Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/8FzGQKsl70STTDje02TQBB-D6Is.roa
File:                     8FzGQKsl70STTDje02TQBB-D6Is.roa (raw, json)
Hash identifier:          6p5BP7Zf2CYSHMkBQaXck5FzAK1XGZe0Z4SWBqDTQa8=
Subject key identifier:   F0:5C:C6:40:AB:25:EF:44:93:4C:38:DE:D3:64:D0:04:1F:83:E8:8B
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       01857230E8E063316D293192506938A52EB9
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/8FzGQKsl70STTDje02TQBB-D6Is.roa
Signing time:             Mon 02 Jan 2023 11:14:45 +0000
ROA not before:           Mon 02 Jan 2023 11:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210611
IP address blocks:        46.31.183.0/24 maxlen: 24
                          2a00:df80:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:30:e8:e0:63:31:6d:29:31:92:50:69:38:a5:2e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Jan  2 11:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f05cc640ab25ef44934c38ded364d0041f83e88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:0b:17:8e:99:d0:a5:9f:8c:9f:9f:4b:bd:
                    f9:17:11:30:1b:01:88:34:11:45:e7:49:4a:26:f1:
                    2d:52:b8:a3:15:db:8d:d3:88:48:19:60:78:cc:c1:
                    89:d7:c4:00:52:f5:b9:ab:27:13:cf:6c:e2:98:e1:
                    24:d4:98:b8:9f:a6:7b:a8:4b:28:39:e8:8b:9b:aa:
                    b5:5f:bb:dd:9c:b8:52:6a:42:31:d4:c6:ac:96:84:
                    cc:cd:a4:91:15:9c:a2:f2:3d:d5:e5:43:6f:d5:57:
                    41:dd:95:2d:f1:bd:03:54:e3:8c:19:92:dc:7a:65:
                    f7:b3:8b:58:0f:63:fa:01:4a:f8:c5:fe:d5:5f:c2:
                    89:32:1e:f2:63:c9:db:45:5e:8e:9b:b4:2f:0a:d5:
                    47:e6:c1:88:30:41:1c:05:9f:c7:47:b5:1b:8a:1f:
                    43:15:e5:8f:c1:3e:30:50:fb:33:ca:9e:27:8e:7e:
                    66:3e:3e:c4:5f:2e:dd:79:1f:14:a1:29:71:c0:0b:
                    ad:00:2e:c4:2b:9a:0d:59:73:47:05:3a:40:f4:24:
                    de:e8:ec:94:a1:2d:06:97:9a:a7:ab:99:51:0a:80:
                    eb:ad:6c:2f:25:ba:3f:2d:e6:3d:ab:da:d0:cf:5c:
                    c6:5a:28:9b:b8:25:2c:6f:32:0e:89:46:2d:4a:14:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:C6:40:AB:25:EF:44:93:4C:38:DE:D3:64:D0:04:1F:83:E8:8B
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/8FzGQKsl70STTDje02TQBB-D6Is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.183.0/24
                IPv6:
                  2a00:df80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:03:64:f8:8b:c5:ad:1f:c1:4d:9c:b4:6e:b6:ea:a4:77:f8:
         b6:64:9a:9b:60:05:be:6a:b3:09:96:fd:52:67:1b:e1:ef:4c:
         f8:ee:dc:38:0a:15:f0:d7:d6:27:12:b5:e5:f8:14:23:fe:c8:
         b9:d8:b3:b5:25:74:3a:86:a1:78:15:9f:de:53:c2:a8:fa:e6:
         a7:44:d3:86:47:43:c9:8f:d1:37:a4:61:b4:1e:f6:bb:7e:8c:
         ef:81:03:44:0f:94:59:b7:c5:d4:6b:a9:e8:01:cb:10:d5:58:
         51:ee:36:37:2b:cd:c3:f3:1c:96:fd:12:0d:57:0d:2a:76:c7:
         92:4e:bd:f5:6f:7d:38:a0:74:9d:09:b5:63:02:7f:ed:4a:36:
         b6:73:d3:15:a1:c1:b8:70:d2:68:93:1d:5e:7b:e7:ca:61:95:
         87:d6:4b:e4:53:a5:1b:c5:60:55:9b:4a:cc:36:df:9f:98:43:
         71:54:e4:6f:2f:67:12:cd:ec:f2:51:b7:1d:fe:66:6a:bd:ce:
         bd:fb:89:c4:b1:5e:da:d3:d4:8e:a2:d6:34:17:a1:cd:53:39:
         70:f5:46:f3:1e:a9:04:ed:29:60:47:29:5c:1a:f5:39:70:77:
         40:26:26:d3:a6:93:19:7c:01:e0:c4:28:0f:bb:c5:a3:ca:91:
         6a:93:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----