Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/HKdT5HHUaIA-fMNqLOtjgrolCl4.roa
File:                     HKdT5HHUaIA-fMNqLOtjgrolCl4.roa (raw, json)
Hash identifier:          Vrs49jjdA3vDYBkIvICPpvJ2UgIWVmK49Km9CXsBAQE=
Subject key identifier:   1C:A7:53:E4:71:D4:68:80:3E:7C:C3:6A:2C:EB:63:82:BA:25:0A:5E
Certificate issuer:       /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial:       01856B40D80858AF9CFB41C6E814C5EE9CB1
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/HKdT5HHUaIA-fMNqLOtjgrolCl4.roa
Signing time:             Sun 01 Jan 2023 02:54:49 +0000
ROA not before:           Sun 01 Jan 2023 02:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42303
IP address blocks:        185.102.16.0/22 maxlen: 24
                          2a01:6300::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:40:d8:08:58:af:9c:fb:41:c6:e8:14:c5:ee:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
        Validity
            Not Before: Jan  1 02:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ca753e471d468803e7cc36a2ceb6382ba250a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:67:a1:0c:cc:3d:dc:b1:ce:4b:2b:61:4c:
                    61:45:ad:e3:3d:79:bb:a3:4e:fa:25:27:de:9d:d2:
                    3a:96:89:df:cd:28:e2:9e:69:2a:90:78:ca:a4:d8:
                    5e:fb:b6:ce:71:f6:2b:29:95:88:51:c0:2d:c8:65:
                    b0:55:48:04:43:6d:42:b6:91:83:9a:86:ef:e2:92:
                    9a:11:a3:f7:0c:68:06:b5:87:6a:2f:ba:8d:da:49:
                    d2:83:c9:b9:99:07:e2:79:cb:7e:98:c8:78:02:27:
                    9e:fe:b0:0f:f7:5f:ec:aa:1c:43:ee:8c:d0:7d:ef:
                    6c:de:38:6e:18:bc:94:ce:50:76:a7:0b:35:b4:ee:
                    ab:60:61:50:19:ae:fd:27:ea:ad:51:20:ba:73:dd:
                    85:d5:78:74:e0:b9:9f:b4:b3:66:29:3b:ea:8b:66:
                    19:1b:f9:10:b0:be:83:7e:2b:30:3c:e4:d8:89:a0:
                    78:3d:0f:02:42:af:4c:e0:97:0e:d3:22:46:d8:30:
                    e8:4b:27:18:54:a0:08:87:ea:60:ad:32:ac:74:f4:
                    a6:8a:a2:f6:24:bf:45:5c:5a:2d:f2:c3:a4:16:11:
                    2d:24:6d:7c:62:8b:89:55:ab:1d:a6:bb:a9:b5:aa:
                    f9:5f:5d:67:f2:51:d1:6a:c6:2e:2e:38:cd:5c:a1:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:53:E4:71:D4:68:80:3E:7C:C3:6A:2C:EB:63:82:BA:25:0A:5E
            X509v3 Authority Key Identifier:
                keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/HKdT5HHUaIA-fMNqLOtjgrolCl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.16.0/22
                IPv6:
                  2a01:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:b6:85:77:dc:e3:86:44:af:66:67:7c:48:82:ee:e7:f5:09:
         af:a6:1e:af:47:87:40:87:7e:da:25:d9:93:84:ba:fa:d4:23:
         6c:0c:52:29:72:84:70:9a:de:5b:f3:1f:f6:bc:d2:93:7f:74:
         83:ad:e6:d4:12:99:f3:5e:82:bf:51:f8:9d:92:d8:4a:75:37:
         f5:1f:b0:7c:13:56:31:ae:a7:6f:2b:db:8a:3b:7f:a9:f6:8a:
         7d:22:38:06:6c:92:02:4c:6d:8f:00:8c:9c:6c:05:fe:d3:d2:
         c5:1d:a9:39:ea:fc:dc:7e:8b:98:9a:7c:fa:c0:45:e6:3b:7e:
         7d:a8:6a:e4:7d:3a:c7:dc:cc:85:0e:58:6f:9e:aa:87:d7:98:
         18:35:3e:3c:76:20:28:06:e5:f0:d8:56:f3:39:ad:c4:d7:d4:
         79:02:69:0b:cb:4a:5d:db:72:09:f1:94:da:62:d9:88:9e:9c:
         0d:fa:03:f2:03:0d:01:16:1c:b9:30:0f:08:cb:1f:37:fd:ff:
         b8:23:ff:89:a5:04:a5:85:78:22:d7:6d:74:21:2a:d7:8a:1d:
         72:c4:0d:2a:3b:52:c2:49:31:25:58:64:2f:8a:90:89:55:44:
         2f:08:a0:de:5f:05:0e:1f:99:c9:c4:94:f9:25:bf:82:2b:b9:
         71:b9:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----