Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa
File:                     VpsRzQTJA64lC7vij3O8hFs3bzA.roa (raw, json)
Hash identifier:          53hcaUQGM77OwpGZOxko49B9rWKmFC7/FKduRIYK6i8=
Subject key identifier:   56:9B:11:CD:04:C9:03:AE:25:0B:BB:E2:8F:73:BC:84:5B:37:6F:30
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       01856DEF6694A7EA5BE1AEB747E4ED334BFA
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa
Signing time:             Sun 01 Jan 2023 15:24:43 +0000
ROA not before:           Sun 01 Jan 2023 15:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        213.184.85.0/24 maxlen: 24
                          2a09:3a00:3000::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ef:66:94:a7:ea:5b:e1:ae:b7:47:e4:ed:33:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Jan  1 15:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=569b11cd04c903ae250bbbe28f73bc845b376f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:ce:0e:18:89:35:b2:04:d6:13:d0:85:8b:
                    e8:db:df:b1:ef:7e:da:bb:6a:30:83:b0:f9:cb:14:
                    9e:2f:39:e9:fb:7e:76:7d:bf:c0:4f:2d:bb:fa:77:
                    e8:6e:9b:af:c5:2a:95:d1:02:87:f7:7c:22:db:0d:
                    c0:ea:94:87:1e:5a:69:58:1b:d8:13:2e:f9:b2:bc:
                    9a:cf:66:60:72:24:fe:49:36:7b:8e:88:3d:fa:4e:
                    0c:10:eb:c1:7a:4a:3a:9f:4f:b2:ae:43:ed:b8:ce:
                    14:83:a8:4b:84:38:10:73:ea:82:b7:b0:47:0a:f0:
                    bf:a5:a1:5c:d6:8c:04:bd:5f:4b:6b:6f:c8:95:d2:
                    a5:15:fe:d4:c5:ff:83:01:1e:65:1c:77:46:ac:34:
                    a1:bb:8f:1b:a3:8f:5b:75:a1:3c:1b:73:bb:5b:fe:
                    62:70:ea:16:bc:40:ed:ab:91:7e:fc:cf:8f:bd:8a:
                    86:34:27:e6:c1:75:3f:90:46:02:61:27:a3:73:95:
                    a2:5a:22:b3:59:0a:e5:08:a1:53:9b:dd:cd:98:e1:
                    90:e1:30:28:8a:be:0e:c5:a1:63:ef:00:ff:b0:2d:
                    f6:7a:d3:12:68:9c:39:91:4d:c4:ec:0c:49:3a:07:
                    c7:87:79:c0:51:39:eb:e0:2a:10:00:53:9f:7d:46:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9B:11:CD:04:C9:03:AE:25:0B:BB:E2:8F:73:BC:84:5B:37:6F:30
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/VpsRzQTJA64lC7vij3O8hFs3bzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.184.85.0/24
                IPv6:
                  2a09:3a00:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:47:ac:bf:db:99:c2:6f:6c:db:42:80:b6:49:0b:93:60:
         dd:54:31:2a:fb:f3:d4:a9:aa:cd:6f:bd:cd:57:ec:e9:0c:a8:
         61:13:7f:e1:f7:92:67:b6:fe:10:0a:d3:85:d5:88:6d:2d:60:
         af:10:97:1b:83:0f:5d:65:0f:7b:d6:0e:fd:c6:a0:9d:11:e2:
         8e:db:b5:c4:ce:4e:d5:f1:43:de:bd:16:af:fc:42:90:1c:17:
         7a:1b:03:80:31:ce:b9:d2:aa:8e:65:7e:c0:76:a4:2c:29:00:
         d2:a1:f1:de:67:53:ba:63:03:8f:53:dc:27:7e:af:27:e4:2f:
         3f:18:38:25:63:cd:15:4f:24:0d:c0:6b:1a:fb:c3:da:c4:02:
         26:63:5d:f5:eb:7b:d3:f4:fe:f1:ab:54:7e:20:f7:6a:57:56:
         17:02:4d:04:ee:1b:2b:e3:71:f2:5f:44:27:fa:06:8f:48:aa:
         f2:7f:6e:8c:8e:23:10:a9:46:7e:66:7e:a7:1d:1b:07:6a:64:
         18:42:d0:ec:76:ea:b2:e9:4e:44:e2:c8:78:f2:20:d4:76:e6:
         0e:07:81:8a:99:4f:67:3a:d7:71:8c:62:41:ab:7f:35:ef:97:
         81:f2:8f:db:66:bb:25:26:6c:40:63:23:f0:ca:74:aa:7f:b7:
         4a:96:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----