Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/iMlMDWYM326ErKjBFqUNnGVUuhw.roa
File:                     iMlMDWYM326ErKjBFqUNnGVUuhw.roa (raw, json)
Hash identifier:          utLAb5LWv30Otc4Eh6isUBssvnP33+z0dlYAWPuRm7k=
Subject key identifier:   88:C9:4C:0D:66:0C:DF:6E:84:AC:A8:C1:16:A5:0D:9C:65:54:BA:1C
Certificate issuer:       /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial:       018572B3F29D23E9BECEECD24EAE732E89C1
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/iMlMDWYM326ErKjBFqUNnGVUuhw.roa
Signing time:             Mon 02 Jan 2023 13:37:53 +0000
ROA not before:           Mon 02 Jan 2023 13:37:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212499
IP address blocks:        185.206.68.0/24 maxlen: 24
                          2a10:9400::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b3:f2:9d:23:e9:be:ce:ec:d2:4e:ae:73:2e:89:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
        Validity
            Not Before: Jan  2 13:37:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88c94c0d660cdf6e84aca8c116a50d9c6554ba1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:de:a1:2c:89:34:a5:55:ac:f0:28:1c:e8:
                    84:b7:dd:99:47:ab:8b:48:2d:59:d3:44:31:5d:db:
                    01:29:0e:fc:78:9a:bd:21:5a:b7:66:ea:87:e4:be:
                    b3:d9:0f:57:58:03:c1:f9:05:98:99:b0:02:82:a5:
                    fa:bf:cf:30:a3:74:fa:02:fc:b8:26:a6:ee:67:d1:
                    37:2b:b8:98:65:6e:39:d3:10:c5:06:02:6f:d5:f1:
                    e7:3e:7b:cb:6b:df:bc:2d:8d:fe:4b:80:5a:37:73:
                    95:e9:00:19:69:98:1e:e1:fa:10:44:2d:ff:9b:bf:
                    e4:d5:1a:df:3e:86:32:e8:f1:31:67:5a:87:6d:98:
                    2d:05:30:55:95:fa:1e:ba:d8:d0:b9:58:73:7c:70:
                    b5:7e:2c:42:30:6e:a8:1d:3f:28:6b:fd:32:7b:6a:
                    de:7d:24:10:d1:e2:30:43:ef:5a:36:53:74:9c:d3:
                    c9:49:79:78:aa:18:28:90:ac:25:ff:04:b5:92:56:
                    f9:1a:c7:fb:e5:5f:f1:ad:f2:ad:47:6f:e0:98:69:
                    58:fd:cb:b0:88:8a:91:73:08:0e:7b:2f:dc:b0:19:
                    ab:d9:e4:8a:53:46:6c:8c:9c:9f:be:c3:33:24:08:
                    dc:2f:b9:a0:6c:3d:8a:6b:7f:6e:db:d5:63:a2:2f:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C9:4C:0D:66:0C:DF:6E:84:AC:A8:C1:16:A5:0D:9C:65:54:BA:1C
            X509v3 Authority Key Identifier:
                keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/iMlMDWYM326ErKjBFqUNnGVUuhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.68.0/24
                IPv6:
                  2a10:9400::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:43:d3:44:ba:91:d7:5e:ba:8e:63:cf:da:e0:84:36:aa:
         33:63:37:ca:51:af:ac:11:95:c0:9c:56:4f:ce:61:e0:ed:7b:
         3d:a1:60:3c:de:4d:03:d8:43:d2:2a:e0:a0:c8:c0:98:ed:1f:
         c4:60:9b:74:18:0f:ef:62:94:ff:72:31:df:ee:55:ff:b6:a5:
         e2:6f:49:e2:f7:45:8f:94:c2:e0:d0:ce:2e:ed:b7:7f:7b:b1:
         4f:b6:7c:0a:85:57:4f:57:22:82:23:d3:83:f9:3e:36:d5:41:
         a0:9a:45:d0:a8:59:80:3d:3e:06:35:19:13:56:7d:27:71:89:
         66:79:7f:fb:b5:3d:74:48:75:dc:ae:57:1d:49:a4:1e:63:4d:
         6e:37:b1:cf:f3:a6:f2:54:6f:26:aa:18:0c:fe:1b:52:3d:1d:
         9e:34:63:ea:44:a3:69:14:f1:f3:ee:62:4b:b3:b3:fa:8b:3d:
         0f:b3:74:d8:f9:33:4c:e8:67:95:62:4f:3e:ab:d0:74:38:ca:
         4a:b6:ee:be:9d:79:2a:94:9c:73:8f:dc:23:c3:61:40:23:8b:
         48:82:aa:a8:ce:9f:ab:e1:1c:22:a3:50:a7:8d:a8:cd:9a:88:
         61:73:e2:9e:a7:bc:f2:dc:71:5c:a8:70:b7:50:f8:fc:7e:cc:
         93:a1:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----