Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa
File:                     rzvSdSdGLy8TebgxYHCGn0odTWs.roa (raw, json)
Hash identifier:          N2SxSGzNHt16Qalmq2MeyDujioqsCzMS5obyt6ScUSA=
Subject key identifier:   AF:3B:D2:75:27:46:2F:2F:13:79:B8:31:60:70:86:9F:4A:1D:4D:6B
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       018570953E4E3E6D6BE56BE7FF004FD493BD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa
Signing time:             Mon 02 Jan 2023 03:45:07 +0000
ROA not before:           Mon 02 Jan 2023 03:45:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49319
IP address blocks:        146.120.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:3e:4e:3e:6d:6b:e5:6b:e7:ff:00:4f:d4:93:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af3bd27527462f2f1379b8316070869f4a1d4d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:69:02:57:08:a6:9c:ec:96:fe:9d:c4:e8:
                    2a:6e:ba:de:f6:be:c9:fe:5c:a9:c9:ac:1e:e8:78:
                    1f:17:02:49:49:f6:af:45:19:27:cc:49:f9:f1:80:
                    8b:73:81:5f:c0:a4:45:04:d8:43:3e:be:74:0e:f2:
                    50:ad:69:51:27:b4:6f:56:7f:23:c8:ec:7e:63:68:
                    f1:ef:b6:15:8e:91:9b:03:e3:c6:a3:aa:65:9f:31:
                    18:0c:0e:56:b7:11:2d:35:62:d0:52:32:6f:a0:bf:
                    8d:5c:fc:32:7f:1d:99:93:8f:e1:46:2c:89:29:21:
                    32:ce:87:a0:85:dd:c3:a8:6f:48:64:5a:a6:7f:bd:
                    ef:d6:5c:61:75:b1:2a:f8:df:77:a1:01:6a:d7:09:
                    3e:35:da:ff:87:02:c1:5b:28:54:a5:f2:ba:66:28:
                    8d:b2:df:d2:ad:d5:50:f6:34:32:c2:34:ef:04:73:
                    81:30:2a:21:1d:f7:99:a7:1d:90:07:0a:d5:70:e0:
                    ac:72:fe:e1:ce:a6:3c:ec:58:db:8c:c5:8b:74:97:
                    b6:99:a7:10:91:ca:93:0c:75:31:e2:52:04:8e:3f:
                    18:4c:4e:b1:4b:27:c4:43:54:8d:fc:f7:cc:19:ec:
                    74:b3:43:df:a5:4a:2d:a0:4b:df:9d:c9:96:30:bd:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:D2:75:27:46:2F:2F:13:79:B8:31:60:70:86:9F:4A:1D:4D:6B
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.120.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:9d:f5:6b:94:5a:5c:3e:78:e1:ac:2b:59:88:98:21:63:fd:
         b2:e1:62:fd:db:cf:b9:cd:2a:f7:4d:2c:fa:58:2e:65:4b:27:
         73:df:4c:ca:92:2c:21:f7:ca:b9:93:f1:75:f9:b9:9c:3c:6b:
         2b:cf:63:83:ce:94:d5:a0:fe:5a:f9:48:40:c7:77:c2:45:ae:
         ec:98:e3:fd:7e:df:12:56:b4:2c:8b:51:2b:e9:d4:71:8f:4f:
         9a:0d:1b:b8:da:3b:df:d4:85:eb:27:50:6a:de:55:ad:2b:a2:
         a7:50:39:6f:8d:46:fd:13:ef:ec:24:0a:97:d1:d5:07:31:fa:
         e8:fc:60:c0:3f:32:16:5e:3a:4e:fb:32:27:39:aa:ba:51:56:
         84:d2:65:41:e0:7b:bc:e4:95:66:e4:35:2a:5c:0a:7d:ca:2c:
         35:62:f6:24:70:e8:8d:36:09:9a:02:a3:bf:f4:76:ae:a0:04:
         30:bc:96:f2:a2:da:97:4e:d6:75:f3:c4:3a:7c:dc:85:86:84:
         99:b7:88:66:bb:53:7d:13:5d:cb:fb:d7:6c:3d:57:b0:60:ec:
         93:b8:cd:8d:0a:d9:e8:74:41:c0:d8:b0:ff:67:b9:a1:d6:e6:
         b6:49:95:05:97:39:55:97:97:8f:e2:f1:c8:75:54:32:71:39:
         b0:39:28:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlT5OPm1r5Wvn/wBP1JO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjNiZDI3NTI3NDYyZjJmMTM3OWI4MzE2MDcwODY5ZjRhMWQ0ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ5pAlcIppzslv6dxOgqbrre9r7J
/lypyawe6HgfFwJJSfavRRknzEn58YCLc4FfwKRFBNhDPr50DvJQrWlRJ7RvVn8j
yOx+Y2jx77YVjpGbA+PGo6plnzEYDA5WtxEtNWLQUjJvoL+NXPwyfx2Zk4/hRiyJ
KSEyzoeghd3DqG9IZFqmf73v1lxhdbEq+N93oQFq1wk+Ndr/hwLBWyhUpfK6ZiiN
st/SrdVQ9jQywjTvBHOBMCohHfeZpx2QBwrVcOCscv7hzqY87FjbjMWLdJe2macQ
kcqTDHUx4lIEjj8YTE6xSyfEQ1SN/PfMGex0s0PfpUotoEvfncmWML1bwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK870nUnRi8vE3m4MWBwhp9KHU1rMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvcnp2U2RTZEdMeThUZWJneFlIQ0duMG9kVFdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkni0MA0G
CSqGSIb3DQEBCwUAA4IBAQCrnfVrlFpcPnjhrCtZiJghY/2y4WL928+5zSr3TSz6
WC5lSydz30zKkiwh98q5k/F1+bmcPGsrz2ODzpTVoP5a+UhAx3fCRa7smOP9ft8S
VrQsi1Er6dRxj0+aDRu42jvf1IXrJ1Bq3lWtK6KnUDlvjUb9E+/sJAqX0dUHMfro
/GDAPzIWXjpO+zInOaq6UVaE0mVB4Hu85JVm5DUqXAp9yiw1YvYkcOiNNgmaAqO/
9HauoAQwvJbyotqXTtZ188Q6fNyFhoSZt4hmu1N9E13L+9dsPVewYOyTuM2NCtno
dEHA2LD/Z7mh1ua2SZUFlzlVl5eP4vHIdVQycTmwOSj8
-----END CERTIFICATE-----