Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa
File:                     X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa (raw, json)
Hash identifier:          +mxYPDSic16/IyN9+Wo8aJFRzlPCo4SZB0J/LTqVzMw=
Subject key identifier:   5F:A1:8D:8F:66:D3:47:A0:7E:AE:47:5E:5B:EA:67:70:C4:CC:9F:E4
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       01856ED4BC91F2ECDA984828C1BED8C735C9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa
Signing time:             Sun 01 Jan 2023 19:35:13 +0000
ROA not before:           Sun 01 Jan 2023 19:35:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        188.209.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:bc:91:f2:ec:da:98:48:28:c1:be:d8:c7:35:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jan  1 19:35:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fa18d8f66d347a07eae475e5bea6770c4cc9fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:2d:76:a3:1f:c7:fc:1f:c7:3b:38:4f:e4:
                    99:0c:e2:c7:77:82:da:8d:d5:b3:f7:e9:7a:2e:b3:
                    2f:8d:d9:59:3c:1f:95:2a:10:9f:bd:e0:dc:53:a9:
                    24:43:2a:92:49:eb:58:93:80:27:b3:29:2c:89:61:
                    c5:dc:77:3e:3c:16:e8:6d:5c:2e:ad:1e:b3:27:cd:
                    37:6a:0d:a3:50:73:3c:d2:33:ad:83:eb:a3:0a:07:
                    aa:cc:8f:1d:5f:78:4e:e9:1f:30:4a:20:09:3b:04:
                    8d:cb:ec:ef:58:ae:2f:67:23:45:3e:a3:dc:cd:df:
                    bd:07:cf:a7:28:eb:28:16:63:82:7f:6a:ec:39:9b:
                    10:bb:bb:f4:08:0b:32:8c:99:92:80:e3:af:51:f9:
                    43:8a:0c:da:f5:fc:9e:d3:ae:48:60:41:8a:dd:7b:
                    f3:19:40:9f:9c:6a:4c:0b:de:49:72:30:67:67:8e:
                    84:d4:bd:1f:65:f7:b9:b4:05:7d:7f:ab:9c:e2:f9:
                    d9:bc:94:95:4d:80:9f:6a:a6:0c:ac:fd:c0:94:70:
                    e9:7f:d6:c3:ad:89:89:d5:03:80:5b:af:a9:9d:6f:
                    a3:1f:a6:12:c8:36:31:6a:a0:a5:0b:7d:45:d5:53:
                    ee:71:2a:d2:78:1e:49:77:2b:bc:ae:f5:e9:cc:c4:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A1:8D:8F:66:D3:47:A0:7E:AE:47:5E:5B:EA:67:70:C4:CC:9F:E4
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/X6GNj2bTR6B-rkdeW-pncMTMn-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.209.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:4a:c1:75:02:f7:89:2c:b7:db:f8:80:77:e7:53:4c:de:
         08:32:b5:12:cc:2a:fe:e6:04:ed:e9:38:0c:9b:1d:45:11:67:
         69:d0:80:81:ed:fd:fc:18:75:64:3f:c3:4a:99:18:ca:da:6a:
         55:d6:9d:54:66:59:79:a4:d1:a3:92:dd:d3:f2:21:16:94:b3:
         1e:d6:95:87:78:8c:8f:bf:a4:57:b0:81:07:32:2a:72:88:80:
         0f:f3:21:7a:18:7f:f8:2f:13:af:39:08:73:05:12:de:77:e8:
         e8:80:92:c0:bc:9d:c8:03:2a:36:a2:e8:2f:91:39:50:f5:6e:
         67:a6:f6:3c:ce:d4:89:03:d7:f5:54:2d:a6:3d:f9:24:6d:bd:
         b2:a9:cc:2c:db:a9:19:38:30:87:79:8f:53:e0:59:87:ac:f0:
         76:4e:91:f7:fb:b8:81:ef:f1:ba:f7:7c:c9:f3:a1:09:84:a3:
         e8:90:59:bd:26:b0:16:93:d8:e8:db:5d:6c:62:b8:bf:84:cf:
         de:4a:66:ab:f5:bc:96:93:0e:f8:39:53:0f:2e:c0:71:d9:9d:
         e0:c3:68:c6:58:6d:54:e2:26:1a:c5:1e:d3:aa:bf:2b:bc:fa:
         cc:89:4d:09:54:a5:dc:bd:d2:78:71:05:14:4f:14:ef:c6:b0:
         80:71:43:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1LyR8uzamEgowb7YxzXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwMTAxMTkzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmExOGQ4ZjY2ZDM0N2EwN2VhZTQ3NWU1YmVhNjc3MGM0Y2M5ZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwtdqMfx/wfxzs4T+SZDOLHd4La
jdWz9+l6LrMvjdlZPB+VKhCfveDcU6kkQyqSSetYk4AnsyksiWHF3Hc+PBbobVwu
rR6zJ803ag2jUHM80jOtg+ujCgeqzI8dX3hO6R8wSiAJOwSNy+zvWK4vZyNFPqPc
zd+9B8+nKOsoFmOCf2rsOZsQu7v0CAsyjJmSgOOvUflDigza9fye065IYEGK3Xvz
GUCfnGpMC95JcjBnZ46E1L0fZfe5tAV9f6uc4vnZvJSVTYCfaqYMrP3AlHDpf9bD
rYmJ1QOAW6+pnW+jH6YSyDYxaqClC31F1VPucSrSeB5Jdyu8rvXpzMTnQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+hjY9m00egfq5HXlvqZ3DEzJ/kMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvWDZHTmoyYlRSNkItcmtkZVctcG5jTVRNbi1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvNGAMA0G
CSqGSIb3DQEBCwUAA4IBAQCmaErBdQL3iSy32/iAd+dTTN4IMrUSzCr+5gTt6TgM
mx1FEWdp0ICB7f38GHVkP8NKmRjK2mpV1p1UZll5pNGjkt3T8iEWlLMe1pWHeIyP
v6RXsIEHMipyiIAP8yF6GH/4LxOvOQhzBRLed+jogJLAvJ3IAyo2ougvkTlQ9W5n
pvY8ztSJA9f1VC2mPfkkbb2yqcws26kZODCHeY9T4FmHrPB2TpH3+7iB7/G693zJ
86EJhKPokFm9JrAWk9jo211sYri/hM/eSmar9byWkw74OVMPLsBx2Z3gw2jGWG1U
4iYaxR7Tqr8rvPrMiU0JVKXcvdJ4cQUUTxTvxrCAcUMa
-----END CERTIFICATE-----