Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/ESqUHENMrbE0dwGNZ9LXr4YJdxQ.roa
File:                     ESqUHENMrbE0dwGNZ9LXr4YJdxQ.roa (raw, json)
Hash identifier:          Q2YSM+NiFAVHzgbta/7I+3n7D29a4EepRD4nyKbleI8=
Subject key identifier:   11:2A:94:1C:43:4C:AD:B1:34:77:01:8D:67:D2:D7:AF:86:09:77:14
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       01856C1CA2457369E3A5A14EDB8C0C4B1175
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/ESqUHENMrbE0dwGNZ9LXr4YJdxQ.roa
Signing time:             Sun 01 Jan 2023 06:54:53 +0000
ROA not before:           Sun 01 Jan 2023 06:54:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49130
IP address blocks:        185.56.106.0/24 maxlen: 24
                          2a00:7fc0:8000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:1c:a2:45:73:69:e3:a5:a1:4e:db:8c:0c:4b:11:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan  1 06:54:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=112a941c434cadb13477018d67d2d7af86097714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:43:90:df:05:aa:6b:a1:63:77:f5:24:17:
                    df:25:38:2e:e9:17:13:0a:d0:9b:bb:02:ac:41:e7:
                    fc:14:0b:db:d8:7e:42:5c:a4:9c:36:dd:7c:e0:b6:
                    00:0c:e4:b0:94:79:dd:00:ad:5f:02:b6:89:41:e4:
                    bf:ee:cc:15:0a:75:3a:ca:f7:ae:7d:f0:7f:e0:82:
                    77:ce:3e:56:bc:d0:c2:ba:6a:a2:39:e2:69:1b:cb:
                    1d:2b:20:fb:cb:df:b4:a9:f6:8f:63:cd:32:6d:74:
                    f6:40:f7:9f:6a:1d:74:dc:75:e4:ed:a3:e4:25:66:
                    e2:fb:00:35:89:97:c3:75:e1:8b:49:e2:68:20:d8:
                    12:51:88:c9:b6:49:b0:85:92:30:26:25:eb:c1:7f:
                    83:1f:e1:5c:bc:2d:ca:21:8c:3f:5b:ac:30:e0:ab:
                    69:0e:7c:90:ed:d1:18:9e:11:10:0e:65:93:be:97:
                    14:5d:e2:43:28:13:91:e5:04:76:87:0f:f9:fd:89:
                    29:45:c3:f7:34:1e:de:b0:c5:5d:61:83:82:24:57:
                    f8:25:7c:fa:1a:ac:e3:73:c1:df:b1:26:7e:7a:1f:
                    24:7c:3c:90:91:dd:94:2c:23:0a:b0:73:fd:72:32:
                    a1:8d:5a:cd:1a:21:3a:54:b7:cf:d5:99:ea:34:45:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2A:94:1C:43:4C:AD:B1:34:77:01:8D:67:D2:D7:AF:86:09:77:14
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/ESqUHENMrbE0dwGNZ9LXr4YJdxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.106.0/24
                IPv6:
                  2a00:7fc0:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:93:da:87:ce:f6:f9:ba:d5:a7:e2:7f:d7:97:2b:fe:6f:b6:
         8d:41:71:97:a3:84:13:8e:fe:b8:8a:fb:8b:5b:05:2f:6e:4b:
         65:82:a4:a5:ec:4e:93:fb:5f:8d:9e:55:1d:13:ad:13:b7:14:
         35:5a:59:a9:8c:3c:2b:c7:2a:62:90:44:ac:a0:71:ed:39:42:
         24:c6:9a:db:e5:1d:00:54:a0:84:a7:8f:83:fc:b1:9e:8a:ac:
         b3:14:96:a9:8e:0c:da:f2:a9:c4:dc:0f:84:ec:0c:96:52:05:
         9f:7c:65:f8:7d:b0:8f:3d:ba:e9:b7:c8:15:37:96:ed:c4:23:
         67:19:7d:c2:6b:fb:f8:f8:30:50:aa:9e:55:1c:67:d2:95:05:
         e5:13:81:2b:c8:eb:89:6b:ad:ac:af:a9:91:3e:9b:a8:fb:16:
         cc:fb:c9:79:0e:85:3e:f4:30:e5:c3:65:3c:57:ff:7c:43:e9:
         b8:16:51:bb:85:a1:6b:12:74:82:b5:29:18:0f:0f:6a:17:c3:
         11:10:2d:dc:94:ad:05:86:23:70:2e:cf:c8:fb:21:95:dc:92:
         ff:31:2e:22:5e:cb:54:f3:c9:b6:e8:f5:c6:e8:2e:3e:e8:8b:
         7e:24:f7:70:81:96:c2:af:03:49:24:bd:9e:b6:5d:9b:f2:6c:
         87:87:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----