Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/6r-IJFTEJbfy5KQvx4IXDF_aUYg.roa
File:                     6r-IJFTEJbfy5KQvx4IXDF_aUYg.roa (raw, json)
Hash identifier:          IOWHlr4RzLARAMVbWjtbtABbaXBrBDrxcX65L3Ggt00=
Subject key identifier:   EA:BF:88:24:54:C4:25:B7:F2:E4:A4:2F:C7:82:17:0C:5F:DA:51:88
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       0185EDE7C5BFD721F4AADE570B36A212A559
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/6r-IJFTEJbfy5KQvx4IXDF_aUYg.roa
Signing time:             Thu 26 Jan 2023 11:47:47 +0000
ROA not before:           Thu 26 Jan 2023 11:47:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56443
IP address blocks:        185.127.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ed:e7:c5:bf:d7:21:f4:aa:de:57:0b:36:a2:12:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Jan 26 11:47:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eabf882454c425b7f2e4a42fc782170c5fda5188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:33:f7:f2:ba:c5:4b:5d:1e:60:2e:47:35:
                    f6:16:3b:d1:91:6b:c9:3d:90:8a:94:0d:0e:74:c6:
                    e2:05:81:3d:03:aa:32:05:c8:6b:b7:bc:7b:16:a9:
                    90:d3:d6:08:2b:9f:c0:c7:e1:23:03:35:af:82:9c:
                    e0:e0:5a:29:d7:02:8b:f2:e8:d1:fa:81:be:40:5a:
                    89:d1:82:52:4c:bd:7f:98:61:79:4b:bf:96:fe:87:
                    2c:67:a1:c2:e5:1f:9c:d3:34:0a:f9:a0:1b:5b:81:
                    55:e6:30:4f:04:31:01:f8:3c:2f:b4:5b:a2:e2:d9:
                    d5:3c:8f:bc:f6:ee:9d:25:9a:c3:56:36:6e:cb:a6:
                    a5:56:98:bd:db:7e:c3:71:db:85:d8:17:a8:25:3b:
                    c8:bd:28:98:85:25:a5:f7:e8:94:85:db:6b:0a:9b:
                    32:20:d8:3d:c2:ac:49:12:8c:99:4e:36:72:7c:be:
                    94:8a:55:9a:e8:08:aa:aa:89:5c:d4:1c:0d:f6:0a:
                    d0:7f:79:c9:b4:fb:48:3f:9c:3d:e7:f4:36:aa:60:
                    fe:b4:33:79:34:34:f9:97:4b:9e:16:9d:90:1a:1c:
                    b7:72:9e:ad:ed:16:39:a0:13:91:53:63:ee:21:7f:
                    eb:5c:e3:55:17:fe:cb:3d:ad:81:ed:d7:a8:3d:34:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BF:88:24:54:C4:25:B7:F2:E4:A4:2F:C7:82:17:0C:5F:DA:51:88
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/6r-IJFTEJbfy5KQvx4IXDF_aUYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:27:cf:2b:bb:1e:39:3e:9c:5a:05:df:a3:f7:46:af:be:
         38:52:de:a4:d1:d6:3d:9f:57:d5:c9:b6:e7:43:0c:41:4c:ce:
         4c:f4:63:ce:55:d1:3a:26:79:45:b5:3b:b4:db:7a:9f:c5:1c:
         be:08:98:ce:83:9e:39:56:c6:e0:4a:71:d6:68:e1:13:7e:53:
         67:61:e8:53:bf:e9:25:af:71:1f:fa:e0:87:b6:55:02:25:55:
         21:a7:2c:1c:0e:8d:f2:62:b5:53:93:52:ec:7d:6d:b5:be:da:
         95:2d:71:ca:00:18:68:3a:c5:80:30:e5:57:2a:87:a8:c8:a0:
         35:2b:50:54:4a:d2:73:7d:62:fe:35:21:9c:34:84:c9:cf:21:
         d6:af:1e:2c:34:89:4d:ea:ee:46:71:d0:cb:2f:d2:f4:6c:8e:
         0d:57:30:58:bb:98:b8:f7:79:1d:9b:6e:33:9f:f9:4c:d5:29:
         94:c2:07:ef:5f:66:81:2e:fc:b1:14:14:76:82:e2:0c:53:a6:
         86:18:6c:4b:f2:b4:f0:4d:dd:e6:12:05:2b:2b:d3:de:a4:e0:
         3b:0c:e2:fd:1d:29:2e:44:e7:5f:82:1b:f0:98:6b:4a:b7:17:
         52:f9:7f:92:46:f8:ac:84:de:e8:0e:c7:36:ca:ae:2d:cb:61:
         d6:df:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----