Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/F_AGEYIUV1qNwwAMD5DdHY3x5sA.roa
File:                     F_AGEYIUV1qNwwAMD5DdHY3x5sA.roa (raw, json)
Hash identifier:          YwMylM9jqbOOMveiuoCjoJ/NjvQXmWi9KNWrTm7oZwU=
Subject key identifier:   17:F0:06:11:82:14:57:5A:8D:C3:00:0C:0F:90:DD:1D:8D:F1:E6:C0
Certificate issuer:       /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial:       0188D4E392E8ACF7AD8F6AEC4E9354A08A6E
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/F_AGEYIUV1qNwwAMD5DdHY3x5sA.roa
Signing time:             Mon 19 Jun 2023 18:21:04 +0000
ROA not before:           Mon 19 Jun 2023 18:21:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     265827
IP address blocks:        91.236.118.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d4:e3:92:e8:ac:f7:ad:8f:6a:ec:4e:93:54:a0:8a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
        Validity
            Not Before: Jun 19 18:21:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17f006118214575a8dc3000c0f90dd1d8df1e6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:d4:b8:c6:df:57:67:52:d3:70:ed:05:9d:
                    00:f8:fd:ba:5c:5f:9a:80:df:d1:3c:62:0c:fc:b5:
                    be:e0:23:30:dd:e9:45:23:bc:39:60:15:67:1c:21:
                    5f:ca:1f:30:45:cb:03:55:8a:db:bc:40:15:76:55:
                    73:77:b6:69:fe:cd:ce:a1:e0:da:5a:a6:46:a7:20:
                    e9:fb:71:2f:4c:17:2c:f9:52:45:9c:fd:8c:78:b0:
                    79:2c:2d:d4:0c:89:35:22:ca:5e:c2:98:11:be:0d:
                    a5:08:18:11:52:b9:7f:e1:24:0f:6f:91:f7:bd:38:
                    ef:ce:b7:d2:41:a2:af:cf:f7:50:7a:af:1b:48:e7:
                    f4:a2:c7:db:28:00:e9:d4:43:64:1a:36:26:d9:c2:
                    5a:d5:d7:f5:1d:52:ba:45:86:9e:73:4b:1c:ce:f2:
                    36:0b:0d:1f:69:8d:8d:fb:90:f8:b3:e2:4c:16:a2:
                    56:d7:89:43:5f:3c:a3:23:ea:fb:01:38:40:7e:f3:
                    91:4b:6b:56:d7:09:de:93:49:af:ea:ed:c4:37:39:
                    3f:ea:78:9d:41:36:33:90:21:46:b2:18:5a:bb:c9:
                    38:59:3d:5a:64:2b:b5:74:7c:82:63:2a:6d:8f:8a:
                    8e:bf:ce:c7:7b:7e:14:27:24:34:c6:ae:42:97:de:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F0:06:11:82:14:57:5A:8D:C3:00:0C:0F:90:DD:1D:8D:F1:E6:C0
            X509v3 Authority Key Identifier:
                keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/F_AGEYIUV1qNwwAMD5DdHY3x5sA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:d8:1c:eb:ff:da:cb:d1:af:e0:94:a7:28:f8:87:6c:36:
         12:2e:29:16:48:f1:0a:08:6f:c4:d1:f6:28:00:63:59:fb:04:
         41:39:a8:28:69:80:48:11:ba:ab:1d:2f:ba:53:28:2e:46:16:
         7b:d5:1c:58:51:a1:c1:00:39:ae:d4:9f:f8:df:fa:d1:c6:b1:
         94:93:b2:a1:97:69:ff:58:7e:52:3a:a4:9e:18:40:f0:a5:ed:
         0c:89:3a:be:b2:34:ae:37:bc:ca:d7:e3:ef:8d:40:17:d7:e2:
         d3:45:eb:8f:ae:45:4d:dd:0d:58:4d:f6:10:c2:b3:a8:0d:c2:
         ec:c5:b6:ae:e1:6d:79:1e:1e:f3:3b:ef:f4:5d:49:33:9c:40:
         ae:b1:ac:77:67:f2:6b:60:0e:45:4e:7d:28:e6:3f:47:b3:04:
         a0:c8:f5:94:ce:86:38:43:1a:23:ab:f7:1d:ee:23:ba:56:ec:
         b2:dc:7b:e0:7c:0f:1e:8c:4a:76:e5:92:e5:0b:7d:62:19:89:
         2b:8c:e8:6b:9c:f6:08:00:83:01:cb:02:89:0e:4e:3b:3b:a6:
         a5:34:fe:6d:d0:63:b2:d6:06:5d:47:68:d8:f8:c6:2f:07:f3:
         ae:85:00:d3:7f:34:21:e8:fb:3c:8f:ec:62:c3:ed:88:16:01:
         42:78:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----