Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa
File:                     7DZfxriKVvtb1N-umry4HEmEI-w.roa (raw, json)
Hash identifier:          WzFCLrDiUOzqhTL32+HbzTbstttW/kJLjaV9VX8aySo=
Subject key identifier:   EC:36:5F:C6:B8:8A:56:FB:5B:D4:DF:AE:9A:BC:B8:1C:49:84:23:EC
Certificate issuer:       /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial:       01856D0A80289144EB3FE29D761FAEBE7AC8
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa
Signing time:             Sun 01 Jan 2023 11:14:42 +0000
ROA not before:           Sun 01 Jan 2023 11:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2611
IP address blocks:        185.182.132.0/22 maxlen: 24
                          2a10:8280::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:80:28:91:44:eb:3f:e2:9d:76:1f:ae:be:7a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
        Validity
            Not Before: Jan  1 11:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec365fc6b88a56fb5bd4dfae9abcb81c498423ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:1f:4b:1b:11:ea:4d:3d:7c:0f:d8:54:b8:
                    8c:96:25:9b:0a:b2:c9:1d:9d:09:6d:25:0c:71:4f:
                    8f:71:15:62:9a:12:a7:96:74:a1:0c:c2:b5:0b:96:
                    18:32:4e:8d:86:81:10:2d:e0:1c:d5:a1:51:34:3f:
                    da:73:9b:d1:15:a8:a2:1e:d9:5c:a2:91:7a:39:5b:
                    f7:18:aa:95:47:4c:cc:e5:22:0c:d5:96:38:2a:97:
                    aa:35:f0:a1:fb:2a:08:d2:81:3f:0c:08:93:c2:65:
                    27:2f:a5:94:5e:b3:83:58:4c:e7:bf:4b:79:81:b4:
                    a5:e6:a1:2a:76:71:52:57:25:52:b3:b2:2a:44:ce:
                    4c:16:a4:ec:c5:67:ef:bf:de:eb:2e:37:88:1a:61:
                    1f:ae:92:23:ee:a0:14:27:b5:04:f5:69:3d:dc:a6:
                    eb:a1:6d:66:51:78:8d:30:78:dc:92:4d:39:b7:3e:
                    54:ab:98:f8:1c:6c:2e:ab:59:fd:5e:17:59:d5:e2:
                    9b:05:e5:37:af:d2:ab:5e:d0:79:18:11:a0:ee:60:
                    8b:d4:be:d4:4e:c5:46:55:a5:a0:91:a0:30:12:63:
                    22:49:1b:d6:eb:f9:ab:9d:ef:03:c5:38:4b:ca:71:
                    c0:6b:1c:f5:4b:c2:0f:72:12:0c:d3:2c:12:f0:0a:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:36:5F:C6:B8:8A:56:FB:5B:D4:DF:AE:9A:BC:B8:1C:49:84:23:EC
            X509v3 Authority Key Identifier:
                keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/7DZfxriKVvtb1N-umry4HEmEI-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.132.0/22
                IPv6:
                  2a10:8280::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:df:4d:fc:1a:ff:cf:e9:7b:88:b1:54:23:10:58:52:c0:
         97:1f:5f:6d:7a:e4:07:6f:16:b5:b9:1e:94:63:7a:00:2c:ed:
         ed:6f:f2:f2:9e:3f:27:df:46:7d:36:99:2a:4a:64:bd:8a:4a:
         9b:98:e9:9b:4f:75:31:5e:6b:71:43:d4:65:83:5d:9b:37:56:
         83:43:c2:53:1f:07:6f:82:64:db:f2:e8:85:d5:5a:97:20:e5:
         f5:fd:ba:e8:6d:3c:c6:81:af:61:c1:ae:e8:be:e0:b9:25:d2:
         5e:7f:41:a4:44:ba:8c:c4:36:87:9c:c8:fa:62:a2:23:17:d7:
         64:e7:db:cc:d5:99:dd:bb:af:f0:59:74:0c:f8:25:5a:c4:92:
         89:0d:4e:43:40:27:ba:71:b2:cb:cc:f4:72:11:c8:dc:84:ed:
         53:a1:ac:04:b1:7a:46:bd:58:89:68:92:28:43:c8:39:ea:44:
         e0:7e:65:b0:a9:83:0e:3b:0f:2a:3b:bd:bf:21:86:f8:d4:e5:
         02:1a:f4:1c:5c:9e:b3:c5:cf:34:94:a2:d5:d4:64:b1:a1:86:
         a0:35:aa:71:c4:9d:3e:58:85:fc:04:b0:02:1d:42:98:70:60:
         52:10:58:20:ed:8f:d7:04:b5:63:d3:42:4d:24:1f:f6:9c:cd:
         5a:99:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----