Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/iEuGK9dxOfXtR-SE0jeb53KWCEI.roa
File:                     iEuGK9dxOfXtR-SE0jeb53KWCEI.roa (raw, json)
Hash identifier:          Fw8ttw5w5o7PlLvCEKcqaF3DygsR41vPp0GhB6QpSPs=
Subject key identifier:   88:4B:86:2B:D7:71:39:F5:ED:47:E4:84:D2:37:9B:E7:72:96:08:42
Certificate issuer:       /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial:       0187E1E2B239099C6934DDE574A1A9D88D08
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/iEuGK9dxOfXtR-SE0jeb53KWCEI.roa
Signing time:             Wed 03 May 2023 13:52:23 +0000
ROA not before:           Wed 03 May 2023 13:52:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212175
IP address blocks:        185.225.9.0/24 maxlen: 24
                          2a10:9e80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:e2:b2:39:09:9c:69:34:dd:e5:74:a1:a9:d8:8d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
        Validity
            Not Before: May  3 13:52:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=884b862bd77139f5ed47e484d2379be772960842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:41:7e:1f:7a:65:91:29:21:ea:07:e7:ed:
                    ea:95:5b:6e:55:7a:ab:5e:70:b1:a9:02:05:88:3d:
                    14:ad:22:f4:9f:42:b1:a9:c2:8e:0d:dc:58:2a:0e:
                    dc:b6:bf:74:d7:b2:fb:44:43:43:a0:67:17:86:e3:
                    03:61:2d:94:70:d5:f2:6d:35:39:9e:7b:73:5a:bb:
                    c5:4d:dc:b5:01:f0:4e:40:59:c1:1f:ff:e8:2c:4c:
                    e7:c3:53:81:12:dc:eb:6a:2d:a7:82:2a:18:15:bd:
                    6e:da:cd:e0:3c:41:af:03:f3:98:1f:11:7d:df:1b:
                    bb:d0:de:97:f1:07:fc:24:ad:42:68:fa:af:a7:6c:
                    00:b0:b6:f8:33:ba:b3:9c:01:3a:20:5a:41:52:b3:
                    f0:50:4c:9b:d4:bf:94:67:eb:94:eb:9c:44:d3:72:
                    60:f2:67:7c:61:01:a5:67:de:61:31:09:66:a4:79:
                    e1:68:52:c2:08:7a:b8:f3:80:1c:0f:f4:95:dd:02:
                    40:58:63:ef:83:28:27:47:f2:48:ea:19:b2:d1:1e:
                    ed:5c:7e:0b:2b:d0:c9:58:12:0e:17:f5:39:10:be:
                    54:a8:75:2d:25:a0:01:a5:e9:85:03:95:3e:7e:b7:
                    73:e0:e6:a5:a2:e7:37:dd:36:e9:de:28:10:be:8c:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:86:2B:D7:71:39:F5:ED:47:E4:84:D2:37:9B:E7:72:96:08:42
            X509v3 Authority Key Identifier:
                keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/iEuGK9dxOfXtR-SE0jeb53KWCEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.9.0/24
                IPv6:
                  2a10:9e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:ef:95:5b:d8:7f:e8:94:21:bd:6c:65:a8:a7:8b:39:46:33:
         1c:87:90:2e:c7:04:e8:6a:cf:da:d6:4f:ea:14:7f:88:62:fb:
         eb:f4:68:55:27:73:60:8a:40:74:85:b9:43:90:70:82:27:40:
         ff:cb:7a:b6:8a:03:d4:86:e6:7b:49:ab:84:71:32:13:25:c0:
         1d:f1:f5:f2:ad:05:52:78:c3:dc:5b:51:20:05:4f:00:1e:6d:
         de:5a:24:35:62:56:1e:f3:1c:19:03:56:53:1f:97:29:43:de:
         39:fb:64:86:86:07:8a:a8:8a:6e:bb:9b:c0:7a:f5:3b:7b:6a:
         88:e6:6b:02:92:12:d7:5e:ac:cb:dd:a2:66:ad:46:53:4c:3b:
         b6:a7:6b:ae:15:02:f7:44:14:6c:ee:72:b7:1e:ce:f3:22:9d:
         cb:02:79:cc:31:67:1f:ab:39:4a:54:1c:36:08:26:e2:e4:e1:
         84:75:8f:c7:f4:67:bc:66:8b:2a:cc:4b:9f:f8:9b:7f:42:62:
         6f:da:a1:58:25:6a:56:27:eb:fb:ce:05:ce:9d:fe:f2:df:b0:
         51:11:d1:1c:e8:9c:de:b3:19:c8:f0:8c:67:17:91:56:5a:7c:
         17:1c:15:5d:07:24:b8:19:06:cf:19:f5:72:db:c7:60:8c:44:
         4e:8e:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----