Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/_7ig5roCOmXjWnHuNhSMuDiA6nk.roa
File:                     _7ig5roCOmXjWnHuNhSMuDiA6nk.roa (raw, json)
Hash identifier:          pR3yPFLwLEdbzqV9fxCwiyH+d/+QEzf/YJTSI0LAydQ=
Subject key identifier:   FF:B8:A0:E6:BA:02:3A:65:E3:5A:71:EE:36:14:8C:B8:38:80:EA:79
Certificate issuer:       /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial:       018570705DEECDFC7177346A04DC2FE3C197
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/_7ig5roCOmXjWnHuNhSMuDiA6nk.roa
Signing time:             Mon 02 Jan 2023 03:04:50 +0000
ROA not before:           Mon 02 Jan 2023 03:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47828
IP address blocks:        91.199.134.0/24 maxlen: 24
                          2001:67c:1824::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:5d:ee:cd:fc:71:77:34:6a:04:dc:2f:e3:c1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
        Validity
            Not Before: Jan  2 03:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ffb8a0e6ba023a65e35a71ee36148cb83880ea79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:45:8a:07:2e:84:3b:aa:d7:4e:f6:b3:43:
                    12:5f:2b:24:81:60:ff:95:cb:a6:f2:b1:71:7b:90:
                    b3:c8:cb:41:82:3e:d1:aa:b6:ce:e1:83:b2:33:70:
                    59:6e:1a:2c:6b:98:29:23:39:a7:9b:cb:78:22:f9:
                    3c:90:0c:69:50:7a:80:b5:c9:90:18:71:59:58:17:
                    08:fc:e2:ae:96:82:bb:fd:60:17:ed:40:2d:53:2c:
                    f2:44:b5:21:04:04:8f:15:2e:7f:55:04:12:cc:a9:
                    61:8e:09:2c:7a:49:12:0a:d6:f2:35:ae:61:04:4f:
                    87:52:8f:97:2f:07:4b:e6:ce:82:c2:83:f2:9c:12:
                    28:8c:3f:f4:ea:21:c0:da:32:89:9a:92:13:bd:d4:
                    61:ca:a3:04:a4:95:57:38:e2:07:81:92:d3:a0:32:
                    fe:4b:cf:e8:e6:a1:27:d8:76:2f:1e:88:76:21:1c:
                    5a:ff:0c:ba:a3:76:26:ca:6f:1f:b8:f6:7a:d1:a9:
                    7a:24:fe:9c:7a:31:98:16:d6:d4:c7:10:b0:93:f6:
                    c2:39:23:59:84:55:7a:cc:4b:40:6b:d1:7e:cf:f4:
                    a7:92:7a:ae:b2:01:2d:f8:8c:dc:bb:ca:c4:c8:fb:
                    3a:cb:4a:74:ab:b6:2c:37:36:f1:5f:82:90:22:ec:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:A0:E6:BA:02:3A:65:E3:5A:71:EE:36:14:8C:B8:38:80:EA:79
            X509v3 Authority Key Identifier:
                keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/_7ig5roCOmXjWnHuNhSMuDiA6nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.134.0/24
                IPv6:
                  2001:67c:1824::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:58:2b:a4:b6:70:e7:6b:ef:00:d1:8b:73:23:17:30:79:
         b5:cd:de:ef:f1:4d:01:9c:fc:05:df:5c:57:99:bd:f3:bd:e5:
         9e:a2:29:14:87:81:3a:01:38:1b:73:56:38:08:f4:47:68:0c:
         c6:45:52:43:46:dc:9e:1e:39:f5:67:68:fd:c3:c0:6a:bc:6b:
         ba:fa:27:58:bf:c0:2a:b6:08:f3:35:31:a9:53:01:8e:8d:ef:
         96:88:c5:66:9e:71:80:c0:9f:e0:ba:ea:9d:7a:25:4a:40:e9:
         0f:90:35:d8:42:5a:3d:22:31:b7:e6:c4:62:fa:4f:d8:df:40:
         8c:d2:c1:d6:95:3d:4d:d7:00:92:55:29:d5:30:40:bd:aa:da:
         85:8e:c3:7e:fe:2a:42:a1:fb:f2:42:cc:bc:e4:be:60:43:09:
         a8:b0:a0:bc:7c:ea:bf:bd:fa:66:82:cd:a3:62:7d:b7:d9:a0:
         1f:d9:cd:57:bb:ef:6b:c1:ca:22:1e:3f:36:f1:4e:19:a2:9c:
         86:5a:fb:30:6a:f1:20:a1:fd:a3:71:71:cb:f3:da:fd:de:71:
         a9:a3:a0:0a:53:a3:b5:54:56:dc:5a:84:3e:9b:d8:d8:85:d3:
         ab:85:26:2c:19:a3:75:6c:fe:93:86:a2:79:bd:8b:60:58:5c:
         f5:44:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----