Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee9FUUjyn6zHxi0Eklt8XjwA-GQ.roa
File:                     ee9FUUjyn6zHxi0Eklt8XjwA-GQ.roa (raw, json)
Hash identifier:          Q05SbKnqXvlfr99+RJ50s6qaLFg3WiOBwMKfxIItS9w=
Subject key identifier:   79:EF:45:51:48:F2:9F:AC:C7:C6:2D:04:92:5B:7C:5E:3C:00:F8:64
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53E0C5274B00AE12680583B1ECB185
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee9FUUjyn6zHxi0Eklt8XjwA-GQ.roa
Signing time:             Sun 01 Jan 2023 07:55:14 +0000
ROA not before:           Sun 01 Jan 2023 07:55:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        185.215.215.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:e0:c5:27:4b:00:ae:12:68:05:83:b1:ec:b1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79ef455148f29facc7c62d04925b7c5e3c00f864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:aa:dd:6d:e8:35:f2:5a:b8:71:4e:38:0b:
                    23:13:c4:a3:27:25:95:c4:6b:55:3c:9f:0d:ec:a2:
                    03:09:19:6e:df:ad:51:04:9d:a8:ce:ea:56:61:05:
                    e0:d7:33:5f:d2:7c:53:ce:97:13:a1:08:f7:04:84:
                    08:c6:46:8c:f1:73:2f:8e:23:a7:85:49:59:ba:2d:
                    0b:db:71:02:41:3c:36:a2:8f:d9:da:af:18:75:e6:
                    f5:ba:32:11:75:ed:56:9a:11:41:d0:0b:77:2c:14:
                    13:ee:2d:39:88:5c:7b:e3:cd:2f:95:5d:85:0e:21:
                    ef:97:9f:08:08:09:c3:a5:79:fc:40:88:d6:be:09:
                    24:e3:09:b3:25:85:6b:fe:4a:bc:15:67:15:50:05:
                    69:ca:36:9b:f8:de:13:80:97:c0:64:eb:3e:44:8f:
                    fb:9b:48:f3:ee:b3:b7:11:d6:a6:12:0b:29:47:67:
                    9a:d0:be:6a:82:cb:64:38:dd:9f:eb:6d:59:a4:d7:
                    76:61:59:78:ac:4c:20:34:e9:62:d4:45:78:fb:72:
                    1b:9a:e6:fa:8d:47:ae:32:4f:fe:c3:33:dc:da:7c:
                    ff:2f:55:41:a0:a5:5a:d2:8b:b9:60:70:b1:ee:8b:
                    a6:56:a0:74:fd:5b:e2:dc:e1:9e:9d:97:60:fb:78:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:45:51:48:F2:9F:AC:C7:C6:2D:04:92:5B:7C:5E:3C:00:F8:64
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ee9FUUjyn6zHxi0Eklt8XjwA-GQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:85:11:ab:16:f7:87:53:b6:c8:cc:a3:e5:db:28:c7:17:e9:
         32:be:79:a4:37:37:52:2c:09:a7:27:11:d5:fb:4b:91:98:f5:
         8d:4e:02:2d:66:f2:32:ed:35:ad:f1:98:92:8c:07:66:56:66:
         10:f3:53:5e:cf:5e:51:ab:14:6a:45:79:b6:89:40:ae:72:4c:
         80:36:de:1c:23:9b:e9:20:72:3e:5e:a5:85:97:79:e7:6f:d7:
         2b:94:9e:2a:2d:c1:08:cf:42:bd:59:db:2e:93:12:35:db:27:
         f8:75:f4:2a:fe:38:fc:9c:9d:e9:55:7d:8c:ca:09:9e:24:47:
         77:58:7b:33:68:a4:6e:db:f5:fc:47:5a:e6:66:77:9c:45:e9:
         c9:14:a5:39:bf:25:89:75:d5:53:35:1a:c2:b9:e8:e2:0c:8b:
         c3:6c:52:8f:83:82:8c:0b:56:59:b3:03:c1:dd:9c:11:74:d1:
         44:31:ce:0e:19:fd:3a:4a:8c:d1:6b:1f:03:34:d7:e2:33:43:
         4f:27:4c:6e:d5:57:f7:12:8f:2a:e2:fd:94:c9:79:3f:87:0c:
         a3:6f:ac:7d:ac:05:72:7d:7a:9d:f6:eb:7d:e1:33:d6:b5:98:
         7e:c4:35:62:8f:4c:9e:d5:4c:21:6f:41:18:c9:75:ee:04:cf:
         07:45:62:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU+DFJ0sArhJoBYOx7LGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVmNDU1MTQ4ZjI5ZmFjYzdjNjJkMDQ5MjViN2M1ZTNjMDBmODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LKq3W3oNfJauHFOOAsjE8SjJyWV
xGtVPJ8N7KIDCRlu361RBJ2ozupWYQXg1zNf0nxTzpcToQj3BIQIxkaM8XMvjiOn
hUlZui0L23ECQTw2oo/Z2q8Ydeb1ujIRde1WmhFB0At3LBQT7i05iFx7480vlV2F
DiHvl58ICAnDpXn8QIjWvgkk4wmzJYVr/kq8FWcVUAVpyjab+N4TgJfAZOs+RI/7
m0jz7rO3EdamEgspR2ea0L5qgstkON2f621ZpNd2YVl4rEwgNOli1EV4+3Ibmub6
jUeuMk/+wzPc2nz/L1VBoKVa0ou5YHCx7oumVqB0/Vvi3OGenZdg+3gN5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnvRVFI8p+sx8YtBJJbfF48APhkMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvZWU5RlVVanluNnpIeGkwRWtsdDhYandBLUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudfXMA0G
CSqGSIb3DQEBCwUAA4IBAQA/hRGrFveHU7bIzKPl2yjHF+kyvnmkNzdSLAmnJxHV
+0uRmPWNTgItZvIy7TWt8ZiSjAdmVmYQ81Nez15RqxRqRXm2iUCuckyANt4cI5vp
IHI+XqWFl3nnb9crlJ4qLcEIz0K9WdsukxI12yf4dfQq/jj8nJ3pVX2MygmeJEd3
WHszaKRu2/X8R1rmZnecRenJFKU5vyWJddVTNRrCuejiDIvDbFKPg4KMC1ZZswPB
3ZwRdNFEMc4OGf06SozRax8DNNfiM0NPJ0xu1Vf3Eo8q4v2UyXk/hwyjb6x9rAVy
fXqd9ut94TPWtZh+xDVij0ye1Uwhb0EYyXXuBM8HRWIW
-----END CERTIFICATE-----