Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa
File:                     zADANQcZ7AzoOXzq-N3LwMuKAxA.roa (raw, json)
Hash identifier:          qwFd1s78VpSBcKl6yBckp/qvw/yfjjCzWDalNQW0cS4=
Subject key identifier:   CC:00:C0:35:07:19:EC:0C:E8:39:7C:EA:F8:DD:CB:C0:CB:8A:03:10
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       018618683AEF779D496C2B8A546D3F3D5A42
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa
Signing time:             Fri 03 Feb 2023 17:52:09 +0000
ROA not before:           Fri 03 Feb 2023 17:52:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.162.0/23 maxlen: 23
                          45.87.161.0/24 maxlen: 24
                          45.87.160.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b86:1::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 40
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2010::/44 maxlen: 44
                          2a04:5b81:2060::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:18:68:3a:ef:77:9d:49:6c:2b:8a:54:6d:3f:3d:5a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Feb  3 17:52:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc00c0350719ec0ce8397ceaf8ddcbc0cb8a0310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:fa:43:7c:18:83:3a:ef:ee:cd:ab:cb:44:
                    79:21:87:d6:e3:d4:6c:c7:f9:b0:99:c8:5a:0f:b9:
                    e4:10:21:08:50:15:f8:3e:29:c2:ac:f1:01:ac:a7:
                    25:6e:fb:6a:a4:3a:3c:db:7b:47:15:65:8a:be:97:
                    89:65:89:b9:bb:34:3f:c0:e4:cb:d2:94:49:f2:8f:
                    1b:70:b1:1b:ef:cf:9b:25:1f:20:17:92:cc:8b:e7:
                    d6:c3:ab:6e:63:56:19:37:50:a1:4a:25:63:5c:ab:
                    3e:9a:75:11:9b:a7:40:b7:01:69:d1:a2:d8:77:b0:
                    0d:85:f3:cf:39:24:c8:0a:f4:e4:6e:d4:7f:f0:a9:
                    12:7a:a2:7d:fb:cb:38:23:c5:8d:a6:77:31:2e:81:
                    e9:76:91:44:57:ec:89:56:75:fe:cb:31:5b:c3:e1:
                    d8:2e:eb:7d:4d:75:69:30:a8:6e:0a:49:9d:b6:e8:
                    cd:e9:72:68:85:fd:5b:fd:1a:74:26:4d:4b:b9:59:
                    ec:de:58:03:92:94:eb:1b:ac:77:73:e3:30:d9:7e:
                    29:41:1c:ca:9d:78:a8:c6:34:df:1a:2a:e0:1f:17:
                    01:48:9b:10:0c:0f:90:16:f2:7a:62:35:c3:cb:51:
                    3b:82:99:08:dd:1a:de:61:fa:ef:e3:15:43:c9:97:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:C0:35:07:19:EC:0C:E8:39:7C:EA:F8:DD:CB:C0:CB:8A:03:10
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zADANQcZ7AzoOXzq-N3LwMuKAxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/22
                IPv6:
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b81:2060::/44
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b86:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:16:ec:49:79:15:2c:52:a7:49:a8:89:57:03:8a:a3:bf:2e:
         9f:70:d9:5f:59:2e:f2:12:e0:18:3e:28:f3:fc:1b:20:1d:61:
         67:14:a3:67:fb:93:b7:5b:61:83:ff:19:b9:75:f4:f7:e1:c1:
         97:a9:89:ac:4c:0d:7c:5a:0d:28:f4:8d:37:d1:21:6d:4f:68:
         b5:11:3f:77:fe:05:fa:8b:77:f1:a9:81:ef:86:ae:11:39:e7:
         f6:91:79:3f:43:b7:b5:1c:45:38:83:ef:72:09:e8:55:58:67:
         20:a1:c3:84:7b:c9:33:74:92:bc:0d:8c:81:83:e7:64:4c:49:
         1b:39:21:a3:a3:f7:39:82:1c:28:a9:84:92:84:10:8c:47:4f:
         91:79:ce:fa:5b:18:b4:5f:9d:c9:25:fb:d0:e8:8b:a3:85:eb:
         a9:37:50:58:dd:31:26:53:f9:4a:b3:6a:4a:90:16:d0:e2:8d:
         2b:3e:9b:65:90:0a:8a:31:63:22:18:4b:00:1f:b2:0d:49:e7:
         54:45:cb:ba:52:76:cd:fc:1b:a8:8e:56:cd:95:cd:f0:78:78:
         e7:5c:87:ab:30:a4:42:a1:fe:7e:25:96:93:5d:e4:a7:f3:72:
         72:a3:d6:15:3b:34:22:d7:75:b3:db:9d:d7:50:bc:61:df:ff:
         74:e5:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----