Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa
File:                     NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa (raw, json)
Hash identifier:          H8JK1PQwEdwg6DXJOqgHp4CJMtE4+nDKuOlCAftbvmE=
Subject key identifier:   34:7D:A4:24:4B:82:D2:5B:15:5B:4B:38:DD:77:81:7F:36:53:F9:18
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       018A8CA09A5D23EBB6CE08295DA32E35EF6F
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa
Signing time:             Wed 13 Sep 2023 03:40:50 +0000
ROA not before:           Wed 13 Sep 2023 03:40:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.220.146.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:a0:9a:5d:23:eb:b6:ce:08:29:5d:a3:2e:35:ef:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Sep 13 03:40:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=347da4244b82d25b155b4b38dd77817f3653f918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:dc:5a:2f:05:98:fd:4f:d1:3f:aa:0b:f7:
                    e3:69:19:ce:1a:1c:78:5d:9c:8c:41:c1:c2:55:4f:
                    59:e5:0f:ba:cb:76:fd:ee:e5:2f:35:ef:19:87:ad:
                    b4:97:f1:ce:ca:64:ef:63:34:ea:94:ea:ab:1e:68:
                    92:d8:db:b1:86:c8:10:ae:7d:96:57:4e:b5:b7:ee:
                    fa:72:a3:f8:99:c8:18:58:60:e1:fc:77:9a:f5:f8:
                    73:9c:0d:3b:ab:93:d1:bd:e7:91:6a:74:2b:71:4a:
                    04:97:49:eb:d3:c3:29:d4:53:56:a7:3b:a3:09:87:
                    14:06:0d:1e:39:a8:e9:3c:22:0f:28:d1:dc:47:4a:
                    db:7e:2c:68:0b:da:8b:14:4e:f2:ab:16:06:5f:23:
                    52:5c:5a:16:47:a7:f6:85:e6:31:05:7a:49:0a:09:
                    fd:5f:13:de:ee:53:29:a3:cd:16:58:6b:f1:fc:08:
                    ec:d0:f7:9d:1e:4d:5d:90:9c:47:76:32:ad:40:25:
                    59:2e:ee:fc:9c:d9:a4:10:30:18:82:61:38:cc:1a:
                    cc:3b:ba:70:a2:dd:d5:0d:56:79:cf:a3:10:2b:f4:
                    3d:bb:cc:ce:6b:32:67:57:9b:d9:42:ff:68:85:cf:
                    84:95:f6:79:ce:2f:97:59:e4:6e:99:58:df:eb:d1:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:A4:24:4B:82:D2:5B:15:5B:4B:38:DD:77:81:7F:36:53:F9:18
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/NH2kJEuC0lsVW0s43XeBfzZT-Rg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:99:7b:d4:fe:0c:89:e2:ec:1c:54:7c:c3:5d:2f:bb:c2:
         7e:9c:b6:68:57:d3:6c:a2:12:a1:ab:a6:f8:e2:d0:19:20:76:
         9d:a4:93:9e:2f:dd:c5:55:a2:40:db:f8:1d:60:00:5f:ea:6b:
         53:14:76:ad:7d:fc:91:2e:c1:47:b1:a7:64:f2:86:29:d5:51:
         cd:b9:0a:9a:56:e8:93:84:47:d3:30:9c:37:16:49:0a:0e:39:
         84:7c:fd:c8:1f:06:61:08:50:12:3f:d6:3c:6b:3d:b7:ef:27:
         66:a8:58:a0:9f:f2:06:4e:22:ef:85:93:14:14:b8:bf:60:8d:
         26:b3:b5:62:14:94:4c:ac:4c:f8:26:b1:44:aa:d0:4e:3e:51:
         21:c6:d0:7e:46:c0:6f:a3:9b:95:fd:40:b1:08:28:19:41:ed:
         5c:34:6f:ea:70:60:54:dd:62:eb:3e:03:dc:74:ee:b0:ae:80:
         e9:18:7e:86:19:61:73:43:37:cb:f6:fd:79:5e:8d:3c:24:9e:
         ef:9d:5a:dd:04:cb:4e:49:99:a0:e2:d5:af:28:7a:5c:40:32:
         93:36:f2:a8:c3:ce:07:5c:da:d3:3b:b1:d7:d7:27:d9:fe:d8:
         d7:b9:48:6f:6f:c1:88:a6:1f:db:27:15:69:cd:c5:92:36:8d:
         52:09:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----