Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/Xk4q_0ZkqqW7nggaiG_RQdAvyZ4.roa
File:                     Xk4q_0ZkqqW7nggaiG_RQdAvyZ4.roa (raw, json)
Hash identifier:          TgnyBZWekp3o9EZKeHErcDsJ4Vq0nqI2sMAs6cNNxfw=
Subject key identifier:   5E:4E:2A:FF:46:64:AA:A5:BB:9E:08:1A:88:6F:D1:41:D0:2F:C9:9E
Certificate issuer:       /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial:       0186C72235DF4AE7233ABC15DCEB7A381E72
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/Xk4q_0ZkqqW7nggaiG_RQdAvyZ4.roa
Signing time:             Thu 09 Mar 2023 16:09:13 +0000
ROA not before:           Thu 09 Mar 2023 16:09:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58075
IP address blocks:        185.187.100.0/22 maxlen: 24
                          2a0a:47c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c7:22:35:df:4a:e7:23:3a:bc:15:dc:eb:7a:38:1e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
        Validity
            Not Before: Mar  9 16:09:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5e4e2aff4664aaa5bb9e081a886fd141d02fc99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d5:9c:37:36:0c:05:68:b9:5d:97:92:c9:57:
                    c4:7a:82:d2:77:10:0c:87:58:8e:fe:e0:0d:1c:73:
                    71:9a:36:e5:bc:13:42:1d:6c:60:18:0f:c6:9d:9a:
                    5b:6a:9e:4e:43:51:68:e6:16:fa:97:ac:75:fa:63:
                    19:e3:5a:6d:a4:2e:6f:a7:ee:ca:60:33:1b:c4:40:
                    b9:86:42:49:42:cb:30:37:50:b8:84:dc:fc:fc:ee:
                    28:a1:a6:4b:5b:a8:a7:1c:e6:69:14:22:9f:2d:c5:
                    29:2c:47:ce:63:c9:b2:65:d9:bb:ed:ef:51:58:77:
                    7f:32:f0:b1:8e:b4:e1:ae:fb:c2:0d:ce:d8:39:4e:
                    d9:d9:50:cc:a1:ec:35:02:51:eb:1b:03:f3:40:cb:
                    2a:6d:ae:85:41:29:f6:17:57:28:2c:0d:f6:46:fe:
                    03:c9:cd:71:3e:0a:27:a5:45:dc:7e:3d:6c:76:14:
                    8d:52:a5:6b:ed:b7:f6:0d:a4:7e:03:54:9d:85:ac:
                    aa:02:63:89:0e:81:d6:87:1f:d7:ca:a8:e9:b6:a0:
                    40:a6:66:80:dc:7f:fc:1c:6c:84:e3:c3:91:06:52:
                    6b:b5:53:18:ba:53:ec:9e:ac:c9:21:0b:28:c5:9f:
                    f1:3a:cf:37:7d:4a:1c:b7:e6:5f:9e:10:43:ea:f3:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:2A:FF:46:64:AA:A5:BB:9E:08:1A:88:6F:D1:41:D0:2F:C9:9E
            X509v3 Authority Key Identifier:
                keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/Xk4q_0ZkqqW7nggaiG_RQdAvyZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.100.0/22
                IPv6:
                  2a0a:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:45:71:81:75:63:d8:8f:6f:0f:87:01:09:d4:a7:3c:c8:9f:
         ba:5c:f6:36:bd:d2:bf:0d:6e:a7:db:96:66:46:ed:83:c7:47:
         f0:99:b7:a4:df:b2:a6:c3:72:8f:39:c7:90:00:af:17:64:af:
         89:09:a4:31:6d:ab:08:3f:91:67:f2:d3:36:9b:e3:c1:70:1b:
         c1:ca:87:11:98:78:d2:0d:69:58:d0:c9:6f:68:0f:71:a9:73:
         1b:d5:9e:b3:85:25:ba:44:86:43:11:3d:26:96:fd:35:85:43:
         22:d1:88:b0:dc:28:99:12:51:7d:cd:ce:e2:f9:92:70:a2:66:
         10:d8:71:07:7f:27:bf:b8:fb:6b:40:7d:5a:bd:0d:11:b9:78:
         96:72:24:15:c1:03:c3:1e:40:06:c7:9d:9b:0d:a2:40:9f:83:
         03:17:bf:d5:ef:8f:b7:74:b2:ed:94:d2:c3:b2:05:99:de:53:
         d1:7f:a1:2b:61:06:d2:b2:85:55:35:8d:d3:2b:1c:bf:c7:49:
         d0:fb:2d:ce:1f:48:e2:9a:34:8a:54:e4:86:1a:09:ab:eb:69:
         f4:4f:d3:5f:57:0c:86:6e:81:68:e6:00:93:b8:d6:9a:3b:6f:
         e3:fa:f1:e3:21:72:9b:a1:6f:d2:18:0e:a9:e9:94:5f:91:3e:
         8a:4a:db:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbHIjXfSucjOrwV3Ot6OB5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjMwMzA5MTYwOTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTRlMmFmZjQ2NjRhYWE1YmI5ZTA4MWE4ODZmZDE0MWQwMmZjOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtWcNzYMBWi5XZeSyVfEeoLSdxAM
h1iO/uANHHNxmjblvBNCHWxgGA/GnZpbap5OQ1Fo5hb6l6x1+mMZ41ptpC5vp+7K
YDMbxEC5hkJJQsswN1C4hNz8/O4ooaZLW6inHOZpFCKfLcUpLEfOY8myZdm77e9R
WHd/MvCxjrThrvvCDc7YOU7Z2VDMoew1AlHrGwPzQMsqba6FQSn2F1coLA32Rv4D
yc1xPgonpUXcfj1sdhSNUqVr7bf2DaR+A1SdhayqAmOJDoHWhx/XyqjptqBApmaA
3H/8HGyE48ORBlJrtVMYulPsnqzJIQsoxZ/xOs83fUoct+ZfnhBD6vNyOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF5OKv9GZKqlu54IGohv0UHQL8meMB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvWGs0cV8wWmtxcVc3bmdnYWlHX1JRZEF2eVo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCubtkMA8E
AgACMAkDBwAqCkfAAAAwDQYJKoZIhvcNAQELBQADggEBACdFcYF1Y9iPbw+HAQnU
pzzIn7pc9ja90r8NbqfblmZG7YPHR/CZt6TfsqbDco85x5AArxdkr4kJpDFtqwg/
kWfy0zab48FwG8HKhxGYeNINaVjQyW9oD3GpcxvVnrOFJbpEhkMRPSaW/TWFQyLR
iLDcKJkSUX3NzuL5knCiZhDYcQd/J7+4+2tAfVq9DRG5eJZyJBXBA8MeQAbHnZsN
okCfgwMXv9Xvj7d0su2U0sOyBZneU9F/oSthBtKyhVU1jdMrHL/HSdD7Lc4fSOKa
NIpU5IYaCavrafRP019XDIZugWjmAJO41po7b+P68eMhcpuhb9IYDqnplF+RPopK
29U=
-----END CERTIFICATE-----