Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/s1svTXKvfQyxxwBC656YEeIAWMI.roa
File:                     s1svTXKvfQyxxwBC656YEeIAWMI.roa (raw, json)
Hash identifier:          /SVad0Dw26LO441hnOrbWOUx0NeG0rYurc79AfLX0CQ=
Subject key identifier:   B3:5B:2F:4D:72:AF:7D:0C:B1:C7:00:42:EB:9E:98:11:E2:00:58:C2
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       01856CAF1033CF71267756FA6FA9B98B8C61
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/s1svTXKvfQyxxwBC656YEeIAWMI.roa
Signing time:             Sun 01 Jan 2023 09:34:50 +0000
ROA not before:           Sun 01 Jan 2023 09:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204668
IP address blocks:        185.175.8.0/23 maxlen: 23
                          2a0d:180::/31 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:10:33:cf:71:26:77:56:fa:6f:a9:b9:8b:8c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jan  1 09:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b35b2f4d72af7d0cb1c70042eb9e9811e20058c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:84:c0:90:74:ab:4a:f8:e9:a0:7f:0f:52:
                    b6:1b:31:8c:19:60:0e:2c:3e:21:c6:98:93:6b:27:
                    d5:3b:a2:1c:15:70:a5:32:9f:b0:d9:50:09:65:3a:
                    40:c1:c1:56:8d:66:5b:99:87:65:38:b2:3e:c4:4f:
                    c9:a7:ab:bc:4c:41:6e:00:08:7c:5f:e8:eb:80:53:
                    48:ed:cf:13:16:c0:b4:e4:66:b9:98:a1:ca:60:3d:
                    13:57:6a:af:29:1e:49:2a:11:1f:a3:b1:b6:35:9d:
                    c0:1f:ef:3f:6b:f0:7d:c0:7d:40:64:b4:52:ab:28:
                    87:06:c1:cd:0a:6c:7c:9d:c7:a7:67:80:e9:b6:3c:
                    83:f7:16:ec:a0:4b:a1:96:e6:88:f1:2f:44:ae:4c:
                    92:64:08:20:ad:46:ac:2a:4c:bd:a9:50:ea:65:b1:
                    b6:54:e0:95:e1:e3:0b:e7:1f:a4:7c:76:5d:02:10:
                    de:e2:5d:4c:c0:86:2b:2b:f3:0a:85:57:23:1a:fc:
                    38:1d:5e:e3:97:f1:b4:9b:79:89:5e:6b:e3:a2:20:
                    c6:b3:2d:a4:e0:59:74:69:51:d1:d4:fc:ff:c7:12:
                    e6:1e:0b:5c:c7:34:9b:f6:f1:07:b9:3e:15:bb:f8:
                    74:b8:18:20:2b:5e:8b:c6:56:fc:36:99:90:94:c3:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5B:2F:4D:72:AF:7D:0C:B1:C7:00:42:EB:9E:98:11:E2:00:58:C2
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/s1svTXKvfQyxxwBC656YEeIAWMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.8.0/23
                IPv6:
                  2a0d:180::/31

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:86:e1:9d:22:e3:1c:f3:87:43:45:b4:31:f3:5b:fd:d1:
         aa:b0:d3:ad:36:3b:23:c4:f2:a2:22:16:4c:52:64:42:16:69:
         a8:62:fb:8c:54:ce:5c:70:45:fc:e3:ff:73:2a:46:0c:5f:96:
         9d:88:66:99:2b:48:8d:be:3f:d7:eb:4b:c3:57:03:33:23:24:
         78:ab:68:5f:41:02:0f:60:2f:86:46:4f:59:cc:a9:85:35:56:
         5a:b9:5c:88:56:d8:96:73:1b:dc:db:e8:0a:48:69:61:c8:af:
         cd:8d:be:dc:ba:53:80:04:25:59:21:02:29:8e:3a:39:c2:75:
         d3:09:f6:42:4a:29:4f:ad:49:fe:03:cf:e5:f4:9a:ad:68:68:
         17:89:81:bb:7c:b8:1d:f3:a0:fe:ee:e7:18:56:2e:36:0a:6d:
         4b:ff:f8:f5:5b:1f:80:0a:a6:92:97:d8:3a:14:28:15:5b:c2:
         bc:bb:e0:a6:41:b0:9d:49:67:47:05:0d:a9:c2:d7:e0:10:ad:
         f1:cc:47:5d:2e:76:10:97:8c:86:c9:be:08:24:b0:ef:a6:9d:
         d9:d4:12:30:a0:02:b8:2c:c0:b6:a8:32:2c:aa:92:32:e7:cb:
         63:80:80:d3:e1:c8:45:5d:d4:9b:1d:03:a0:e4:96:c0:d2:08:
         6f:9c:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----