Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa
File:                     fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa (raw, json)
Hash identifier:          pSl7/dd3MGc2wUGE9feDCJsCcUvst6TP8xaIR8ad+XQ=
Subject key identifier:   7E:FF:6B:71:04:39:4C:13:38:CC:7C:90:6E:DF:6E:A7:F3:5A:CF:94
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       018570D55A8B32D40273287E824C51CC57FD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa
Signing time:             Mon 02 Jan 2023 04:55:08 +0000
ROA not before:           Mon 02 Jan 2023 04:55:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        91.226.31.0/24 maxlen: 24
                          2a06:d641::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:5a:8b:32:d4:02:73:28:7e:82:4c:51:cc:57:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Jan  2 04:55:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7eff6b7104394c1338cc7c906edf6ea7f35acf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:f8:f8:92:0c:ff:26:3a:a0:72:fe:a6:4a:
                    fe:1a:a9:ca:2c:f0:ae:42:5f:67:98:d1:51:a2:77:
                    5d:03:36:ff:00:02:e8:9c:ff:8b:64:01:fe:af:6b:
                    7a:b7:fc:0f:00:f7:f3:73:81:91:b8:13:45:8a:9e:
                    40:a5:d9:3d:ae:60:6d:3d:c8:ff:ac:81:6b:b3:94:
                    4e:99:a4:5d:6e:5e:c4:2d:c3:29:de:08:27:5d:a0:
                    a9:fc:a0:11:14:ae:e6:c9:13:c3:fb:54:2e:3a:10:
                    fa:33:c3:27:c1:77:f0:47:6e:de:1e:8e:dc:6d:2c:
                    67:10:f5:f5:f3:2f:fc:2e:cc:cd:a4:0d:15:ea:68:
                    0b:ac:03:03:f0:6f:99:ad:29:01:28:67:74:6d:de:
                    bd:14:3a:50:06:5b:5d:73:33:bd:4f:62:23:75:08:
                    f6:71:c4:94:13:32:69:cd:25:cb:bb:95:9e:83:ff:
                    dd:a9:27:5b:c1:89:38:5c:d0:0a:fd:71:72:b3:40:
                    3a:e9:1d:20:3e:a2:6a:39:09:8b:75:e4:f3:86:2d:
                    67:9a:bf:32:5b:10:4c:cb:1e:e1:33:39:e4:4f:f1:
                    7f:49:86:ce:65:20:7a:f6:b9:52:a3:cf:fb:8b:66:
                    db:9b:09:83:e2:1a:7f:49:3b:4f:6a:dc:22:d6:9e:
                    f8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:6B:71:04:39:4C:13:38:CC:7C:90:6E:DF:6E:A7:F3:5A:CF:94
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.31.0/24
                IPv6:
                  2a06:d641::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:87:52:17:c9:30:dc:33:f3:0c:d3:24:48:a3:55:9b:07:cc:
         de:5b:03:9f:d5:95:35:8c:1c:4e:8c:15:18:5b:e8:dd:2a:74:
         c0:2e:d2:62:88:3d:26:94:10:65:81:dd:0a:7a:23:b2:34:9f:
         db:6b:46:ae:6d:b8:16:c4:c9:46:da:08:41:28:cf:5d:7b:70:
         cf:e2:16:66:92:28:ee:99:c9:99:6c:86:d8:72:03:8a:e9:82:
         a9:08:8b:8d:68:2d:e0:8b:96:57:de:30:a4:72:52:b3:03:c4:
         61:91:00:19:9a:f8:f0:05:66:72:b2:7a:88:e0:cc:bc:4c:43:
         1a:9b:86:0c:91:e2:4c:15:52:5d:44:e3:20:71:65:03:6b:61:
         b4:d9:34:d7:40:97:76:03:89:c3:82:d4:5f:01:e1:a2:65:be:
         37:2b:9f:0c:80:b3:11:37:8a:94:ec:35:8e:22:d1:f5:38:54:
         64:4c:58:ce:26:b5:ae:a9:21:1a:21:66:9f:7a:e8:b7:aa:3e:
         bc:ef:ef:ce:0b:62:ea:b1:32:9a:84:cb:43:46:56:e3:63:9d:
         e6:75:59:8a:8e:ab:7a:10:a9:84:f5:5c:1a:fe:da:c5:eb:7f:
         33:84:99:c4:df:c6:25:49:24:8b:4a:a7:8d:9e:7a:2d:a7:0f:
         99:9f:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----