Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa
File:                     TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa (raw, json)
Hash identifier:          IjBURtRRSaIwARVahOH7+oKb2AByeiDx8hTK7xjN+Ic=
Subject key identifier:   4C:F2:4A:17:2A:2C:67:84:17:89:7E:FE:70:06:0E:32:E1:19:85:40
Certificate issuer:       /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial:       0185718C1FEAE2DEA0AA5DED18B343B84667
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa
Signing time:             Mon 02 Jan 2023 08:14:46 +0000
ROA not before:           Mon 02 Jan 2023 08:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60164
IP address blocks:        185.54.148.0/22 maxlen: 24
                          2a04:d280::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:8c:1f:ea:e2:de:a0:aa:5d:ed:18:b3:43:b8:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
        Validity
            Not Before: Jan  2 08:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4cf24a172a2c678417897efe70060e32e1198540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:e8:99:58:04:7e:0d:7a:3c:64:b2:0a:a8:
                    78:f2:cd:07:4d:ed:98:5a:16:06:9b:3a:7d:a3:2c:
                    59:9e:e4:6e:b1:b5:b2:d8:3b:d7:0f:e6:21:5a:92:
                    61:56:cb:d0:32:e3:11:1c:a5:bf:94:66:9c:ca:a4:
                    c9:6e:1c:15:1d:b8:61:1d:19:62:9c:19:05:a2:dc:
                    47:a6:8d:cf:01:3c:92:2b:00:33:b0:82:17:6a:a7:
                    5d:cd:ed:af:eb:4f:f4:f3:2b:91:91:d5:aa:95:23:
                    bc:09:3c:65:d7:39:cd:25:24:1e:d6:47:c0:dc:cd:
                    52:7b:2c:0f:b9:c7:92:6d:7b:a7:a4:a3:9b:50:63:
                    ce:c6:97:cd:b6:12:3c:11:2c:cb:59:87:39:62:dc:
                    70:0c:81:9f:32:f0:d7:fc:84:92:38:d1:bf:d7:d2:
                    6a:76:d0:e1:b8:14:ae:16:ac:46:20:48:69:ca:55:
                    f3:58:a6:06:81:5c:3c:63:9a:c6:14:af:5c:5a:1d:
                    7a:19:bb:de:f9:d7:12:8f:ce:57:c5:05:ac:dd:e5:
                    c6:13:41:8e:1c:f1:28:aa:b9:65:a2:70:43:6a:c5:
                    ab:0d:b1:99:ff:39:0c:d5:f4:b0:2e:cc:67:d5:07:
                    4e:ee:aa:5d:f2:d7:cc:9c:d9:7b:31:c8:6c:41:2d:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:4A:17:2A:2C:67:84:17:89:7E:FE:70:06:0E:32:E1:19:85:40
            X509v3 Authority Key Identifier:
                keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/TPJKFyosZ4QXiX7-cAYOMuEZhUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.148.0/22
                IPv6:
                  2a04:d280::/29

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:01:b3:4c:a2:95:70:1a:45:76:77:8e:0f:e2:40:8f:45:
         ec:92:47:e0:a1:8f:76:7e:0c:7c:0b:20:3b:6e:38:0b:a2:7d:
         70:36:28:59:bd:0d:f6:b5:c5:a6:6e:14:1c:de:3b:87:9b:e5:
         93:21:4f:a9:ee:60:a2:5a:32:ab:12:51:ce:b7:d7:93:bc:8d:
         fb:1b:6a:47:ef:b3:fd:51:fb:8f:77:1c:d8:80:94:fd:d1:35:
         4c:dc:ae:9d:37:0b:3d:a3:8b:63:6b:4b:d2:31:ff:70:63:0c:
         cb:05:34:50:fe:33:4f:98:8b:9a:7c:62:a4:88:a9:65:53:60:
         29:d5:02:74:41:8d:59:0c:57:92:47:e7:1f:29:2e:86:00:e2:
         88:53:49:33:2a:3f:3c:7a:cb:1c:25:cd:e8:a3:1c:dd:50:87:
         2e:6b:b0:75:98:b7:9f:47:e2:2e:24:ca:04:fe:5c:d1:4e:d3:
         fc:94:54:fe:f1:0b:a4:86:6f:bc:27:14:ab:29:f4:63:58:5c:
         a5:3d:6c:b2:e4:cd:3f:51:50:09:ae:54:8f:f3:d0:30:42:2a:
         08:83:86:d0:aa:67:5a:b2:cc:dc:7d:b6:b6:d8:67:1e:bd:fe:
         d4:17:d9:4c:80:0e:f6:a8:a5:75:08:c9:d3:a0:ad:c4:68:94:
         e9:35:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----