Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa
File:                     DpNYuVEthsKLu2uskB6SCZKxr7A.roa (raw, json)
Hash identifier:          3DPeBw2W9Svi9lxdDq1tN+Z2rn8oHz0+te70b3eRu5I=
Subject key identifier:   0E:93:58:B9:51:2D:86:C2:8B:BB:6B:AC:90:1E:92:09:92:B1:AF:B0
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       01856E01D952F05F8F3D1EBB004260419B6B
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa
Signing time:             Sun 01 Jan 2023 15:44:52 +0000
ROA not before:           Sun 01 Jan 2023 15:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60981
IP address blocks:        185.80.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:d9:52:f0:5f:8f:3d:1e:bb:00:42:60:41:9b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Jan  1 15:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e9358b9512d86c28bbb6bac901e920992b1afb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:a9:99:d8:f3:5c:a0:b5:ea:87:52:9d:5f:
                    e2:a5:8f:25:95:36:cb:85:70:16:1b:81:83:48:04:
                    b5:bd:1f:f7:30:9b:e4:79:3a:a2:7f:6f:b4:43:81:
                    10:19:e0:da:96:2e:fc:8d:3c:79:7d:92:e9:b2:8c:
                    ae:03:40:95:d4:93:65:37:59:2d:9b:6b:1d:73:c6:
                    cd:31:cb:42:aa:e7:da:65:9d:3d:3a:a9:64:67:64:
                    b4:27:eb:6d:b4:6b:9a:8f:85:71:7b:45:02:e8:ef:
                    46:58:e6:f8:59:52:a3:d7:5a:55:b4:c0:95:1a:90:
                    14:87:9b:03:a9:5b:70:8a:aa:07:f6:31:b7:91:24:
                    d2:f0:fd:60:c1:57:d0:c6:dd:ed:13:07:d4:6c:1c:
                    fd:63:9f:75:db:79:9f:f1:27:0d:52:c7:fb:2c:ad:
                    d0:3a:c1:db:4e:d2:4a:02:e6:1d:6c:ef:e6:ce:db:
                    86:f1:04:86:fc:53:80:98:09:25:8a:aa:c0:75:9e:
                    69:3d:45:17:b0:9e:bf:6c:32:b3:31:49:cd:9b:94:
                    af:d8:3d:af:81:4d:3b:d4:1c:39:9e:4a:30:44:9e:
                    f4:e0:2d:26:6a:87:9c:55:32:04:a8:4f:4c:e6:20:
                    e9:bd:9e:a4:46:d8:71:14:b5:4a:37:73:a2:a0:4a:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:58:B9:51:2D:86:C2:8B:BB:6B:AC:90:1E:92:09:92:B1:AF:B0
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/DpNYuVEthsKLu2uskB6SCZKxr7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:7d:06:b2:21:2e:70:8f:0f:d5:65:6d:15:e9:b0:76:72:
         43:4e:86:6f:6e:da:09:7e:e6:d3:69:5d:8d:d5:c3:d5:b4:1b:
         ab:4d:f5:4a:18:28:35:29:6d:37:bf:86:ee:12:65:4e:21:c7:
         1c:83:64:58:2f:3d:ef:32:2e:ca:f8:c2:67:af:52:69:59:6d:
         66:f8:22:e7:a9:d3:22:89:d6:04:c1:a4:e9:ee:37:66:74:54:
         c4:27:aa:72:e4:2f:65:d3:6c:1f:84:61:b0:58:0c:83:2d:fb:
         5a:61:0d:b2:ec:bf:92:41:e8:70:c1:d4:a1:4b:05:53:88:ee:
         a8:38:31:fc:b5:fd:57:4b:c3:ed:a9:19:c9:56:b9:ec:df:d7:
         e1:35:49:86:83:83:eb:68:38:4d:5a:97:1e:58:9b:37:24:39:
         20:1d:97:73:c4:11:5b:e9:ad:8c:1e:a0:22:50:8a:88:4f:42:
         8e:ae:46:b0:60:bf:3c:0a:62:26:19:c9:41:b9:db:17:96:fc:
         cf:ef:ea:a7:8c:24:0c:0f:68:4f:d6:3c:22:c4:28:9c:3b:19:
         a6:19:9b:f9:b5:ca:b0:5a:a8:9a:91:b7:11:fd:16:a1:c6:6a:
         80:0e:09:26:d8:92:3e:f5:3c:c6:a4:55:00:60:04:e6:d9:81:
         60:ad:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----