5e:13:91:e8:
         16:94:5a:56:37:3b:f2:83:4c:13:e7:c2:6c:77:7e:3d:24:c2:
         19:31:14:e2:c9:7c:ad:51:8d:e3:e2:8c:5b:8a:16:1f:30:55:
         e0:4d:0f:86:1e:d9:09:60:85:20:19:e4:29:0f:8c:7c:52:8b:
         36:53:38:31:f7:46:65:2f:71:53:7a:b1:ee:f0:15:7c:73:7e:
         2c:24:02:42:f4:43:74:b3:74:11:1d:da:0e:4f:dc:a0:d1:cd:
         f3:dc:52:d6:9f:a1:ce:d8:d1:fb:4b:79:55:58:5f:38:ee:43:
         44:39:70:66:57:17:f8:95:16:6d:2b:0b:a7:c0:a7:30:19:25:
         81:13:b8:35:12:53:48:6a:a0:69:57:79:1b:31:6a:67:31:6f:
         0e:80:18:ce:4f:69:cc:e9:44:9d:d0:d3:5c:db:1e:2b:40:40:
         2f:1e:b8:8b:8f:da:ac:30:ef:43:95:99:f6:85:b0:b2:b7:d6:
         e2:d9:a8:a3:da:dc:33:0f:4c:09:41:dd:40:85:cc:7b:6a:bb:
         b0:b3:78:47:4d:d2:fb:86:43:44:35:06:c9:fc:12:82:e4:e2:
         08:47:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----