Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa
File:                     v3UXfOyhek4woK7a1-zyGZL_o9k.roa (raw, json)
Hash identifier:          6n78aXYd/xKLv4yYVFai9RsckJOLNsYWSKAf6BGPB38=
Subject key identifier:   BF:75:17:7C:EC:A1:7A:4E:30:A0:AE:DA:D7:EC:F2:19:92:FF:A3:D9
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       01856CB83E555D2D20F1289F3CA72360E524
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa
Signing time:             Sun 01 Jan 2023 09:44:52 +0000
ROA not before:           Sun 01 Jan 2023 09:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39392
IP address blocks:        185.80.30.0/24 maxlen: 24
                          2a10:3900::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:3e:55:5d:2d:20:f1:28:9f:3c:a7:23:60:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jan  1 09:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf75177ceca17a4e30a0aedad7ecf21992ffa3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:68:13:02:a5:c3:14:8e:45:2a:ac:70:f0:74:
                    7b:da:50:44:d0:d3:70:73:ff:48:89:35:77:9f:7b:
                    c8:25:e6:be:15:3e:b4:9a:ed:e7:87:2b:54:22:53:
                    dc:f4:aa:f9:d3:45:44:cc:69:e0:57:f6:97:ee:2e:
                    3f:5e:e7:f1:e0:7a:bc:fe:52:21:67:68:a6:7e:2f:
                    38:15:78:c0:b2:e5:da:38:53:17:4a:4d:ae:16:78:
                    9a:33:16:15:4f:9a:c3:5d:36:3d:7e:d5:ec:9a:9b:
                    0b:ae:dc:9e:a5:bf:24:95:16:92:55:1c:20:6b:f7:
                    d9:b8:23:cf:ea:24:f9:b1:a9:f3:c1:50:61:3c:83:
                    79:a5:c9:e8:ce:2a:7b:a8:d7:0f:7b:dc:43:50:ad:
                    f4:d1:a0:39:de:d7:b6:9a:1f:da:47:0d:d1:93:49:
                    2b:00:a6:f8:f7:59:99:1b:61:fb:b0:71:69:7a:c4:
                    b7:6b:22:38:05:8e:c9:2c:04:5a:aa:5f:36:0c:a4:
                    1d:25:be:1c:5f:52:74:eb:bf:66:54:65:9d:0f:5c:
                    43:ad:73:79:c8:fa:9a:b2:de:1b:aa:9e:59:03:38:
                    47:07:3d:39:ec:fc:86:e0:61:77:c3:c9:62:b1:56:
                    94:08:77:b2:c5:26:d0:b6:40:e2:71:b2:91:ef:65:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:17:7C:EC:A1:7A:4E:30:A0:AE:DA:D7:EC:F2:19:92:FF:A3:D9
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/v3UXfOyhek4woK7a1-zyGZL_o9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.30.0/24
                IPv6:
                  2a10:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:d0:c9:66:7e:3f:ee:f9:a2:da:e7:e2:b1:ea:57:5b:b8:7b:
         c5:86:28:90:c8:de:bd:64:c7:fa:0e:50:de:1b:bf:25:8e:e4:
         17:ab:c4:be:ad:40:86:9a:84:40:ac:e1:20:7c:e0:0d:b5:ea:
         84:4a:d9:9f:3f:64:1f:0e:67:69:13:53:09:8a:95:5d:0a:2f:
         55:82:af:7a:79:f2:71:20:a5:1e:42:c9:3a:a9:79:08:31:53:
         40:b8:6e:57:37:25:0f:89:2a:3f:fd:b7:3d:94:87:f1:96:cd:
         c8:2c:c6:48:28:6b:e0:15:de:13:98:6a:88:c1:54:6e:69:5b:
         57:be:82:ec:44:68:74:2e:e9:4d:21:10:6a:c5:35:e6:a6:2d:
         a9:f0:f8:47:c8:0c:6c:7c:d1:f4:f6:5b:ab:86:0f:8e:99:0c:
         e1:87:42:a0:4f:7b:d3:67:a2:8c:13:ee:19:12:17:7d:17:da:
         26:9d:42:e5:20:b5:f1:7d:dd:48:ea:1e:84:1f:d0:8e:5f:a4:
         a2:c9:87:ed:7e:b8:63:66:c1:3c:31:56:28:2c:dc:cf:66:a3:
         5e:46:21:4c:bc:fc:89:5a:85:86:e4:75:1c:03:39:b5:8e:ed:
         35:f7:89:cf:06:1c:6c:35:25:08:ce:ae:a8:56:e5:d7:cd:e7:
         c7:bd:c8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----