Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/V5rtF-66R3AihFgea9solhDYvnQ.roa
File:                     V5rtF-66R3AihFgea9solhDYvnQ.roa (raw, json)
Hash identifier:          0DQapBYhk+LO2kMQEu4gFWgH1Mbr3OdJQMbGhKOOKRA=
Subject key identifier:   57:9A:ED:17:EE:BA:47:70:22:84:58:1E:6B:DB:28:96:10:D8:BE:74
Certificate issuer:       /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial:       0185714C2A74222EC93380F163DE937E58E3
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/V5rtF-66R3AihFgea9solhDYvnQ.roa
Signing time:             Mon 02 Jan 2023 07:04:54 +0000
ROA not before:           Mon 02 Jan 2023 07:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.186.25.0/24 maxlen: 24
                          2a0b:6c81::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:2a:74:22:2e:c9:33:80:f1:63:de:93:7e:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
        Validity
            Not Before: Jan  2 07:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=579aed17eeba47702284581e6bdb289610d8be74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:30:80:e1:7c:af:a3:ba:29:5d:fa:ad:6e:
                    2d:59:cb:88:15:31:87:2c:ee:f9:c3:d2:4f:32:e5:
                    31:eb:e8:c8:8c:3e:9c:7d:e5:83:a7:7b:3d:88:b9:
                    e7:8c:8c:a4:d6:ce:59:65:5c:e7:e1:7d:d8:dc:80:
                    40:ee:64:b3:e9:9f:1d:7d:c7:06:c3:a2:65:f5:ed:
                    1b:bf:9f:32:e8:34:7d:d5:b9:e9:88:42:79:f9:d1:
                    26:a3:23:8d:21:35:62:df:63:14:64:bd:ab:69:fa:
                    c5:12:23:7e:88:73:82:55:f2:c1:55:67:61:51:c2:
                    eb:43:ba:99:4f:c6:ce:79:d9:18:3f:3f:7a:75:18:
                    e2:84:17:6b:71:c9:5d:63:c4:15:0e:35:c9:f6:f5:
                    a7:98:68:2b:6a:55:74:6d:60:84:da:7f:20:0a:93:
                    88:0b:c3:b9:bd:0f:84:2a:a5:dd:8d:9f:28:f4:6d:
                    06:7a:f2:0d:74:72:4d:bb:81:54:ad:a1:ad:7e:c3:
                    55:a6:1a:74:16:f0:48:fb:5d:62:2c:bf:93:ec:00:
                    03:df:da:03:d1:c4:c3:b1:d4:e8:d6:4a:d5:30:81:
                    62:9f:7a:14:29:62:d4:71:9a:42:ab:3f:aa:4b:30:
                    27:d4:b2:f6:c7:b2:a5:a4:8a:45:ce:41:03:9f:db:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9A:ED:17:EE:BA:47:70:22:84:58:1E:6B:DB:28:96:10:D8:BE:74
            X509v3 Authority Key Identifier:
                keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/V5rtF-66R3AihFgea9solhDYvnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.25.0/24
                IPv6:
                  2a0b:6c81::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:d8:ab:e4:57:77:79:2c:2d:c9:ad:89:3b:a3:03:93:a2:
         6c:48:35:4e:77:9b:72:c9:7e:f3:ca:9a:8e:32:53:04:fe:09:
         dc:38:64:e7:db:da:2c:ae:ae:26:0b:6d:0f:83:39:fc:cf:10:
         6e:8f:91:ba:bb:54:55:d0:ca:d8:d5:a3:32:28:c4:58:5a:de:
         5b:c8:a7:2c:65:ee:70:9b:92:c5:06:00:48:23:52:17:ff:b0:
         f2:16:f7:80:fa:db:10:cb:d7:3c:b2:6e:51:5a:fc:31:4c:cc:
         1f:de:48:92:34:58:44:bb:6d:d9:d1:25:a7:15:6f:11:12:51:
         48:54:96:e3:0e:e5:61:8b:e4:a1:13:a0:3b:25:74:be:9b:70:
         a8:77:4e:3e:1a:b3:4c:1f:01:70:cc:c4:ba:56:65:0e:2a:ec:
         21:50:3f:3b:f0:c3:36:f1:1e:3f:9c:a9:23:7e:bb:31:a0:cf:
         96:b3:48:63:8f:5b:ba:50:5d:65:d6:67:e9:f9:0e:1c:0f:81:
         8d:bb:4e:2a:dd:7a:a3:df:43:54:c0:4b:60:c7:f4:50:21:6e:
         03:4d:c9:12:16:75:b7:81:11:c8:f1:3a:1a:5c:b0:4a:02:06:
         f2:86:3c:de:aa:78:42:02:03:0d:a8:17:72:40:9a:8e:3b:de:
         a6:6d:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----