Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/Ggjj5F0DYvRrMl0bnPlpRBLn39Y.roa
File:                     Ggjj5F0DYvRrMl0bnPlpRBLn39Y.roa (raw, json)
Hash identifier:          TtBJMojgq+qEUlqnax5vm+uonq9znux60RUTiqyFw10=
Subject key identifier:   1A:08:E3:E4:5D:03:62:F4:6B:32:5D:1B:9C:F9:69:44:12:E7:DF:D6
Certificate issuer:       /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial:       01882DC3E9A352731FB458BF737FE08CF279
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/Ggjj5F0DYvRrMl0bnPlpRBLn39Y.roa
Signing time:             Thu 18 May 2023 07:29:54 +0000
ROA not before:           Thu 18 May 2023 07:29:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205134
IP address blocks:        91.216.171.0/24 maxlen: 24
                          2a12:d9c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2d:c3:e9:a3:52:73:1f:b4:58:bf:73:7f:e0:8c:f2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
        Validity
            Not Before: May 18 07:29:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a08e3e45d0362f46b325d1b9cf9694412e7dfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:68:b6:d6:ed:67:83:1d:91:a9:a7:61:49:
                    6f:95:09:2d:05:b1:90:ca:b4:9a:72:97:4f:b1:e3:
                    34:0d:c6:91:56:38:c5:2c:84:95:ae:d3:f0:db:55:
                    9f:84:b3:a0:4c:de:ed:9d:18:1a:8b:07:89:76:9a:
                    50:62:a7:43:cb:0b:5d:6e:24:1c:23:af:01:af:c2:
                    27:76:ee:94:91:92:6f:d5:0a:a5:8e:f1:00:9d:f4:
                    61:f9:61:f8:f7:b2:10:bb:87:a5:b2:0a:cd:25:ce:
                    98:12:75:a6:07:ad:1e:0d:05:3e:c6:f4:05:11:d7:
                    5f:8c:6d:67:a5:f9:5c:c1:f8:58:82:34:6a:11:97:
                    10:ad:ec:75:50:a1:53:07:0b:0a:ff:6f:44:91:2b:
                    ba:76:9a:6e:4d:e4:59:e2:3d:81:4d:8c:f3:c9:9c:
                    d2:97:b2:6a:4a:52:5e:55:73:2e:df:58:29:10:5d:
                    e1:24:32:33:68:27:5a:29:0b:77:19:fc:b2:82:86:
                    18:36:5f:30:d1:fa:53:74:c4:ea:05:53:a1:d4:a9:
                    b1:83:50:33:83:d0:ce:e2:bf:f4:78:3f:25:76:cd:
                    f2:cb:e4:01:85:a9:de:5f:84:a5:08:c3:e1:f3:cf:
                    bf:24:49:e7:ed:5e:f6:df:b5:0d:7d:a5:9b:0e:6c:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:E3:E4:5D:03:62:F4:6B:32:5D:1B:9C:F9:69:44:12:E7:DF:D6
            X509v3 Authority Key Identifier:
                keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/Ggjj5F0DYvRrMl0bnPlpRBLn39Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.171.0/24
                IPv6:
                  2a12:d9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:53:7e:71:f0:9b:5c:c4:b8:01:fa:c2:78:d3:42:f0:3e:34:
         65:24:c4:2b:a5:3c:b9:ba:67:b8:94:18:a4:fd:a7:bd:95:04:
         e1:9c:3f:9e:ac:2a:d8:16:18:62:2e:a0:c3:c2:20:64:05:0e:
         9a:94:fc:8e:0e:aa:4f:ec:37:6d:0d:1b:be:63:c3:d7:cb:39:
         8f:08:3a:31:90:27:a7:03:38:4d:b1:dd:3c:17:21:f4:d2:32:
         38:11:d4:5d:2a:dd:85:91:a9:75:1e:a8:b4:95:6c:55:b8:23:
         34:0a:1e:e5:4c:f0:e9:d1:ee:0f:b4:38:41:ee:66:4c:72:10:
         38:e1:84:3c:9f:a1:72:77:61:40:9d:de:0c:96:bf:13:f6:47:
         42:53:f5:78:25:7d:49:e6:51:a9:f2:59:61:0c:3c:7c:53:f5:
         46:65:47:62:63:83:b3:ac:a0:f0:e7:4b:88:f3:4e:e4:09:b5:
         b2:32:1e:4e:f4:34:0c:7c:87:ca:49:37:e1:93:89:3d:7c:41:
         0f:33:1d:f1:c0:cc:dc:15:47:22:c5:15:19:f3:7f:81:7d:ec:
         3a:f7:ba:7e:b8:45:52:17:52:0e:37:b8:02:4b:97:a1:8f:28:
         18:d7:5a:83:62:82:cf:ef:15:f1:d2:ae:20:fa:2b:f2:2f:7b:
         a7:66:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----