Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/4fY0z9X8CvwuoBPe90Ef_Mju6Ow.roa
File:                     4fY0z9X8CvwuoBPe90Ef_Mju6Ow.roa (raw, json)
Hash identifier:          pY7RbclhyTbDs6ZOu7+UlHqhGkxlVbPMt2XpT8Ce9Nc=
Subject key identifier:   E1:F6:34:CF:D5:FC:0A:FC:2E:A0:13:DE:F7:41:1F:FC:C8:EE:E8:EC
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       018570F0C297BCDC545D6FA4E1FEE9C5B046
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/4fY0z9X8CvwuoBPe90Ef_Mju6Ow.roa
Signing time:             Mon 02 Jan 2023 05:25:04 +0000
ROA not before:           Mon 02 Jan 2023 05:25:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205747
IP address blocks:        185.188.196.0/22 maxlen: 24
                          2a0b:d080::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:c2:97:bc:dc:54:5d:6f:a4:e1:fe:e9:c5:b0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: Jan  2 05:25:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e1f634cfd5fc0afc2ea013def7411ffcc8eee8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:65:bd:35:2f:23:41:57:42:7c:cf:99:30:
                    d2:41:5c:5c:61:5b:c8:89:76:78:b0:10:e8:26:31:
                    c3:14:e5:a7:f6:bc:ae:b2:85:61:14:46:41:3f:1d:
                    ff:b8:d9:ab:56:96:17:91:54:f7:d6:a1:3d:1d:55:
                    f4:42:22:2b:ac:ce:cc:dc:0d:d5:49:1e:e2:b9:b4:
                    c4:bf:2b:eb:80:02:80:b0:eb:e1:d0:50:30:ac:05:
                    34:11:47:5e:50:bf:fe:31:00:7d:d0:f5:21:c1:37:
                    c4:1e:a3:09:e0:c6:3e:17:6e:67:ee:f2:1a:0d:53:
                    87:66:c9:c2:6b:c0:3c:dc:23:dd:c0:a9:29:d6:73:
                    0a:71:8a:88:f3:f9:77:cc:a1:8f:6e:87:fa:aa:fa:
                    d8:38:7f:4f:93:f2:ce:fe:4f:7d:08:83:90:12:8a:
                    9a:1c:31:e2:2f:98:92:33:c4:69:37:21:c0:df:30:
                    0f:a9:bf:c8:df:77:fd:80:3a:b3:28:d4:23:d4:81:
                    04:be:33:5e:8d:6f:ab:7b:48:59:2a:c2:ae:f6:1b:
                    1a:78:06:b0:f6:b0:4d:bb:dc:43:3a:26:b4:59:29:
                    b7:ca:31:51:20:b9:52:a1:27:21:1f:a3:b4:f0:45:
                    2b:6a:79:fb:35:18:76:7e:32:a9:4b:52:48:5a:cd:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:34:CF:D5:FC:0A:FC:2E:A0:13:DE:F7:41:1F:FC:C8:EE:E8:EC
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/4fY0z9X8CvwuoBPe90Ef_Mju6Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.196.0/22
                IPv6:
                  2a0b:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:96:b1:6a:da:17:c2:ed:a4:4c:0f:dc:7c:58:ee:28:60:
         c5:f0:d6:3c:8a:b6:73:33:21:f8:f1:8d:fc:0b:cd:71:b0:c8:
         26:b6:eb:66:70:6b:f8:0d:f4:db:90:19:3c:af:49:21:65:b6:
         24:33:26:ef:33:e9:01:28:69:b1:44:08:3b:2c:df:28:7a:e7:
         f5:9b:b5:54:63:40:8f:02:6b:08:dd:cc:ec:05:a8:2f:0a:0c:
         03:6b:19:aa:b5:54:db:4e:23:59:da:c4:f4:b2:23:1a:cd:3e:
         58:f3:67:90:0c:f1:05:4a:ca:5e:73:84:4b:94:c0:3a:f0:96:
         ea:2f:3a:f1:3c:c6:3d:a8:e1:f7:12:d1:f5:09:73:48:02:79:
         82:0d:f4:ae:a5:de:86:77:0f:c4:18:63:0c:13:9c:2d:79:ae:
         75:7e:ae:5e:fb:32:4f:ad:e3:91:85:08:9a:27:38:7f:8e:ef:
         86:2e:3f:68:c1:79:1c:b4:52:35:5c:da:83:57:8b:a7:b6:be:
         a8:6a:dd:e5:38:c8:15:e2:f9:51:52:40:bc:a1:21:37:97:1b:
         33:2e:68:ec:d9:51:36:61:52:24:62:11:e2:2f:0a:50:77:07:
         30:c2:42:54:90:bd:24:75:7d:14:96:0b:93:f2:92:95:62:4a:
         97:10:e9:a4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVw8MKXvNxUXW+k4f7pxbBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlODA0YzljOGE0MzM5N2QxNjc3OWFhOTM0ZjcwNjczODhm
YzdkN2MwHhcNMjMwMTAyMDUyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY2MzRjZmQ1ZmMwYWZjMmVhMDEzZGVmNzQxMWZmY2M4ZWVlOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnJlvTUvI0FXQnzPmTDSQVxcYVvI
iXZ4sBDoJjHDFOWn9ryusoVhFEZBPx3/uNmrVpYXkVT31qE9HVX0QiIrrM7M3A3V
SR7iubTEvyvrgAKAsOvh0FAwrAU0EUdeUL/+MQB90PUhwTfEHqMJ4MY+F25n7vIa
DVOHZsnCa8A83CPdwKkp1nMKcYqI8/l3zKGPbof6qvrYOH9Pk/LO/k99CIOQEoqa
HDHiL5iSM8RpNyHA3zAPqb/I33f9gDqzKNQj1IEEvjNejW+re0hZKsKu9hsaeAaw
9rBNu9xDOia0WSm3yjFRILlSoSchH6O08EUrann7NRh2fjKpS1JIWs1/AQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOH2NM/V/Ar8LqAT3vdBH/zI7ujsMB8GA1UdIwQY
MBaAFN6ATJyKQzl9FneaqTT3BnOI/H18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTIt
YWY0ZTUyNDFiZjIwLzEvNGZZMHo5WDhDdnd1b0JQZTkwRWZfTWp1Nk93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85NjI1NGMtZmMwZS00ZjU4LTk1ZTItYWY0ZTUyNDFiZjIw
LzEvM29CTW5JcERPWDBXZDVxcE5QY0djNGo4Zlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubzEMA0E
AgACMAcDBQAqC9CAMA0GCSqGSIb3DQEBCwUAA4IBAQBTopaxatoXwu2kTA/cfFju
KGDF8NY8irZzMyH48Y38C81xsMgmtutmcGv4DfTbkBk8r0khZbYkMybvM+kBKGmx
RAg7LN8oeuf1m7VUY0CPAmsI3czsBagvCgwDaxmqtVTbTiNZ2sT0siMazT5Y82eQ
DPEFSspec4RLlMA68JbqLzrxPMY9qOH3EtH1CXNIAnmCDfSupd6Gdw/EGGMME5wt
ea51fq5e+zJPreORhQiaJzh/ju+GLj9owXkctFI1XNqDV4untr6oat3lOMgV4vlR
UkC8oSE3lxszLmjs2VE2YVIkYhHiLwpQdwcwwkJUkL0kdX0UlguT8pKVYkqXEOmk
-----END CERTIFICATE-----