Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/21-dz-BsgiNuoj6fYQD8n6fK3As.roa
File:                     21-dz-BsgiNuoj6fYQD8n6fK3As.roa (raw, json)
Hash identifier:          zhNEe4sNNBiwvSiNAlj9uirWOxdQCQkas6Ct9TKkcXQ=
Subject key identifier:   DB:5F:9D:CF:E0:6C:82:23:6E:A2:3E:9F:61:00:FC:9F:A7:CA:DC:0B
Certificate issuer:       /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial:       018674DABB148FD24B84ECD265BD192D0467
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/21-dz-BsgiNuoj6fYQD8n6fK3As.roa
Signing time:             Tue 21 Feb 2023 16:42:17 +0000
ROA not before:           Tue 21 Feb 2023 16:42:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41354
IP address blocks:        185.127.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:da:bb:14:8f:d2:4b:84:ec:d2:65:bd:19:2d:04:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
        Validity
            Not Before: Feb 21 16:42:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db5f9dcfe06c82236ea23e9f6100fc9fa7cadc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:1a:2b:b3:3e:f7:7d:4f:4e:99:c3:78:4e:
                    2f:0b:ee:b3:2b:f8:94:a9:3a:c0:84:7e:ea:5c:a7:
                    65:37:50:a0:d1:de:f7:b8:aa:2d:cb:fd:a6:45:80:
                    53:4f:65:d3:d8:3c:ae:ac:f6:7f:fc:ef:e3:c5:05:
                    a6:f2:4e:cf:a2:82:71:0c:7c:74:eb:de:de:5d:88:
                    1d:be:38:11:81:13:35:ff:a3:16:01:fa:c7:ac:67:
                    83:9f:eb:df:ae:17:5f:6a:11:a9:82:00:ea:b6:76:
                    4a:ec:23:58:ef:a7:64:46:b2:4b:39:e0:31:25:f2:
                    08:ea:48:aa:58:45:3f:f4:ab:66:4d:df:58:a8:d0:
                    02:61:0d:09:ec:38:51:13:6b:5f:95:7a:71:66:2c:
                    8e:34:55:1a:b0:a2:f9:9e:90:16:a4:46:db:dc:4d:
                    16:3e:83:1c:e8:4f:0c:cf:ae:ab:5f:c4:00:a8:14:
                    f0:ed:ac:6a:09:a2:c1:7c:b3:92:99:11:f3:70:6d:
                    9e:58:b2:a7:d7:c2:46:9d:9c:ac:74:f8:58:84:fe:
                    19:ca:30:af:23:89:15:ca:d9:68:03:a5:b6:36:c5:
                    6d:22:fe:ae:8b:21:37:ee:b8:20:8f:bb:74:cd:87:
                    05:d5:10:6a:7b:c1:6f:90:7c:5e:fe:1e:ed:19:9f:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5F:9D:CF:E0:6C:82:23:6E:A2:3E:9F:61:00:FC:9F:A7:CA:DC:0B
            X509v3 Authority Key Identifier:
                keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/21-dz-BsgiNuoj6fYQD8n6fK3As.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:8a:63:37:c1:2e:37:1c:b4:41:52:63:6e:9d:42:3f:4f:a0:
         45:e3:ee:5e:52:b2:24:77:f3:84:78:df:95:fb:70:75:65:26:
         da:0a:5a:86:cd:1d:27:a4:f4:79:e6:d3:2f:a3:e4:d1:23:e2:
         c8:3b:5b:66:3c:2e:a9:0a:43:66:e1:86:31:c3:e0:6b:65:1e:
         b7:10:b3:35:9c:2e:bc:8b:d8:a0:fc:02:82:ee:ff:d1:54:be:
         b1:11:99:17:9a:04:e6:74:67:28:61:14:67:c5:d6:7c:b1:df:
         53:52:cf:b4:b4:db:53:d6:36:12:40:99:15:ff:ad:ca:1c:b8:
         01:53:e9:a9:57:b2:9e:f9:2d:2f:aa:c8:c9:c2:ea:11:66:21:
         87:c0:cb:c9:f5:b0:f6:f7:fc:3d:88:6f:e2:48:40:d1:95:2a:
         68:27:9e:86:30:42:dd:fb:9e:d6:6c:39:14:a4:06:aa:a6:42:
         39:d6:60:b0:d7:66:b2:fd:8c:56:dc:a5:47:8d:a6:c3:4c:e0:
         dd:37:c4:f2:63:8d:ed:23:33:54:24:03:bb:97:51:46:c4:b9:
         f7:bf:45:10:9a:1d:7a:97:06:58:59:8c:06:a8:fa:84:5c:18:
         eb:92:4f:20:03:9a:f7:4e:42:cf:2a:e7:d3:fc:f7:82:49:e4:
         09:66:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----