Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/ahRC8rPmLVl5Pc7lLdU4MVa3s9Q.roa
File:                     ahRC8rPmLVl5Pc7lLdU4MVa3s9Q.roa (raw, json)
Hash identifier:          Y+E/Xw9j4jJJACtZM7Yq4TijOnA3dQBy+xiueyvtEEY=
Subject key identifier:   6A:14:42:F2:B3:E6:2D:59:79:3D:CE:E5:2D:D5:38:31:56:B7:B3:D4
Certificate issuer:       /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial:       01856FCB7E319CE7EBD2618578EED66453BE
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/ahRC8rPmLVl5Pc7lLdU4MVa3s9Q.roa
Signing time:             Mon 02 Jan 2023 00:04:45 +0000
ROA not before:           Mon 02 Jan 2023 00:04:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41273
IP address blocks:        83.171.216.0/22 maxlen: 24
                          2a09:2f00::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:7e:31:9c:e7:eb:d2:61:85:78:ee:d6:64:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
        Validity
            Not Before: Jan  2 00:04:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a1442f2b3e62d59793dcee52dd5383156b7b3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:fa:fb:d5:65:d6:33:7c:33:ba:51:52:2c:
                    aa:78:77:17:d6:1f:cf:d4:0d:98:ff:22:ab:b7:3a:
                    89:3b:5c:a3:f4:2d:77:e1:ec:f6:03:fb:1c:1d:3a:
                    89:40:dd:91:3f:07:de:7d:fe:42:17:53:37:cd:ec:
                    15:03:a9:d9:03:67:34:a9:f0:78:78:3c:5b:8d:65:
                    5b:37:0d:3e:59:b7:47:35:f8:34:af:a5:2d:0c:53:
                    c5:0b:62:f7:ff:3c:6f:fa:53:47:67:2f:c6:0a:9d:
                    60:a6:f8:72:21:c1:4b:28:f2:d7:23:64:1e:b6:26:
                    4b:19:26:cb:ef:09:75:85:ee:5e:6b:73:78:6f:d1:
                    f7:9d:f4:80:15:54:55:8a:c2:65:f6:fd:19:4f:a7:
                    22:9d:a4:7d:72:a6:24:15:a6:0a:be:ab:f9:aa:e0:
                    fe:a2:dd:fe:fe:54:fe:bd:8f:df:c0:99:c3:2a:f0:
                    4a:62:b3:91:57:ea:f5:4c:43:ac:a6:c3:e6:81:db:
                    94:60:35:52:37:db:de:d2:2c:94:07:a3:f5:15:58:
                    1a:f0:41:23:84:c3:e2:05:f5:8a:5d:9a:24:2c:95:
                    32:26:0a:73:75:05:88:34:45:19:78:90:1f:ea:02:
                    71:cb:6e:44:af:b9:ae:cc:0e:bc:1f:7e:44:87:33:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:14:42:F2:B3:E6:2D:59:79:3D:CE:E5:2D:D5:38:31:56:B7:B3:D4
            X509v3 Authority Key Identifier:
                keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/ahRC8rPmLVl5Pc7lLdU4MVa3s9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.216.0/22
                IPv6:
                  2a09:2f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:98:46:75:e9:21:28:b1:7b:4a:c6:62:69:5e:c7:50:8e:
         2a:74:0a:45:78:a2:c8:73:f4:9d:3d:0d:61:67:ce:6f:e4:ff:
         99:ed:17:fd:59:95:b9:c3:e1:83:e7:68:8c:bd:1a:94:26:d1:
         ae:c5:f0:3b:02:1a:e1:14:a1:66:41:98:86:d8:0c:19:e3:3c:
         7d:67:b2:9b:bb:ec:60:66:39:ee:92:cb:1f:d4:de:cb:62:42:
         ba:44:ff:dc:34:e2:5b:4c:56:88:f2:81:6c:6b:a5:45:9d:3d:
         79:2d:a7:8d:46:bc:62:f4:fd:12:49:58:51:bc:6f:63:25:0c:
         39:0e:62:ac:a4:ab:f7:61:ca:0e:06:2f:ee:43:ba:f4:f1:22:
         b2:12:4a:7e:f3:8d:71:fe:4c:37:8f:de:b3:28:69:42:32:e0:
         12:42:1b:73:3f:bf:11:52:5e:81:f8:3c:1c:a8:62:52:59:53:
         f2:50:af:4c:4b:8b:68:d7:ca:79:2d:d7:3f:21:67:6f:3c:c6:
         d6:e2:4d:3e:54:38:c1:ec:23:8d:d6:b7:76:1a:6a:1c:8e:b6:
         ed:5f:98:c6:7b:0e:51:2a:e7:9d:15:09:ca:fc:07:9b:65:7e:
         fb:23:7b:67:fe:29:31:a0:ab:34:6c:45:ad:34:ac:c2:5c:7d:
         5c:24:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----