Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/FwVDuwOdsIm-Ni34mqGHDnLbkd8.roa
File:                     FwVDuwOdsIm-Ni34mqGHDnLbkd8.roa (raw, json)
Hash identifier:          dfX9L/ecjyVXEzT92TApq50TXN03iebCzn9Wj7da1V0=
Subject key identifier:   17:05:43:BB:03:9D:B0:89:BE:36:2D:F8:9A:A1:87:0E:72:DB:91:DF
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       01856D419B13441ADC63F5B767860ECE78ED
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/FwVDuwOdsIm-Ni34mqGHDnLbkd8.roa
Signing time:             Sun 01 Jan 2023 12:14:54 +0000
ROA not before:           Sun 01 Jan 2023 12:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25376
IP address blocks:        185.108.44.0/22 maxlen: 24
                          2a01:8560::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:41:9b:13:44:1a:dc:63:f5:b7:67:86:0e:ce:78:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Jan  1 12:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=170543bb039db089be362df89aa1870e72db91df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:0f:59:d7:f7:b4:97:dd:54:46:ee:d7:49:
                    02:68:de:08:e5:3b:62:c8:a4:a9:6a:ef:e5:99:51:
                    5d:fe:67:25:e6:c1:c2:de:18:8d:1a:07:a4:13:59:
                    72:ab:67:e2:77:78:d5:ed:69:46:7e:62:4d:f6:cb:
                    f6:6c:ac:0b:5e:cb:5a:c3:d8:10:61:46:a8:c5:17:
                    f4:52:54:bf:4d:92:5a:c3:a6:28:3f:83:71:45:33:
                    a3:f9:1e:32:9e:ac:87:46:c9:58:5f:87:d6:c9:00:
                    01:81:8c:72:bf:aa:6b:07:49:c8:81:32:b0:a0:94:
                    87:7f:ed:2f:0d:22:0d:c5:05:dd:ec:7f:72:94:84:
                    fb:8a:e6:e3:ec:70:83:5d:15:a3:fc:7d:7d:b9:94:
                    7f:57:98:50:4f:f0:3a:7c:82:25:e6:ad:b3:0d:c6:
                    60:76:4b:6f:37:8c:45:6b:02:8f:9b:06:1f:96:60:
                    f1:80:f0:3c:56:10:aa:0e:42:56:46:2f:27:92:bf:
                    3d:d5:e0:b0:a0:97:fc:0a:3d:ab:42:08:a1:69:06:
                    5b:07:90:b8:f1:09:60:e6:53:2b:1e:db:2a:d9:27:
                    37:60:5d:d3:42:42:15:ce:54:12:b6:74:a0:68:25:
                    38:7d:dd:a7:ab:2d:c3:c6:0c:bb:9c:09:43:bc:61:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:43:BB:03:9D:B0:89:BE:36:2D:F8:9A:A1:87:0E:72:DB:91:DF
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/FwVDuwOdsIm-Ni34mqGHDnLbkd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.108.44.0/22
                IPv6:
                  2a01:8560::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:30:45:c9:d7:30:51:35:3e:8b:05:5e:70:bb:71:d3:fc:
         48:30:29:03:af:80:53:c4:a8:2f:cd:74:70:e8:73:c4:0e:78:
         dc:65:d6:ce:2b:30:92:c2:98:83:83:03:81:42:01:07:99:93:
         cc:76:b6:75:20:28:fa:72:f2:4e:9e:f5:ed:27:1d:38:a7:27:
         39:91:9f:60:c0:ce:70:37:3b:c9:df:72:53:ed:97:8b:1c:ff:
         ec:54:8f:dd:b2:09:79:e4:61:cf:d8:b2:30:19:cd:0b:b5:db:
         83:da:89:42:ea:bf:78:52:3d:5e:fa:40:b2:d8:cc:28:13:6b:
         55:83:1e:af:81:f3:e5:bc:50:e6:1d:1f:e9:10:45:76:4d:e8:
         5e:6d:06:4d:4c:55:e8:0b:16:84:87:df:eb:a6:fe:9b:79:a9:
         b6:96:90:32:55:0d:d9:62:15:e7:e2:4b:60:6f:98:62:96:94:
         0e:96:c5:fa:c7:b0:16:cb:da:72:b2:57:11:4b:58:94:77:0f:
         28:8b:0b:de:26:07:ff:26:4a:5a:08:eb:2b:f8:09:b8:dc:33:
         fa:8d:62:01:16:36:d0:b6:ed:fb:f5:5e:52:ea:01:2a:02:5a:
         41:78:5a:56:3c:54:4e:14:4d:da:c8:05:01:2c:c1:62:94:99:
         cf:53:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----