Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hV06xWOcIIix5BZOvNzu9esO2f4.roa
File:                     hV06xWOcIIix5BZOvNzu9esO2f4.roa (raw, json)
Hash identifier:          pu/ldHXIMa+M3AyTc8hqj0NT1mRpNcgylApqeNAlMHw=
Subject key identifier:   85:5D:3A:C5:63:9C:20:88:B1:E4:16:4E:BC:DC:EE:F5:EB:0E:D9:FE
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       018571D78F34DDF23436415E6C085E4B57AC
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hV06xWOcIIix5BZOvNzu9esO2f4.roa
Signing time:             Mon 02 Jan 2023 09:37:10 +0000
ROA not before:           Mon 02 Jan 2023 09:37:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36351
IP address blocks:        185.210.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:8f:34:dd:f2:34:36:41:5e:6c:08:5e:4b:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Jan  2 09:37:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=855d3ac5639c2088b1e4164ebcdceef5eb0ed9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:fb:b0:6d:03:ce:0e:3e:5d:99:af:5b:3b:
                    64:ac:15:a1:0b:76:34:cb:87:83:ab:a2:8d:ce:47:
                    fc:c0:44:3c:eb:38:ee:64:13:dd:68:09:45:e6:18:
                    f9:fa:93:25:f7:c7:97:6e:96:ae:6e:19:0c:aa:f2:
                    ec:c0:71:f1:e2:3a:95:15:9a:17:d1:1e:9d:e7:ff:
                    8d:78:30:10:fe:87:04:a0:e9:03:e7:94:87:d8:57:
                    8c:17:9b:bc:fa:79:e3:ba:ab:61:65:25:4f:ff:5d:
                    6b:0c:0a:74:fd:57:11:8a:dd:cb:98:a8:88:ac:61:
                    f4:f1:dd:0c:71:a6:76:0c:2c:d2:b1:e5:11:9d:02:
                    2a:6a:2a:6d:0d:0c:a7:e9:52:f1:e3:b1:12:d8:6f:
                    a9:58:b2:99:d4:74:e6:f7:57:c7:bf:bd:b7:e3:7b:
                    27:8d:a4:10:0c:c8:7f:dc:c9:61:2b:2c:66:9e:b0:
                    c6:f1:fc:d0:be:92:bb:2a:c0:5f:95:b3:e8:76:a1:
                    77:f6:af:e3:1a:1f:a2:3e:4d:aa:75:54:c4:9e:67:
                    ca:5f:ad:20:b7:94:4b:1e:e5:25:95:2a:33:be:10:
                    31:53:3d:1b:fb:e7:e7:f7:93:17:53:f5:b4:eb:b6:
                    32:d5:40:21:0b:ec:63:3a:f6:a3:e1:4c:98:c0:ec:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5D:3A:C5:63:9C:20:88:B1:E4:16:4E:BC:DC:EE:F5:EB:0E:D9:FE
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hV06xWOcIIix5BZOvNzu9esO2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:2c:35:01:66:0b:d5:d3:62:9f:68:a3:78:ee:c2:71:9a:7d:
         b0:a2:49:11:ed:39:5d:e3:a0:93:b4:6f:8e:a1:16:5d:72:7d:
         bf:8f:d3:d9:2a:e6:3c:49:a6:f2:9a:db:bc:33:44:86:d0:cf:
         57:95:30:1d:4f:dd:68:02:76:c8:ef:c9:2a:3e:d2:3f:bb:99:
         44:8b:4e:28:12:e1:5f:ef:e9:79:10:ee:55:9f:79:1b:2a:4c:
         1f:20:24:4d:aa:e9:8e:9c:58:18:26:02:84:fc:8a:d1:ef:1e:
         cf:c9:3b:86:7a:db:e3:1d:1f:32:9f:ac:f9:87:85:62:5e:4a:
         5f:a1:27:ff:27:85:72:67:6e:ea:13:b4:cb:e5:a2:72:d9:2f:
         05:1a:52:a1:8f:dc:5e:b0:bd:9a:fe:2d:86:ee:8e:77:82:9e:
         2b:81:f6:a0:e1:f4:38:52:8b:c4:69:5a:2e:92:47:95:0d:de:
         92:51:66:a1:b4:f9:ef:57:ed:a5:35:db:1c:45:c8:1d:45:38:
         3f:b6:b0:d1:80:1f:7e:0f:55:1e:6f:ce:c2:a9:28:b6:8c:c4:
         e0:33:f3:90:eb:c2:a2:d9:39:cf:88:67:01:c7:e9:73:44:f8:
         39:45:bb:40:28:e4:d6:ef:50:87:0a:03:81:61:81:ce:08:a4:
         87:5f:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----