Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HOYhDe4dF4YbG6uGs40nZg8Zc6g.roa
File:                     HOYhDe4dF4YbG6uGs40nZg8Zc6g.roa (raw, json)
Hash identifier:          E2BQW2RBEejHauwc4SKsBDYfNAojwA/uYR+RXdGYtUs=
Subject key identifier:   1C:E6:21:0D:EE:1D:17:86:1B:1B:AB:86:B3:8D:27:66:0F:19:73:A8
Certificate issuer:       /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial:       01856D4188E5AF529865F899ED78594405E2
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HOYhDe4dF4YbG6uGs40nZg8Zc6g.roa
Signing time:             Sun 01 Jan 2023 12:14:49 +0000
ROA not before:           Sun 01 Jan 2023 12:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        212.61.166.0/24 maxlen: 24
                          2a02:830:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:41:88:e5:af:52:98:65:f8:99:ed:78:59:44:05:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
        Validity
            Not Before: Jan  1 12:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ce6210dee1d17861b1bab86b38d27660f1973a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:28:f6:52:70:8d:d6:2f:cc:ff:bc:99:9c:
                    31:05:a3:84:68:ff:5b:df:a8:69:38:0e:e5:91:a7:
                    4e:7b:c4:84:c7:88:7d:a2:37:d3:37:9c:66:94:b3:
                    f9:d9:df:3d:d4:ba:5b:3e:e3:e0:2d:7e:e9:f9:c0:
                    6a:48:ff:55:bd:30:d4:01:3b:0f:4f:92:4a:3d:d8:
                    21:a7:fc:ab:74:91:74:ca:83:6e:55:7c:b6:a3:73:
                    c2:41:61:fc:db:c5:3b:30:bc:d0:51:e6:e9:c8:63:
                    c3:9a:99:30:82:69:c6:c3:19:1d:20:56:8f:36:0d:
                    51:98:c2:50:fd:53:44:8e:50:98:ef:d2:1e:12:78:
                    8d:70:6f:88:a0:d2:15:fe:09:dd:c4:11:f7:7d:cb:
                    c4:b1:87:ef:17:31:a6:96:c6:9c:ee:7a:1c:78:8e:
                    62:ed:83:ed:54:01:29:d5:e1:8d:bb:54:97:53:70:
                    d8:41:ed:8d:87:6d:f2:12:7b:70:22:ad:3a:db:a3:
                    77:98:ff:13:f9:87:0c:95:c0:d7:6b:c7:da:4d:ee:
                    0a:9f:ac:fb:ad:5b:ce:98:43:51:ce:a9:96:2d:27:
                    d7:72:4b:c6:0a:53:4c:15:47:da:39:c2:73:68:99:
                    7a:16:1c:7a:47:df:12:e5:2c:71:35:99:65:82:c9:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E6:21:0D:EE:1D:17:86:1B:1B:AB:86:B3:8D:27:66:0F:19:73:A8
            X509v3 Authority Key Identifier:
                keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HOYhDe4dF4YbG6uGs40nZg8Zc6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.61.166.0/24
                IPv6:
                  2a02:830:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:32:1e:de:a1:0d:61:ac:f4:a6:cf:13:02:8d:5b:ca:73:5a:
         cf:cd:45:5a:28:66:4c:1b:27:f0:1a:c1:8c:df:86:39:84:36:
         c3:21:00:fb:22:0d:7b:e6:0b:80:51:5f:1e:fc:f4:b7:0f:59:
         c7:f8:95:98:d1:ef:c1:65:7f:97:59:c4:c0:64:f6:e5:5b:98:
         b8:ff:43:6f:63:b2:d3:62:6a:b6:2e:10:05:f9:15:fb:31:7f:
         94:b0:fe:ee:ec:17:50:93:5c:c6:9c:21:ba:66:e6:c4:5a:0f:
         ea:82:92:15:09:5a:02:61:a3:ab:d7:d0:a8:32:5a:84:7d:61:
         5b:73:81:df:63:a4:ca:41:2d:fd:57:f6:4c:50:2e:32:14:de:
         f0:08:69:72:9b:1a:00:43:11:c3:f8:27:14:d4:a9:73:17:38:
         9d:d2:b1:f9:e2:ea:7c:76:40:fc:e2:7e:8b:83:94:9f:dc:81:
         23:7a:13:2f:9e:dd:0a:61:8d:a4:93:c0:5c:32:d7:3d:8f:c0:
         0f:f1:63:40:e9:bf:59:df:dc:89:f8:bc:56:1c:f0:71:8d:a5:
         79:8b:43:40:41:0f:b6:a7:29:c8:a1:b5:44:f6:17:3e:28:c2:
         b3:5b:9a:7a:1f:f1:d0:fc:4f:a7:7a:4a:43:0b:e0:61:90:3e:
         d4:3a:50:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtQYjlr1KYZfiZ7XhZRAXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjMwMTAxMTIxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2U2MjEwZGVlMWQxNzg2MWIxYmFiODZiMzhkMjc2NjBmMTk3M2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n4o9lJwjdYvzP+8mZwxBaOEaP9b
36hpOA7lkadOe8SEx4h9ojfTN5xmlLP52d891LpbPuPgLX7p+cBqSP9VvTDUATsP
T5JKPdghp/yrdJF0yoNuVXy2o3PCQWH828U7MLzQUebpyGPDmpkwgmnGwxkdIFaP
Ng1RmMJQ/VNEjlCY79IeEniNcG+IoNIV/gndxBH3fcvEsYfvFzGmlsac7noceI5i
7YPtVAEp1eGNu1SXU3DYQe2Nh23yEntwIq0626N3mP8T+YcMlcDXa8faTe4Kn6z7
rVvOmENRzqmWLSfXckvGClNMFUfaOcJzaJl6Fhx6R98S5SxxNZllgsn2iwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBzmIQ3uHReGGxurhrONJ2YPGXOoMB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSE9ZaERlNGRGNFliRzZ1R3M0MG5aZzhaYzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1D2mMA8E
AgACMAkDBwAqAggwAAQwDQYJKoZIhvcNAQELBQADggEBAEYyHt6hDWGs9KbPEwKN
W8pzWs/NRVooZkwbJ/AawYzfhjmENsMhAPsiDXvmC4BRXx789LcPWcf4lZjR78Fl
f5dZxMBk9uVbmLj/Q29jstNiarYuEAX5Ffsxf5Sw/u7sF1CTXMacIbpm5sRaD+qC
khUJWgJho6vX0KgyWoR9YVtzgd9jpMpBLf1X9kxQLjIU3vAIaXKbGgBDEcP4JxTU
qXMXOJ3Ssfni6nx2QPzifouDlJ/cgSN6Ey+e3QphjaSTwFwy1z2PwA/xY0Dpv1nf
3In4vFYc8HGNpXmLQ0BBD7anKcihtUT2Fz4owrNbmnof8dD8T6d6SkML4GGQPtQ6
UHw=
-----END CERTIFICATE-----