Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/rQFFPCfHGoUhoGHIq-LMncNq7Zg.roa
File:                     rQFFPCfHGoUhoGHIq-LMncNq7Zg.roa (raw, json)
Hash identifier:          PvZiomwCeoFAv9yP/qYPzUgidzb6u+KnqQHaNPxF5aY=
Subject key identifier:   AD:01:45:3C:27:C7:1A:85:21:A0:61:C8:AB:E2:CC:9D:C3:6A:ED:98
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       018573E87BF890F935BC739EB6A2965FD27B
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/rQFFPCfHGoUhoGHIq-LMncNq7Zg.roa
Signing time:             Mon 02 Jan 2023 19:14:53 +0000
ROA not before:           Mon 02 Jan 2023 19:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        185.129.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:e8:7b:f8:90:f9:35:bc:73:9e:b6:a2:96:5f:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Jan  2 19:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad01453c27c71a8521a061c8abe2cc9dc36aed98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:a9:e3:de:91:b6:90:b4:26:23:d2:a5:0e:
                    04:98:5c:f8:5c:b8:16:80:35:ac:ac:c2:a9:31:01:
                    9b:f8:bf:a7:48:43:91:d8:2d:b7:bd:b3:f0:ff:39:
                    44:01:85:c2:e6:b4:c3:46:5d:dd:13:79:59:98:17:
                    f4:da:bb:84:1a:ae:d4:de:05:6a:f3:9c:8d:6e:f2:
                    9b:93:68:8d:13:19:42:13:97:9e:7e:e3:88:ee:4d:
                    5a:ee:3e:a8:61:2b:f5:6d:88:80:6f:72:da:ae:63:
                    a7:8d:0a:67:ed:99:81:fc:e3:2f:21:a5:8a:72:39:
                    8f:24:39:08:51:81:52:d3:d0:f8:65:17:d8:c4:92:
                    e3:48:a1:38:14:cb:1d:e8:f1:4c:a4:7f:87:20:9b:
                    7a:49:87:31:7e:ad:d4:9c:cd:1f:a6:31:d0:4c:7b:
                    b4:7c:b0:99:f3:b6:76:d8:27:d0:32:74:ee:9b:07:
                    b6:22:fc:db:f7:fa:19:b1:4c:50:fc:1b:cf:32:e6:
                    82:49:b1:e1:0a:0f:6a:06:a4:59:56:0b:9a:49:23:
                    fc:19:3f:3d:60:d0:ad:0e:b7:c6:6a:d4:3a:67:b4:
                    02:31:1d:70:8f:b5:da:a1:d0:f7:4a:c5:72:a7:64:
                    e0:c5:ce:d4:06:d1:b9:b2:89:d1:3e:5b:f1:b5:4d:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:45:3C:27:C7:1A:85:21:A0:61:C8:AB:E2:CC:9D:C3:6A:ED:98
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/rQFFPCfHGoUhoGHIq-LMncNq7Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:21:66:84:d6:7d:59:0e:82:53:c2:db:3e:87:0d:66:9e:32:
         b1:67:71:3a:73:ee:fe:6e:f6:b0:66:0a:37:c4:8c:d1:69:f4:
         e7:8a:f3:39:05:16:82:48:7b:79:b4:8b:c6:c1:5d:57:1d:05:
         e4:27:24:4e:70:81:fa:53:1b:42:4b:57:10:33:96:0c:1d:ac:
         9f:4e:be:c2:cc:24:bc:94:f4:ea:17:0e:c7:e8:39:bf:a2:44:
         d7:f7:19:fe:1a:42:7c:32:8d:6d:98:96:51:a9:cb:1c:11:ec:
         8b:5d:21:1d:8c:05:b1:11:f0:47:24:04:ac:d9:5a:59:32:f7:
         50:c0:56:60:02:1f:b1:12:b0:d0:9f:86:dd:5e:7d:29:d8:23:
         59:d8:cf:cd:1f:22:25:15:06:98:f1:e8:5b:5f:7e:75:2c:6b:
         83:40:52:75:17:61:ce:6c:b7:0f:a0:56:64:08:9a:45:89:21:
         b1:60:af:e4:c3:ec:d9:ad:38:4b:6e:ba:1f:90:c4:4e:9c:0b:
         4d:3c:8e:ba:57:92:18:a1:d7:7e:5a:cb:88:eb:e4:a3:ee:7d:
         18:4b:cd:3b:20:dd:fd:93:39:93:5d:45:b2:13:ec:f5:62:79:
         c2:c7:7c:1d:a8:8a:64:6e:3b:29:19:c6:04:30:31:c4:ed:6b:
         08:af:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----