Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa
File:                     8i59b94RRmKVBvyp6OTrMQ79pJs.roa (raw, json)
Hash identifier:          wPcL8AUcr0pwrj/Ga/q+5rr8QL9fthRc3i7LpQGAUto=
Subject key identifier:   F2:2E:7D:6F:DE:11:46:62:95:06:FC:A9:E8:E4:EB:31:0E:FD:A4:9B
Certificate issuer:       /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial:       0186F3D76D023CB819D81F4002F6209EFB63
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa
Signing time:             Sat 18 Mar 2023 08:30:27 +0000
ROA not before:           Sat 18 Mar 2023 08:30:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58075
IP address blocks:        185.187.100.0/22 maxlen: 24
                          2a0a:47c0::/48 maxlen: 48
                          2a0a:47c0:20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:d7:6d:02:3c:b8:19:d8:1f:40:02:f6:20:9e:fb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
        Validity
            Not Before: Mar 18 08:30:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f22e7d6fde1146629506fca9e8e4eb310efda49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:d0:78:cd:57:b2:56:c4:06:db:e1:eb:0e:
                    6c:41:a7:38:f9:7f:84:00:e8:52:fe:d1:79:d3:05:
                    08:6e:af:37:c7:a4:f6:c0:14:ea:0d:a9:b6:02:21:
                    2a:bc:9b:2b:3a:3c:3c:f5:cf:5f:47:e7:b8:d3:ea:
                    f5:18:c1:73:01:6d:be:0e:5a:af:f8:c2:b3:7f:a8:
                    5a:57:6d:6e:81:ce:8c:95:eb:0e:e0:7c:10:28:c9:
                    b7:cb:2e:cc:d5:d0:11:73:9e:02:b8:2e:a5:89:42:
                    cb:be:0f:09:9e:c9:cf:de:00:ff:e5:4a:a9:2f:24:
                    f8:5e:02:47:26:fc:18:77:47:7a:01:b2:10:5a:7c:
                    15:fe:04:28:7c:0a:ed:c1:c0:47:1c:5d:a1:df:ca:
                    30:13:ca:3d:73:83:45:ae:15:59:fe:ce:57:52:fd:
                    7e:9a:9c:e9:5c:03:1d:7b:6b:ff:17:2c:da:e8:9b:
                    6b:e7:be:24:09:30:68:96:1a:33:0f:c2:05:4c:04:
                    c0:db:67:68:f2:5f:5d:86:f4:a2:39:9e:ff:3a:1a:
                    70:53:0c:6e:c7:df:7e:f1:d2:a3:b0:6b:35:d0:c9:
                    d4:14:39:db:55:ee:2c:e9:59:3d:61:36:aa:8c:4a:
                    20:88:d4:7c:de:db:53:30:e8:85:71:69:88:a1:41:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:7D:6F:DE:11:46:62:95:06:FC:A9:E8:E4:EB:31:0E:FD:A4:9B
            X509v3 Authority Key Identifier:
                keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/8i59b94RRmKVBvyp6OTrMQ79pJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.100.0/22
                IPv6:
                  2a0a:47c0::/48
                  2a0a:47c0:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:ca:36:b5:89:e6:09:3e:1d:2e:9f:01:98:d2:22:4c:80:
         86:8d:2f:89:9a:ab:bd:c8:04:14:79:47:a9:e2:00:5d:a4:ee:
         61:9d:01:ac:cc:da:94:e4:82:c3:15:b0:e7:35:af:f0:f1:02:
         09:3c:81:41:19:1b:3d:f1:8a:4e:62:19:e3:39:0e:35:b2:eb:
         b1:33:6c:0b:1e:2e:c5:7d:2c:c2:40:ed:b1:0d:9e:8d:eb:64:
         69:10:6f:e7:9c:1f:b1:ab:f7:2a:42:c8:bf:29:13:c2:e3:b4:
         36:e7:63:09:1c:d4:81:6b:50:1a:fc:05:88:95:cc:9f:55:68:
         bc:06:67:44:8f:1c:b9:8b:cb:3e:29:be:52:42:56:6f:33:0a:
         a0:9e:09:e8:a2:67:67:9f:de:08:2c:b6:56:da:7b:49:95:1c:
         3d:f8:32:83:93:b6:01:b5:88:43:5a:dd:56:47:d7:ff:2c:f1:
         83:a9:64:7a:2e:34:2f:0e:d1:e1:a1:25:10:b9:b2:ff:3f:57:
         0b:9d:8d:27:52:92:3f:57:51:85:39:a9:4a:6b:e8:4e:1f:cc:
         e5:23:a7:f0:b9:fc:0f:d6:77:2f:06:f7:fa:44:78:54:b3:f0:
         17:53:c1:06:e2:c3:f9:e7:ae:be:fe:b1:68:fb:68:d4:9c:e1:
         66:2e:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----