Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/N6TPJCc72L99runiWCHHFfgcNp0.roa
File:                     N6TPJCc72L99runiWCHHFfgcNp0.roa (raw, json)
Hash identifier:          u/bTTNQ7eDgKH1BaIClfsj3jOck40GClFg7Q2AHXUMM=
Subject key identifier:   37:A4:CF:24:27:3B:D8:BF:7D:AE:E9:E2:58:21:C7:15:F8:1C:36:9D
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       01856B8A1192E3F5EDA948B1DBF41DA39F2D
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/N6TPJCc72L99runiWCHHFfgcNp0.roa
Signing time:             Sun 01 Jan 2023 04:14:48 +0000
ROA not before:           Sun 01 Jan 2023 04:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201948
IP address blocks:        46.229.58.0/24 maxlen: 24
                          2a00:1688:7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:8a:11:92:e3:f5:ed:a9:48:b1:db:f4:1d:a3:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  1 04:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37a4cf24273bd8bf7daee9e25821c715f81c369d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:35:5c:7b:f2:14:11:3e:4a:83:4c:a2:26:
                    3e:1e:28:4c:97:33:b8:32:1f:e1:9e:dd:d5:53:9e:
                    ca:14:3a:96:74:22:6c:92:0e:d3:e4:bd:36:23:03:
                    2f:40:67:25:e0:95:d4:d3:1b:5e:02:1a:3c:f6:2e:
                    74:b3:42:59:4e:c8:3b:ec:81:01:1d:0f:6e:72:91:
                    ad:72:3d:12:0b:c6:3f:9c:34:9e:65:b6:32:51:24:
                    29:c4:75:36:03:41:87:af:4e:a2:84:40:8d:78:23:
                    9d:5d:03:5f:04:9d:69:75:3c:91:2c:c2:ff:29:f7:
                    2f:00:46:57:0c:d0:13:7d:47:a1:95:12:88:3d:1f:
                    46:59:a2:62:6d:9f:25:e5:23:2f:7f:f3:4f:c7:fa:
                    21:b7:49:c6:75:3d:8a:bb:9d:89:2e:70:bf:e5:95:
                    25:56:ab:1f:98:59:b4:ae:90:17:b1:f7:9e:79:fb:
                    2d:f8:b8:1d:d4:7c:88:ce:0a:1c:84:c7:97:bc:7d:
                    0e:81:16:e0:f1:4e:a9:15:a0:69:58:60:6a:c7:25:
                    76:b0:b8:70:e8:18:98:3a:63:8d:c3:bb:1e:30:d3:
                    bc:1a:ee:eb:d0:6f:86:ed:18:5f:5e:1e:e3:bc:32:
                    c0:08:16:f1:d6:19:47:26:8b:84:c3:0b:9c:78:27:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:CF:24:27:3B:D8:BF:7D:AE:E9:E2:58:21:C7:15:F8:1C:36:9D
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/N6TPJCc72L99runiWCHHFfgcNp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.58.0/24
                IPv6:
                  2a00:1688:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:15:34:b1:e4:d9:f8:66:40:63:24:f2:8d:80:a4:99:23:32:
         d1:77:24:25:3f:1e:fd:84:bc:74:04:48:61:c8:09:7b:35:0f:
         71:6d:31:94:ec:b8:3c:39:b6:08:7d:47:19:30:a3:2b:ef:1e:
         88:b2:8e:a6:d6:9e:9f:1b:64:2b:4b:b6:53:61:64:9c:ff:af:
         51:ef:bb:47:19:fc:55:f2:a8:3b:7c:96:d4:50:c4:88:9c:8c:
         47:e7:3e:74:cc:ac:47:d5:a7:6e:69:fc:d0:c2:63:20:fe:6f:
         b5:90:ee:4c:4d:ff:af:92:16:d2:3a:1c:73:af:e8:be:7c:9e:
         89:1c:de:e6:f4:f4:f1:da:76:05:18:ee:7e:dd:56:0e:78:d7:
         ab:d8:c8:ff:20:c2:c7:aa:16:a9:32:e8:4b:93:1e:79:f4:eb:
         7d:0d:b2:59:1f:fe:1e:86:4f:e7:5c:ec:93:3a:fc:d6:ae:6b:
         07:b9:5a:6d:59:9e:6a:53:33:9d:51:2d:44:3c:ed:c0:71:e0:
         64:68:eb:c7:72:9b:11:2f:61:fb:73:4e:b9:e7:cc:d5:83:95:
         41:d7:7e:42:04:02:de:49:0f:4f:22:d9:ee:ee:a0:4f:8f:c6:
         1a:d6:a6:51:93:51:d5:1b:65:20:2c:47:b1:59:db:52:4a:6d:
         3f:cf:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----