Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/KUbYP3vd78JYgJCiE2BGBR7R3EE.roa
File:                     KUbYP3vd78JYgJCiE2BGBR7R3EE.roa (raw, json)
Hash identifier:          Bkvn0PtBvN9YqmeItdOZFKtiCF9asuK4s0Nt2zy50Y4=
Subject key identifier:   29:46:D8:3F:7B:DD:EF:C2:58:80:90:A2:13:60:46:05:1E:D1:DC:41
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       01856E01EB14CA846BC26748ACA1E53D9AD9
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/KUbYP3vd78JYgJCiE2BGBR7R3EE.roa
Signing time:             Sun 01 Jan 2023 15:44:57 +0000
ROA not before:           Sun 01 Jan 2023 15:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43576
IP address blocks:        185.239.184.0/24 maxlen: 24
                          2a0c:6580::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:eb:14:ca:84:6b:c2:67:48:ac:a1:e5:3d:9a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Jan  1 15:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2946d83f7bddefc2588090a2136046051ed1dc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:00:dd:08:d2:64:69:ff:9f:b0:9a:d5:bc:
                    df:30:03:a8:ce:bb:e4:e8:6d:76:7f:89:11:56:3d:
                    06:38:9b:8d:7a:88:39:b6:fd:f1:aa:8f:ac:94:0d:
                    50:e7:01:f1:c6:67:e6:79:fc:90:87:00:c5:36:a8:
                    96:f0:aa:c7:44:c3:7d:6c:b3:90:01:e2:5c:e7:0f:
                    3a:c4:de:91:95:17:cd:8c:30:d6:a8:e1:e1:35:b0:
                    6a:78:d7:a0:b1:e3:19:97:f8:14:76:54:2f:8c:ef:
                    57:4d:87:b6:8f:25:b1:99:28:23:44:22:88:1e:5e:
                    ee:27:b9:c6:91:cd:fe:9a:23:19:0b:a2:60:b9:0d:
                    07:30:af:0d:50:61:f0:3d:e1:71:9d:12:c3:5c:f5:
                    ff:c6:4b:21:dd:4d:1b:e5:1f:34:97:a3:4d:84:4b:
                    ec:74:8f:a3:25:3c:cf:e1:c7:b4:d7:fe:f3:12:fb:
                    91:57:52:40:87:2a:b2:5e:e5:6a:2a:f7:0c:93:2f:
                    ab:cd:16:df:64:51:4f:01:84:e6:63:45:c8:67:36:
                    b2:4f:c6:1c:7f:22:53:4e:3d:5e:19:47:e9:3c:40:
                    33:b5:92:c8:71:da:5e:dc:14:80:ac:b3:08:c6:a1:
                    a4:5b:d9:98:ad:35:f0:cb:12:28:70:99:52:b3:e7:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:D8:3F:7B:DD:EF:C2:58:80:90:A2:13:60:46:05:1E:D1:DC:41
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/KUbYP3vd78JYgJCiE2BGBR7R3EE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.184.0/24
                IPv6:
                  2a0c:6580::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:80:78:aa:48:df:07:70:d1:2a:ea:c9:76:b8:0a:26:43:
         ca:52:6c:2f:af:de:6b:b6:f5:74:c8:b7:3a:10:bb:be:fd:98:
         a9:a2:44:14:b7:d2:b2:be:f9:86:21:be:29:2e:a0:a5:6a:2b:
         a1:ef:3b:3c:b5:64:35:3a:7c:95:52:f8:8c:da:75:f7:88:a5:
         eb:36:79:85:b1:21:10:9e:bd:24:ab:61:d9:f3:75:c7:ef:b0:
         2f:e5:0d:ba:de:33:ed:81:4a:f4:db:6b:98:ab:2e:e9:09:95:
         41:35:b3:ea:11:df:44:8e:a5:49:45:73:ba:b1:a8:91:72:76:
         fb:e0:50:be:88:12:f9:d9:3c:34:b5:3a:8a:49:ff:a1:b0:67:
         d2:91:8e:00:7d:88:de:97:9d:a7:a2:49:62:5f:63:d7:04:e9:
         cb:ed:d6:12:bf:ca:8a:a0:4b:88:b0:d6:36:68:de:4e:8e:23:
         32:83:76:af:11:a9:72:fc:a4:a7:d5:dd:8c:73:fd:9c:25:c1:
         b0:cf:d2:47:86:c8:f3:fe:6c:c4:6c:9d:56:af:aa:7f:b2:c1:
         da:cf:f3:2b:8c:8e:78:ac:1e:f3:7b:ff:1b:a2:95:39:db:a5:
         62:ae:23:e7:47:62:43:4d:19:fa:fd:66:f1:8f:59:b8:1d:73:
         8c:ce:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----