Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/i-_7wcqOsHvB6XaxJOmucsOCrzI.roa
File:                     i-_7wcqOsHvB6XaxJOmucsOCrzI.roa (raw, json)
Hash identifier:          aPa8lNK6CNqFtRHU5SA4fbDlmtweJTBS2nBJ/BVF5Ns=
Subject key identifier:   8B:EF:FB:C1:CA:8E:B0:7B:C1:E9:76:B1:24:E9:AE:72:C3:82:AF:32
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       018570705814C3193034A77EBFD8FAD2D948
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/i-_7wcqOsHvB6XaxJOmucsOCrzI.roa
Signing time:             Mon 02 Jan 2023 03:04:48 +0000
ROA not before:           Mon 02 Jan 2023 03:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8485
IP address blocks:        185.44.120.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:58:14:c3:19:30:34:a7:7e:bf:d8:fa:d2:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jan  2 03:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8beffbc1ca8eb07bc1e976b124e9ae72c382af32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:a9:36:26:8d:2a:5b:f3:f1:d7:f1:f3:a3:
                    5b:a4:66:56:7e:c4:ab:0b:76:43:75:25:ae:55:e0:
                    23:4a:8d:70:32:a6:1d:04:68:1a:08:90:4b:de:16:
                    ae:a9:e3:61:2d:a7:5e:90:90:60:77:db:d6:d7:c8:
                    c0:69:fc:b8:7b:9f:eb:e6:66:7c:e7:36:80:f1:05:
                    9f:80:90:68:d2:53:ba:db:dc:ca:35:60:2d:a9:b2:
                    75:b0:2d:ee:f4:a6:4b:34:73:71:21:8e:46:60:89:
                    e4:69:50:30:9a:a3:cb:bc:b2:e5:61:9b:6d:d9:bf:
                    dc:6c:c8:bc:fc:32:99:4d:ca:ed:1a:97:07:c9:c4:
                    33:b5:74:09:bf:96:2a:a0:87:6e:8b:b2:9f:04:b4:
                    97:74:23:3c:f4:01:2d:5a:de:31:85:ce:1b:00:73:
                    2b:5d:36:52:b6:34:96:2d:3e:00:8a:37:e0:61:da:
                    d2:70:f0:e6:7b:06:1c:1e:d8:cb:96:43:95:4d:38:
                    8f:64:8f:27:4b:3d:81:bd:03:84:14:ea:4a:15:f0:
                    2f:c3:f1:bb:78:0f:42:dc:0f:b6:ce:20:e7:12:c9:
                    8b:17:25:48:b1:e0:c4:a4:8c:61:7c:79:d3:1f:84:
                    9e:61:bd:a5:c0:ee:d9:e6:34:f8:99:c9:54:7d:3a:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:FB:C1:CA:8E:B0:7B:C1:E9:76:B1:24:E9:AE:72:C3:82:AF:32
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/i-_7wcqOsHvB6XaxJOmucsOCrzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:0f:bd:3d:b8:8f:77:83:43:95:35:1e:b2:c5:5a:66:97:
         57:56:1d:2a:6a:e5:cd:d4:3d:08:ec:4e:20:f7:a4:69:5d:69:
         22:d1:b6:90:ee:2a:aa:48:c0:7b:6f:bf:a6:86:ea:b4:93:35:
         a7:be:4b:f1:8c:93:78:55:29:08:f3:f5:06:f0:53:7e:3a:c6:
         bd:94:71:c9:7f:a7:e3:b3:4b:e0:a1:a1:7c:27:2a:e2:b5:1e:
         22:b1:48:1b:b7:c3:8f:8d:ca:fc:90:95:9e:12:c2:d3:a1:d1:
         b9:35:e1:e1:da:0e:32:9e:ac:46:27:8e:41:96:52:98:e3:03:
         8b:c7:b3:31:6f:ee:df:2c:f2:78:73:bb:2a:90:0f:3c:8c:91:
         6d:1a:4c:7d:af:5a:91:c9:d9:8e:77:dd:af:da:0a:c1:d6:57:
         67:78:86:e2:64:22:cb:d5:7c:cb:f6:fb:99:7e:14:a3:9b:e2:
         f1:6c:8f:72:79:2b:2c:f3:33:05:9e:ae:67:a4:de:76:24:e9:
         32:44:82:17:0c:74:22:a2:58:5e:ab:45:ab:a6:30:80:ee:12:
         5b:29:b2:ff:d4:a3:18:30:16:92:2c:9a:8b:62:8e:76:94:b5:
         38:d1:1e:1f:aa:7d:f4:8d:df:fe:51:cd:3f:0a:93:e2:b4:e1:
         6f:c6:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----