Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/VDPjxTfn-7ev8DGUK3McqSXvCdg.roa
File:                     VDPjxTfn-7ev8DGUK3McqSXvCdg.roa (raw, json)
Hash identifier:          andsFWwSpWpL1tjEKMp5lBHYdadZOyDmZRlRscwDIfg=
Subject key identifier:   54:33:E3:C5:37:E7:FB:B7:AF:F0:31:94:2B:73:1C:A9:25:EF:09:D8
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       0185708CD2846112E8969EFC4B0DE0F9B069
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/VDPjxTfn-7ev8DGUK3McqSXvCdg.roa
Signing time:             Mon 02 Jan 2023 03:35:55 +0000
ROA not before:           Mon 02 Jan 2023 03:35:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44808
IP address blocks:        185.175.96.0/22 maxlen: 22
                          2a0b:e300::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:d2:84:61:12:e8:96:9e:fc:4b:0d:e0:f9:b0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Jan  2 03:35:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5433e3c537e7fbb7aff031942b731ca925ef09d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:2d:f6:f1:60:94:1d:39:84:4f:da:3b:f3:
                    85:41:53:45:35:e9:de:a0:d7:e1:f1:01:40:79:a4:
                    d8:b3:44:cd:d7:26:26:be:5f:b3:83:13:a1:b8:df:
                    f9:61:6e:da:aa:38:19:35:d1:57:5c:77:d1:a8:4c:
                    50:a8:11:03:ec:ec:30:9b:13:4a:83:b2:3c:d0:05:
                    51:f1:81:91:f6:96:f9:67:4f:0c:ab:9b:4d:28:98:
                    7e:f4:51:2f:7b:84:90:6a:66:28:93:ca:19:9e:33:
                    0d:04:72:54:e6:e0:e3:06:5f:0b:97:b2:b5:9a:6e:
                    33:b1:ae:13:fe:15:de:0f:a7:6b:79:ef:66:16:13:
                    cc:cb:82:7f:f4:17:dc:10:1b:6e:af:2a:6b:bb:ad:
                    f8:c5:4d:69:b8:dc:40:46:58:1a:34:1a:33:58:8b:
                    6c:d0:d9:b2:f8:23:c9:fd:03:f2:e1:ca:7d:fa:1e:
                    24:46:b1:66:f3:23:3e:ea:2f:40:eb:32:1a:3b:0d:
                    21:39:04:8f:fc:1b:dc:87:8d:7a:64:c6:5a:75:3e:
                    36:c7:1c:09:1f:4e:88:79:76:46:84:1f:98:4d:e2:
                    3d:67:a4:c0:4a:9a:9f:f7:b6:4d:71:06:da:ec:ab:
                    67:7f:20:07:96:f7:2a:84:2e:cf:b8:45:c1:c4:42:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:33:E3:C5:37:E7:FB:B7:AF:F0:31:94:2B:73:1C:A9:25:EF:09:D8
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/VDPjxTfn-7ev8DGUK3McqSXvCdg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.96.0/22
                IPv6:
                  2a0b:e300::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:1f:9a:68:1a:a4:6e:b6:0f:c9:c5:c0:35:8b:f7:a6:7a:
         24:8d:04:b9:a0:9b:5a:11:42:7a:4e:92:0e:b0:cc:86:65:57:
         5a:3e:f5:b4:03:bb:48:12:2d:6b:3d:a5:31:b8:08:82:61:12:
         d5:2e:39:06:11:bb:07:22:a0:52:7f:ae:38:7a:1e:16:92:cc:
         01:4b:47:d5:84:7a:7f:cc:3e:b5:1b:16:e8:fc:eb:5a:de:64:
         f7:9e:ed:00:5c:d1:f2:46:92:e3:c5:36:d6:48:3e:60:38:c9:
         0f:ff:3a:4b:70:7a:21:22:09:7e:66:a7:62:e6:6c:01:6c:df:
         aa:00:d2:cb:c5:ef:c0:aa:64:f9:f7:37:82:66:11:78:30:74:
         c4:c8:85:05:87:b3:f1:10:aa:fa:bb:4d:ac:61:23:6d:c1:ce:
         cc:fe:f2:e8:96:8b:59:13:ec:3e:4c:43:a3:09:d9:03:17:eb:
         40:d6:75:1e:f4:3a:37:ed:ef:73:d1:e0:cf:60:78:8d:c5:a9:
         d9:06:6d:60:83:14:90:41:90:42:18:f6:b4:7e:9b:7c:cf:a8:
         97:96:21:2e:f8:ca:c5:34:41:5a:8f:5a:07:17:e0:0e:c7:26:
         32:5a:f2:9d:98:dc:67:ce:7b:ea:55:2a:9f:10:79:13:95:7b:
         0c:0c:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----