Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa
File:                     4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa (raw, json)
Hash identifier:          w9gNr7G+7GqUjE3X8XSjHu8pKbQ9FOf6j8rYJxM6ej8=
Subject key identifier:   E0:C5:3F:88:1B:5B:9B:A3:09:EC:53:CE:B7:41:5F:C7:64:42:9A:20
Certificate issuer:       /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial:       01856F392CC7EBA7AA02C1D3B276F137A075
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa
Signing time:             Sun 01 Jan 2023 21:24:55 +0000
ROA not before:           Sun 01 Jan 2023 21:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201782
IP address blocks:        185.63.180.0/22 maxlen: 22
                          2a03:da0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:39:2c:c7:eb:a7:aa:02:c1:d3:b2:76:f1:37:a0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
        Validity
            Not Before: Jan  1 21:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0c53f881b5b9ba309ec53ceb7415fc764429a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:ef:bd:92:4f:17:ff:3e:63:6f:56:e2:60:
                    c8:e0:a6:d7:2e:1f:93:94:f3:9e:3a:92:74:a5:46:
                    12:77:2b:ef:f1:b0:38:8e:e5:00:52:c0:ea:c7:c3:
                    ee:36:5f:52:a4:5c:7c:1c:6a:07:13:e9:13:77:89:
                    b2:ce:a3:9c:6d:2a:14:57:86:89:6c:02:a7:76:22:
                    1b:53:f3:33:e5:8a:64:4a:da:e1:25:07:10:13:44:
                    99:1c:b7:b2:3e:2c:51:0e:44:6f:b6:62:b4:71:7b:
                    f4:d0:64:e1:63:ec:7b:c7:76:c5:16:14:75:11:dd:
                    f4:9f:86:8a:6c:96:82:af:3e:a6:6e:d9:d7:bd:05:
                    91:5d:e0:7c:22:80:9a:37:fc:7b:ff:ac:12:ad:2a:
                    26:f1:17:a3:8a:98:24:39:1a:77:c6:a0:09:8f:ae:
                    f1:a9:4d:d8:05:81:e6:87:a2:a5:84:fa:70:11:95:
                    30:d0:9f:e0:50:e8:7f:92:6b:82:d0:53:19:3e:d8:
                    04:d5:23:99:1a:64:b8:17:f4:29:3d:ea:57:4f:72:
                    1d:a0:a8:54:ca:74:1a:67:fe:43:8b:b0:e5:d9:41:
                    7e:30:1f:09:08:90:f0:e6:f3:4d:47:40:b8:ad:2e:
                    fa:0f:7c:f0:1d:82:4e:d6:5f:5b:b8:3a:f7:1d:91:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:3F:88:1B:5B:9B:A3:09:EC:53:CE:B7:41:5F:C7:64:42:9A:20
            X509v3 Authority Key Identifier:
                keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/4MU_iBtbm6MJ7FPOt0Ffx2RCmiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.180.0/22
                IPv6:
                  2a03:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:c2:ec:dc:9a:f2:9b:8d:58:2c:72:dc:f7:c4:20:a9:ac:c3:
         7b:7d:a4:9d:ec:6f:d0:82:e3:d5:6c:b2:b2:8f:50:d5:36:67:
         07:70:d5:fa:5d:95:81:af:18:f0:2d:c5:99:04:a5:d4:97:f0:
         6a:a6:90:58:10:99:6a:eb:b1:66:7c:91:e0:62:b5:c1:0b:dc:
         ce:d9:bc:f8:85:14:ab:2a:c2:66:c1:98:27:93:f0:02:34:be:
         76:0f:f3:56:15:5d:ab:7f:aa:b0:37:80:00:cb:5f:a0:96:c7:
         30:dd:a0:53:e6:08:ed:4d:29:2b:c5:57:2a:ec:25:d9:d0:64:
         92:06:3c:96:5d:aa:1f:59:2d:33:20:99:20:b1:34:ad:08:ca:
         a2:d5:70:51:d8:d7:1f:23:33:50:09:a3:7a:36:18:db:6b:de:
         cf:28:cb:7f:bb:1c:01:5c:98:8c:5a:4f:8d:97:27:60:b9:0e:
         6b:fc:a6:fb:86:45:ec:cb:94:86:3f:58:49:20:74:2f:80:4f:
         54:b9:de:7a:14:71:66:da:17:e2:7e:ea:a7:76:fe:9d:9f:c5:
         66:a2:93:62:d9:72:d9:a4:4e:5c:44:54:b4:f3:22:12:f1:54:
         68:81:39:52:ae:41:81:25:f8:6f:6b:b3:38:c0:78:7e:04:0e:
         36:33:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----