Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/xWCpryj4hzzLV62LDLHvAVg2kNs.roa
File:                     xWCpryj4hzzLV62LDLHvAVg2kNs.roa (raw, json)
Hash identifier:          s8rU99dsFJ2+fvaUg588R3ThfrJICN68tN/AVD1Uogk=
Subject key identifier:   C5:60:A9:AF:28:F8:87:3C:CB:57:AD:8B:0C:B1:EF:01:58:36:90:DB
Certificate issuer:       /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial:       01856E82035E13108ECD51E850074E852A81
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/xWCpryj4hzzLV62LDLHvAVg2kNs.roa
Signing time:             Sun 01 Jan 2023 18:04:52 +0000
ROA not before:           Sun 01 Jan 2023 18:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        81.173.47.0/24 maxlen: 24
                          81.173.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:82:03:5e:13:10:8e:cd:51:e8:50:07:4e:85:2a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
        Validity
            Not Before: Jan  1 18:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c560a9af28f8873ccb57ad8b0cb1ef01583690db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:ab:53:16:88:09:4d:23:7c:ff:95:79:4e:
                    4e:00:37:cb:63:4b:22:21:34:4a:30:f1:2e:1c:18:
                    ea:91:39:c0:8c:15:6d:c3:6a:25:a3:9c:97:27:38:
                    af:b9:c3:fb:2f:7c:ba:13:55:0d:b2:e9:71:fd:85:
                    f2:43:9c:3d:7f:cf:12:1b:ff:56:2c:fe:0e:2c:90:
                    b5:7f:f4:15:aa:20:30:27:06:f2:01:3a:6e:34:03:
                    8a:4f:89:cb:dc:a9:5a:ee:03:b0:2d:93:3a:7f:62:
                    2a:85:03:b7:a6:56:2d:83:56:cb:fb:79:e1:28:b2:
                    26:2d:a7:f1:8c:40:0c:a2:c4:35:f4:11:54:8b:1c:
                    c9:03:ee:f1:79:0f:f4:90:55:9f:cf:2c:c1:77:4c:
                    9e:4c:e6:75:22:4d:63:ed:83:74:1f:2f:b3:c3:ba:
                    18:49:49:ef:2c:fd:eb:0a:54:78:de:02:9e:91:9e:
                    a8:bd:a5:e6:91:41:e9:b0:8a:17:5c:7d:51:7f:05:
                    b7:21:de:ac:11:8d:56:37:a8:6d:01:23:ea:42:12:
                    8b:c7:4e:12:60:cd:96:85:dc:2e:f8:0e:ba:fe:c2:
                    d9:92:c8:5d:38:fa:ba:81:19:1e:39:e6:68:f2:b9:
                    45:dd:cd:d6:24:b4:03:60:6a:7f:a0:de:76:b0:07:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:A9:AF:28:F8:87:3C:CB:57:AD:8B:0C:B1:EF:01:58:36:90:DB
            X509v3 Authority Key Identifier:
                keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/xWCpryj4hzzLV62LDLHvAVg2kNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.173.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:2d:31:ce:90:4f:67:bf:f6:02:76:01:2d:a9:85:df:fe:a6:
         a9:f1:3d:80:97:d0:35:85:ba:36:24:12:d0:ac:f0:f4:2b:77:
         9f:d8:80:85:fa:71:25:d9:ef:9a:a5:dc:09:ad:43:43:a8:78:
         c3:7d:6f:a7:4f:54:a5:b2:a3:5c:c7:66:16:4b:39:74:07:e6:
         02:a7:2e:7b:a8:9e:b3:c3:94:75:a6:39:d9:09:83:d5:d2:3e:
         02:31:cd:da:c8:c4:d0:06:41:e4:61:60:42:4c:e8:01:af:cd:
         12:ea:68:cf:d3:38:0e:21:80:ee:45:fb:45:32:da:b2:da:e9:
         b7:30:e4:d5:59:af:ed:f0:96:51:d8:e5:26:0e:82:47:32:93:
         e1:b6:81:8a:d5:56:f7:af:bc:78:41:58:37:ab:2d:0c:8e:89:
         a6:0f:e9:72:fa:5b:d6:c4:ea:c5:0d:3b:4f:10:d4:ff:fe:e6:
         30:e9:35:a9:c5:b6:94:89:ae:04:35:55:99:43:6c:85:cf:86:
         bc:0c:48:f9:94:fa:e3:cd:39:49:28:71:8a:de:fb:37:c4:da:
         f4:6d:8f:ef:41:e3:df:bf:62:6e:d5:9a:01:bc:65:d0:b3:e8:
         e2:53:d8:f1:72:43:a3:12:30:82:4e:99:27:a2:be:3e:b1:94:
         29:18:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----