Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Buqboctq2mC4BDgjqRi5jrXeEPE.roa
File:                     Buqboctq2mC4BDgjqRi5jrXeEPE.roa (raw, json)
Hash identifier:          4oXDaPv76Hg44/2zVTFcRHezOOSfrB3v7cHg2Y7CTDo=
Subject key identifier:   06:EA:9B:A1:CB:6A:DA:60:B8:04:38:23:A9:18:B9:8E:B5:DE:10:F1
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       018571FA08EC06CAC0613E92C6D6F3BD6EB7
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Buqboctq2mC4BDgjqRi5jrXeEPE.roa
Signing time:             Mon 02 Jan 2023 10:14:49 +0000
ROA not before:           Mon 02 Jan 2023 10:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60252
IP address blocks:        185.33.196.0/22 maxlen: 22
                          2a00:cfe0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:fa:08:ec:06:ca:c0:61:3e:92:c6:d6:f3:bd:6e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jan  2 10:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06ea9ba1cb6ada60b8043823a918b98eb5de10f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:4c:92:fb:34:58:98:8c:81:d6:a8:e6:59:
                    99:2d:f4:7d:c8:0c:d2:51:ad:ca:48:ab:52:e0:84:
                    fc:2d:f2:af:4b:78:e7:cc:ea:6b:e7:10:0d:3f:e1:
                    4f:c7:bb:5c:e9:e9:ea:52:20:b1:93:97:20:93:3f:
                    f3:08:dc:68:9e:27:d5:78:dd:a7:41:11:74:29:20:
                    01:c6:88:a2:f2:94:62:30:41:27:63:ee:f3:5e:3c:
                    62:57:bf:e4:a0:dc:46:0e:b7:26:80:91:bf:82:f5:
                    ef:be:0f:3e:35:ec:0f:ba:64:ef:da:3d:17:0e:52:
                    a4:e8:22:ba:18:5a:23:40:01:48:e1:fb:77:d9:99:
                    b1:66:2d:eb:d9:6e:0c:2c:d7:23:11:0c:b4:5b:fa:
                    57:6e:95:23:bc:59:0c:92:1c:82:8f:49:5a:b9:75:
                    ad:39:5c:73:4f:00:fe:34:83:9f:95:22:df:21:19:
                    d1:2b:2f:23:dd:df:c7:a1:49:ef:d4:c4:93:54:97:
                    de:1a:56:17:07:82:8b:f1:13:d2:d8:a6:9b:cc:71:
                    e9:81:c1:f5:ea:6b:1c:f0:5f:96:bb:4a:ab:7f:09:
                    ea:1c:e2:b3:73:5c:49:50:8a:4f:0c:37:ee:53:19:
                    a4:4f:92:f3:ce:c7:75:54:ea:da:6d:d2:a3:81:1d:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:9B:A1:CB:6A:DA:60:B8:04:38:23:A9:18:B9:8E:B5:DE:10:F1
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Buqboctq2mC4BDgjqRi5jrXeEPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.196.0/22
                IPv6:
                  2a00:cfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:76:eb:79:5d:38:bf:19:1d:8c:00:8c:ca:76:72:47:8f:af:
         80:be:77:43:91:e1:96:3f:85:38:39:db:d6:06:7e:4d:2e:b6:
         6f:9d:68:34:32:68:3b:a6:04:ab:64:a1:69:bd:1b:06:a2:80:
         e3:bc:51:5c:ff:03:69:96:a9:53:0c:2c:fe:70:b8:d3:cc:f8:
         cc:2b:bf:df:ea:d3:45:26:54:e5:53:02:fc:a9:1a:a0:8e:c5:
         49:f0:b9:07:47:e1:1c:ad:d5:6c:48:b2:c1:4e:e3:c6:d8:ff:
         0d:8c:90:84:f2:8e:94:62:22:3a:96:fb:ca:9a:ce:50:0e:2f:
         17:7a:53:f3:be:d5:94:f2:e6:3b:d3:3c:eb:86:ea:f7:46:3c:
         2a:82:2b:a6:a9:7b:90:b1:ea:9d:41:51:1f:81:08:65:ad:e1:
         b7:63:75:30:dd:f3:38:71:07:0b:eb:ca:cc:fe:2d:97:88:43:
         1a:06:0c:bb:5c:7a:82:e1:f5:32:97:01:02:cc:da:02:8a:7c:
         98:13:7e:bd:32:ff:2b:5e:3e:6d:f3:4a:bc:49:07:16:c8:32:
         dc:ae:97:29:05:4d:7b:c0:24:7e:f1:78:17:e0:87:f2:28:28:
         ab:33:25:66:d3:46:4c:4c:3f:55:26:3e:4b:14:bc:25:5b:3f:
         97:71:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----