Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/vC7B7X9GsLIFml1mYj9n53Ueg6g.roa
File:                     vC7B7X9GsLIFml1mYj9n53Ueg6g.roa (raw, json)
Hash identifier:          dvNEybQE8cmfn3DPNvLeH1mugZMZd404I6FxLP12vPk=
Subject key identifier:   BC:2E:C1:ED:7F:46:B0:B2:05:9A:5D:66:62:3F:67:E7:75:1E:83:A8
Certificate issuer:       /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial:       0186E0BF6E584319703A5478D21C21262A20
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/vC7B7X9GsLIFml1mYj9n53Ueg6g.roa
Signing time:             Tue 14 Mar 2023 15:31:27 +0000
ROA not before:           Tue 14 Mar 2023 15:31:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42845
IP address blocks:        185.232.224.0/22 maxlen: 22
                          2a00:7200::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e0:bf:6e:58:43:19:70:3a:54:78:d2:1c:21:26:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
        Validity
            Not Before: Mar 14 15:31:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc2ec1ed7f46b0b2059a5d66623f67e7751e83a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:68:c8:dd:c2:97:09:09:4f:6f:1f:db:54:
                    40:84:85:52:98:8c:0f:38:c6:36:39:4e:66:5e:cf:
                    fd:64:68:25:83:e0:9f:b1:61:bc:fb:07:4c:ce:08:
                    dc:d3:5c:9a:72:f5:a4:1a:15:12:c2:a7:40:9a:c7:
                    2a:94:89:65:df:72:f4:26:5f:84:ba:71:f9:5d:55:
                    29:1f:50:a5:7e:c1:01:08:7d:52:f5:7c:da:f9:b0:
                    3a:0f:43:5f:03:a8:bc:1a:93:82:fd:0a:41:f9:35:
                    b2:2f:29:2e:af:51:ea:c5:b9:5c:9d:82:72:b6:90:
                    22:2e:c5:8a:fb:12:0d:f2:38:f1:8e:ee:f2:c8:b1:
                    f7:a7:f2:20:8f:ea:ae:86:15:04:61:a2:c7:32:8d:
                    c0:b9:6f:17:20:4a:9f:1b:67:a6:7c:b4:b9:06:40:
                    6c:f0:2f:57:fb:80:cd:c4:15:a6:ae:82:db:c4:16:
                    6e:11:1f:10:f9:e3:cb:87:85:42:2a:c1:bb:7c:5a:
                    5c:55:9b:30:d1:66:42:fd:c1:c9:68:90:aa:b0:cf:
                    b6:37:c4:6c:ee:54:57:4e:f6:da:04:f7:be:c8:78:
                    7e:4b:14:c9:33:11:84:f9:de:da:00:4b:d3:b5:c0:
                    9c:58:75:66:ec:18:72:ca:63:6c:1d:41:d3:ce:a9:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2E:C1:ED:7F:46:B0:B2:05:9A:5D:66:62:3F:67:E7:75:1E:83:A8
            X509v3 Authority Key Identifier:
                keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/vC7B7X9GsLIFml1mYj9n53Ueg6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.224.0/22
                IPv6:
                  2a00:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:4b:22:96:59:33:32:e4:36:2d:e4:79:e7:11:f5:0b:ea:
         ee:da:0e:6e:24:26:64:4b:80:e9:92:7f:ef:31:51:6a:8a:06:
         ae:6f:a4:b6:a1:06:f6:ab:0c:5d:b2:5a:97:eb:b2:71:d5:e0:
         ab:b3:13:3f:41:f5:c8:9e:2f:db:29:39:90:aa:8b:b8:20:d1:
         4c:c4:69:59:f5:2a:fc:9c:f1:d4:b7:17:b7:32:b5:96:0f:7e:
         2b:79:6e:16:48:4b:66:20:8d:8f:b0:cc:13:7f:66:d6:58:12:
         28:62:ca:01:1c:2b:9d:f8:5d:ec:e8:a2:94:b2:63:9d:46:ed:
         be:23:ae:72:62:e3:58:02:37:c8:ce:f4:ea:7d:25:fa:a7:b9:
         31:16:e0:35:77:35:1c:a5:e2:50:5c:35:0d:14:17:cc:a1:f5:
         0d:f0:39:8e:2e:97:f7:35:18:db:b5:15:cc:16:7a:63:f0:54:
         e4:1e:23:62:85:2e:5b:db:12:a1:b6:ec:6f:f0:56:79:7d:c5:
         70:70:7c:5a:d4:68:4c:4b:9b:6c:43:5e:bb:5a:98:22:24:e3:
         54:9a:35:bd:df:00:12:c8:4b:65:19:9d:83:19:1b:2b:d3:d5:
         99:0f:31:56:2a:54:88:12:92:14:4e:d8:40:63:90:7b:46:ed:
         8f:be:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----