Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/4x858xmTgs6EV1m7-toTQeZOxi0.roa
File:                     4x858xmTgs6EV1m7-toTQeZOxi0.roa (raw, json)
Hash identifier:          MQ0gCdcTvpFXTihEWn3J+mQb8I+ee0QQAW/03qcoMkc=
Subject key identifier:   E3:1F:39:F3:19:93:82:CE:84:57:59:BB:FA:DA:13:41:E6:4E:C6:2D
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       01857139EFD17C49F35158D0D5B0CEB0ABAE
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/4x858xmTgs6EV1m7-toTQeZOxi0.roa
Signing time:             Mon 02 Jan 2023 06:45:00 +0000
ROA not before:           Mon 02 Jan 2023 06:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206605
IP address blocks:        185.181.212.0/22 maxlen: 22
                          2a0a:de80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:ef:d1:7c:49:f3:51:58:d0:d5:b0:ce:b0:ab:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jan  2 06:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e31f39f3199382ce845759bbfada1341e64ec62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:f6:6b:b2:86:4b:15:a0:69:e4:b2:15:67:
                    f9:a4:a2:f9:53:c8:8f:23:5b:34:34:76:9d:b7:29:
                    83:9b:66:39:71:83:f1:d4:de:46:30:c8:ce:16:05:
                    cc:36:04:31:cd:ec:5e:dd:0f:be:64:21:85:ff:8b:
                    cf:09:88:11:9e:dd:6d:43:24:8b:78:e4:98:73:92:
                    51:b1:9c:5a:8a:5f:ac:95:b9:83:cf:52:2f:e7:ee:
                    89:f8:9b:ab:22:5d:c2:e4:70:74:c9:70:15:8f:2f:
                    b2:18:df:b1:a3:af:52:ad:d7:df:ff:42:cb:56:f5:
                    bb:f9:e3:f6:c9:4f:55:76:e3:8e:13:8f:72:0b:49:
                    f7:67:95:40:e1:16:c0:cf:ce:06:14:63:44:e1:bf:
                    38:9d:62:8e:6e:f5:f9:65:cb:28:10:da:ec:c0:fd:
                    1b:fe:5b:6f:53:04:4f:04:a6:c1:27:53:37:6d:0c:
                    a5:e2:95:11:19:7e:54:68:40:2b:3c:13:d4:54:ed:
                    56:9f:f2:db:df:c5:17:77:bc:27:91:4c:3e:f1:d6:
                    81:fa:47:e4:fe:f4:b7:89:5d:bb:c7:ce:76:56:1b:
                    c6:f0:5b:a0:16:1e:45:36:1c:7f:f0:9e:71:e5:02:
                    7e:30:43:e6:e4:fb:7f:93:04:03:bc:87:6e:bb:8a:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:39:F3:19:93:82:CE:84:57:59:BB:FA:DA:13:41:E6:4E:C6:2D
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/4x858xmTgs6EV1m7-toTQeZOxi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.212.0/22
                IPv6:
                  2a0a:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:d8:09:7b:54:80:99:b7:16:19:ed:ec:64:48:12:31:dc:
         4c:fb:69:21:63:37:5a:d4:06:53:e4:06:0a:7f:bc:7f:28:38:
         69:fd:78:2a:eb:5c:27:50:dd:03:d8:df:7e:d5:c1:04:97:6e:
         f3:db:26:3a:01:eb:a7:62:35:c5:91:08:2c:57:b0:9c:cb:92:
         7f:e2:cf:54:4e:76:65:48:84:c9:c1:e2:90:e1:e5:d2:54:0e:
         4f:ee:0f:00:24:87:ab:0d:33:ba:14:15:07:34:9e:41:1e:63:
         ea:cb:fd:1b:a2:a8:c7:e4:ab:84:6e:89:5c:59:08:75:f4:45:
         51:a2:3f:2a:d9:5e:51:56:bb:3e:90:b2:c2:9b:ab:63:91:cf:
         b4:2e:b1:2a:e3:41:e9:ef:5c:0f:99:18:40:3a:aa:47:55:f9:
         0e:fd:e5:4c:08:9d:51:27:50:88:2d:3a:07:cd:f9:32:70:a9:
         34:fe:00:9f:32:59:b7:b8:ab:1b:ea:0a:03:48:aa:e9:e0:90:
         96:9f:24:d0:66:dd:2e:c5:da:09:5d:7b:6a:61:c4:12:9a:0b:
         f5:ec:56:5b:80:8e:5e:ab:02:c5:c6:e0:71:3c:3e:02:78:0c:
         97:26:d5:93:36:d3:08:8c:fe:e0:6a:70:52:3f:8a:64:94:20:
         5a:7c:60:f5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxOe/RfEnzUVjQ1bDOsKuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy
MTFhMDEwHhcNMjMwMTAyMDY0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzFmMzlmMzE5OTM4MmNlODQ1NzU5YmJmYWRhMTM0MWU2NGVjNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBT2a7KGSxWgaeSyFWf5pKL5U8iP
I1s0NHadtymDm2Y5cYPx1N5GMMjOFgXMNgQxzexe3Q++ZCGF/4vPCYgRnt1tQySL
eOSYc5JRsZxail+slbmDz1Iv5+6J+JurIl3C5HB0yXAVjy+yGN+xo69Srdff/0LL
VvW7+eP2yU9VduOOE49yC0n3Z5VA4RbAz84GFGNE4b84nWKObvX5ZcsoENrswP0b
/ltvUwRPBKbBJ1M3bQyl4pURGX5UaEArPBPUVO1Wn/Lb38UXd7wnkUw+8daB+kfk
/vS3iV27x852VhvG8FugFh5FNhx/8J5x5QJ+MEPm5Pt/kwQDvIduu4oswwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOMfOfMZk4LOhFdZu/raE0HmTsYtMB8GA1UdIwQY
MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt
MTc0NDFiZmU1NmNmLzEvNHg4NTh4bVRnczZFVjFtNy10b1RRZVpPeGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm
LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubXUMA0E
AgACMAcDBQAqCt6AMA0GCSqGSIb3DQEBCwUAA4IBAQCeYNgJe1SAmbcWGe3sZEgS
MdxM+2khYzda1AZT5AYKf7x/KDhp/Xgq61wnUN0D2N9+1cEEl27z2yY6AeunYjXF
kQgsV7Ccy5J/4s9UTnZlSITJweKQ4eXSVA5P7g8AJIerDTO6FBUHNJ5BHmPqy/0b
oqjH5KuEbolcWQh19EVRoj8q2V5RVrs+kLLCm6tjkc+0LrEq40Hp71wPmRhAOqpH
VfkO/eVMCJ1RJ1CILToHzfkycKk0/gCfMlm3uKsb6goDSKrp4JCWnyTQZt0uxdoJ
XXtqYcQSmgv17FZbgI5eqwLFxuBxPD4CeAyXJtWTNtMIjP7ganBSP4pklCBafGD1
-----END CERTIFICATE-----