Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/ION9ykBJJ5gq2EPVIlgNJZlw374.roa
File:                     ION9ykBJJ5gq2EPVIlgNJZlw374.roa (raw, json)
Hash identifier:          OTq1RnJb9VuLqEkiW+1CoDTUB0AV6MmYqUezFzkkkEk=
Subject key identifier:   20:E3:7D:CA:40:49:27:98:2A:D8:43:D5:22:58:0D:25:99:70:DF:BE
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       0186CBC50F399B38E6E82517476EC5802B07
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/ION9ykBJJ5gq2EPVIlgNJZlw374.roa
Signing time:             Fri 10 Mar 2023 13:45:34 +0000
ROA not before:           Fri 10 Mar 2023 13:45:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210806
IP address blocks:        185.37.11.0/24 maxlen: 24
                          2a11:da80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:c5:0f:39:9b:38:e6:e8:25:17:47:6e:c5:80:2b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Mar 10 13:45:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20e37dca404927982ad843d522580d259970dfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:28:12:0e:80:d2:42:90:eb:82:4c:ba:70:
                    bf:9a:f2:01:b8:16:48:b3:6f:6a:c3:c4:8b:39:f1:
                    a4:f8:36:86:68:f7:23:d9:d8:df:9b:dd:9b:ee:59:
                    66:4e:6c:bf:a4:23:f5:b4:19:60:51:72:57:de:ed:
                    f6:11:34:45:cb:22:7b:f9:3b:a5:6b:94:77:2c:81:
                    27:65:b4:76:49:13:22:d7:36:c6:f3:65:3c:ce:a1:
                    47:c7:58:9b:ab:a3:6d:90:ae:61:1d:6a:c5:5e:52:
                    e3:1f:bc:99:86:8c:be:fe:9e:ce:e8:8f:9e:39:0c:
                    f4:0f:4b:7d:e6:af:db:d8:2a:7d:43:fa:2a:96:04:
                    71:f1:00:6d:a9:f0:10:ab:99:cd:0d:ad:e2:d0:30:
                    51:5b:d3:b8:6c:98:2d:36:18:f9:b6:c1:29:57:18:
                    7f:e3:5b:73:b5:f8:a8:a1:2c:08:e3:dc:12:0d:14:
                    50:4f:d8:37:ae:30:3c:79:a0:ee:a1:25:4a:79:08:
                    09:7d:25:9d:22:be:92:a2:d7:8d:86:da:6e:67:d4:
                    03:c7:a0:86:27:d7:4f:91:1e:b6:76:5d:b7:aa:90:
                    27:06:5c:8c:e0:f5:71:b8:55:7d:69:c0:7e:c4:d0:
                    fa:a6:b5:11:97:bb:65:a6:e3:7c:ec:6c:3e:d5:84:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E3:7D:CA:40:49:27:98:2A:D8:43:D5:22:58:0D:25:99:70:DF:BE
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/ION9ykBJJ5gq2EPVIlgNJZlw374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.11.0/24
                IPv6:
                  2a11:da80::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:8f:61:b4:f0:56:c4:b4:3d:7b:91:d4:51:77:44:75:4a:
         e7:74:06:c1:bb:f8:7a:28:1c:34:38:e2:49:87:6f:b4:a5:46:
         6f:a1:72:12:86:3e:e6:63:25:80:25:46:17:03:98:40:c3:35:
         00:dc:03:0c:50:33:d7:8e:f8:40:06:c0:bc:87:d4:e2:d3:97:
         67:b6:d3:69:86:9b:27:43:0f:0d:bd:13:42:e3:b4:66:59:13:
         87:b4:ea:11:ac:f1:3d:68:d7:4e:43:8a:a1:ce:39:8b:1d:26:
         cb:0c:8b:95:e4:bd:3f:16:dd:72:db:fd:1a:e2:9b:92:61:0e:
         44:f1:7d:f2:ab:bf:6e:7c:79:df:56:0e:d4:30:0b:2c:bd:d6:
         6a:b8:bc:b0:34:ea:3e:5b:b5:1a:12:41:8e:1c:67:1a:3e:83:
         00:38:8a:c9:36:a3:3b:c7:8e:cc:5b:53:58:f1:5f:59:dc:d4:
         a8:12:5b:fe:6b:5f:a8:2c:36:95:01:8e:c6:f3:2b:a9:eb:3d:
         3d:61:73:d8:18:9b:8c:42:5a:0d:90:11:2d:cc:af:6f:31:a4:
         23:27:c5:c2:57:6e:0c:10:6a:38:20:b8:6b:24:72:4c:7f:6c:
         2a:66:a4:3c:35:1d:b8:a3:1e:10:78:57:6c:0a:b5:ce:b4:cc:
         2b:21:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----