Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/P-X0t_oBcaPXJXOdblIw0NDuh9Q.roa
File:                     P-X0t_oBcaPXJXOdblIw0NDuh9Q.roa (raw, json)
Hash identifier:          7zX4WgQCHyIQXgbGDa4xrS2m033fX94HhEs/D/NoSa0=
Subject key identifier:   3F:E5:F4:B7:FA:01:71:A3:D7:25:73:9D:6E:52:30:D0:D0:EE:87:D4
Certificate issuer:       /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial:       01857230EF1819C73AB5867CCD3FAF4F5894
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/P-X0t_oBcaPXJXOdblIw0NDuh9Q.roa
Signing time:             Mon 02 Jan 2023 11:14:47 +0000
ROA not before:           Mon 02 Jan 2023 11:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56704
IP address blocks:        31.15.112.0/21 maxlen: 21
                          185.154.116.0/22 maxlen: 22
                          2a03:eb80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:30:ef:18:19:c7:3a:b5:86:7c:cd:3f:af:4f:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
        Validity
            Not Before: Jan  2 11:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3fe5f4b7fa0171a3d725739d6e5230d0d0ee87d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:d3:d5:df:d8:2f:ce:33:e2:93:0b:75:43:
                    11:ca:a5:61:99:fa:a8:e6:d2:87:54:48:14:07:3e:
                    b1:e6:51:bd:9b:b3:66:d1:6b:5f:a8:28:e0:98:00:
                    25:7c:1f:01:19:bf:58:50:80:2d:73:7c:91:ad:31:
                    a8:84:86:27:28:c8:f4:a2:f6:ba:cf:f4:c2:77:59:
                    bc:35:28:22:f9:4f:26:b1:d9:81:a4:04:4f:7a:74:
                    09:34:f3:cf:6e:94:16:0f:16:18:4b:51:54:13:fc:
                    04:1d:07:5c:43:9c:4f:15:b3:3d:5a:94:79:0f:c2:
                    60:37:e4:f6:35:63:64:fd:96:7f:15:5e:57:80:ec:
                    ba:28:78:44:9b:01:75:27:d8:09:87:81:42:93:14:
                    cf:c0:35:9f:ff:76:df:05:63:fb:4a:4e:53:bd:c5:
                    0a:a0:47:9a:2a:35:9b:c2:fa:37:a3:f6:c4:ce:14:
                    6b:68:57:65:d0:ed:fd:be:33:35:3e:7e:00:86:cc:
                    52:b7:9e:f7:19:6b:1a:70:25:a8:c0:d1:c6:46:a1:
                    78:1e:ac:ac:29:96:98:5e:a5:cc:b4:95:45:01:06:
                    6d:02:42:04:77:c8:d0:66:54:6f:ed:8c:42:71:ec:
                    26:fd:c2:f7:b6:2e:0e:56:30:2d:e6:a5:10:4c:3a:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:F4:B7:FA:01:71:A3:D7:25:73:9D:6E:52:30:D0:D0:EE:87:D4
            X509v3 Authority Key Identifier:
                keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/P-X0t_oBcaPXJXOdblIw0NDuh9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.15.112.0/21
                  185.154.116.0/22
                IPv6:
                  2a03:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d8:16:86:7f:b9:20:d3:0a:8f:be:ff:44:af:e8:dc:e4:83:
         6b:ff:4d:ba:b8:92:03:a0:ef:2a:a8:87:f4:3d:ef:e3:b5:d7:
         a7:49:cf:62:38:92:47:e2:f4:93:ef:34:a3:76:20:4b:d4:1a:
         f3:d9:e0:93:14:71:c9:bc:af:56:00:de:2b:2e:4a:2d:7c:c7:
         5c:c4:7f:15:e0:c9:ac:db:7a:36:88:c7:86:0e:f1:6a:1b:83:
         72:f0:83:f0:2e:e2:d3:97:38:64:7e:3f:df:fe:05:83:99:58:
         1d:a4:e0:2b:96:ed:9d:df:1c:64:bc:ff:73:76:68:17:9a:e5:
         93:be:6f:6c:82:4a:27:92:35:c1:66:d6:d1:6b:2b:37:6d:65:
         a9:e1:ca:cb:9f:27:6d:6c:2a:00:b3:fa:2c:0f:3f:a7:4c:b7:
         df:58:49:58:cf:60:ea:5c:8b:4a:d0:18:ba:7d:f9:d1:e9:6a:
         3e:06:38:18:6a:d1:f3:3d:dc:df:8f:ec:46:ce:40:81:25:6d:
         99:d3:46:c2:fa:36:80:09:4c:f5:4e:5c:fe:b1:67:36:f5:a2:
         44:51:ed:e3:1a:f7:57:d7:4f:c2:cc:d0:6e:1a:18:86:4e:da:
         ae:c9:bc:9b:aa:04:3b:af:64:63:29:f6:bc:4f:61:48:63:14:
         fc:f9:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----