Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa
File:                     DO4NR30_qTDQ12dntujJYhJiEF4.roa (raw, json)
Hash identifier:          YkEsVW4p0QgX8jOB/eSe/cc29fF6iRKLD24F5tfXWNM=
Subject key identifier:   0C:EE:0D:47:7D:3F:A9:30:D0:D7:67:67:B6:E8:C9:62:12:62:10:5E
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       01856FA7109E47B095C84C610C1EF2A079A9
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa
Signing time:             Sun 01 Jan 2023 23:24:57 +0000
ROA not before:           Sun 01 Jan 2023 23:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206754
IP address blocks:        185.194.112.0/24 maxlen: 24
                          2a0a:4a40::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:10:9e:47:b0:95:c8:4c:61:0c:1e:f2:a0:79:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: Jan  1 23:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cee0d477d3fa930d0d76767b6e8c9621262105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:42:2b:e3:c3:51:32:59:1a:85:02:bb:03:
                    1b:19:0d:19:30:e4:d9:5d:f5:dd:c8:04:0d:d0:c1:
                    1b:45:b0:b3:f3:21:ee:4d:e9:13:e8:ea:a1:d6:e2:
                    0f:7c:8e:83:0a:a5:bb:d3:53:af:f1:7f:63:e5:d4:
                    35:fc:9a:0f:92:e0:3e:b6:b5:8e:2d:e2:6f:79:6f:
                    83:09:42:20:8d:a4:c6:a4:28:fa:06:07:a5:23:5c:
                    0f:a6:06:eb:9c:c1:4f:cb:fc:e8:3f:4b:f0:bd:75:
                    7e:ef:30:34:c2:fe:21:6d:07:eb:7b:e3:7a:5b:3b:
                    d1:61:81:9e:46:43:74:f5:dd:7f:0f:33:94:e7:28:
                    e6:5e:d7:a9:bd:b2:ea:41:90:2f:5e:56:2b:32:39:
                    4a:b6:67:a0:8e:3c:92:c2:69:d8:e3:8f:af:95:72:
                    95:ea:8b:f5:06:93:34:77:07:a8:45:b7:3e:0a:26:
                    27:23:97:9d:e2:e7:f4:ec:8a:39:b3:87:1b:ac:cf:
                    82:04:b9:90:bd:ac:e4:73:78:7e:29:3c:06:13:fc:
                    ee:be:97:d9:13:e3:73:ee:35:81:43:2d:50:5b:6b:
                    51:79:0f:df:ad:fc:75:7c:1e:fc:c0:65:d5:b2:b6:
                    c0:92:fd:2e:ff:f6:cd:cf:dc:60:df:ed:ad:23:9d:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:0D:47:7D:3F:A9:30:D0:D7:67:67:B6:E8:C9:62:12:62:10:5E
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.112.0/24
                IPv6:
                  2a0a:4a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:7b:ab:ca:68:8f:2f:34:89:cd:6e:73:01:8a:e7:3b:d1:
         15:d4:85:13:b1:ae:61:fb:bb:85:15:c4:e1:3f:f3:73:0d:ac:
         08:58:16:9a:4f:18:f3:fe:0b:7b:cc:0a:78:ba:3b:3a:05:29:
         0c:af:98:44:ec:44:4d:75:d8:57:80:46:d8:2b:85:e8:07:34:
         98:6f:62:9a:c8:c2:0a:4f:c0:62:85:49:c7:f0:9f:7c:36:05:
         e8:88:50:7d:b3:2c:2c:21:ec:d6:05:30:0a:00:dd:0c:ec:26:
         f2:4b:15:f0:0a:6a:c3:08:b1:0e:c7:dc:13:ef:96:6e:c6:70:
         11:f7:26:6e:fe:97:06:4b:90:c4:4e:86:54:bd:1b:59:4c:b0:
         1e:8c:01:12:b1:59:da:cb:08:87:d8:d1:57:94:64:96:d0:20:
         87:a9:8b:5b:d3:01:c4:3a:9e:31:13:7d:66:c4:5b:fc:ee:b4:
         bb:61:3c:8e:39:9b:d1:9f:b0:cb:90:af:55:39:f1:4d:63:94:
         a8:74:bc:55:75:11:ba:40:21:15:5f:2f:1f:44:b5:19:1a:97:
         92:3b:b9:3e:bd:02:19:a1:7f:67:20:9e:b1:93:fd:d8:81:4b:
         1b:33:d9:be:c3:5c:c6:df:c1:9b:00:99:75:53:6f:69:1d:4b:
         be:18:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----