Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa
File:                     Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa (raw, json)
Hash identifier:          dSojNSC0uSqyIwMWcjbpnKZkQCzkH5bb1ahdZuNz09U=
Subject key identifier:   4A:CD:24:FB:92:EF:E0:E1:03:73:A1:6B:6C:B9:AC:94:DB:73:4C:EA
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       0186E275F72B69AA62F2E39D8D3DF7F74C50
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa
Signing time:             Tue 14 Mar 2023 23:30:27 +0000
ROA not before:           Tue 14 Mar 2023 23:30:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        95.111.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e2:75:f7:2b:69:aa:62:f2:e3:9d:8d:3d:f7:f7:4c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: Mar 14 23:30:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4acd24fb92efe0e10373a16b6cb9ac94db734cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:8b:5d:ec:bd:3b:4d:cc:4f:25:4e:85:be:
                    17:42:95:15:3b:98:48:e1:21:5e:5c:35:11:33:61:
                    c8:67:51:e7:b3:e0:ae:7d:0a:ca:9b:10:47:52:51:
                    ef:ae:a3:58:5e:b2:e3:f0:46:2a:87:f9:40:6e:0e:
                    50:a3:3b:df:e1:5f:0a:5c:2c:33:f9:af:33:0a:e8:
                    4e:61:9d:ef:06:b1:b5:f0:b0:bd:cc:a6:26:5a:59:
                    81:d8:49:62:32:cc:54:f0:2f:07:f4:8e:e9:32:3a:
                    14:53:16:55:63:e5:0d:59:9e:90:fa:a0:b1:7a:7c:
                    1f:de:e0:17:5a:1f:e6:a7:ca:bf:03:91:9a:82:02:
                    50:ee:90:e2:24:5c:9f:4e:47:6d:a5:6d:04:cb:c9:
                    10:40:8b:5d:f7:3b:ca:0d:44:02:87:82:03:f3:75:
                    f1:76:33:c1:85:28:bb:a7:5b:69:1b:20:a4:e1:5d:
                    d1:4d:d2:42:fb:b8:cb:a6:9b:f5:4a:ac:18:6d:d4:
                    23:56:91:9e:4d:9f:82:c2:76:4d:43:03:6a:5c:e5:
                    f9:a2:6a:6e:1d:69:43:c5:24:24:a9:6c:e2:3a:e3:
                    27:a1:07:da:81:03:ca:98:f1:18:96:f1:2c:09:6e:
                    0b:f7:35:6c:58:08:c4:69:6a:81:39:50:86:3e:62:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:24:FB:92:EF:E0:E1:03:73:A1:6B:6C:B9:AC:94:DB:73:4C:EA
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ss0k-5Lv4OEDc6FrbLmslNtzTOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.111.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:5a:af:b2:46:22:05:05:f0:8a:c3:66:7c:6a:41:02:f4:
         26:a0:72:59:4a:6a:4d:88:be:3a:8d:7b:a7:db:81:b7:1f:f9:
         55:37:42:05:88:ae:97:f2:e4:dd:a6:70:b1:6e:e2:54:91:fd:
         a5:74:9a:dc:74:6e:93:79:cd:ca:a4:5a:fa:d8:cc:96:e4:0a:
         bf:c5:5b:e4:e0:1c:15:23:78:f2:c8:29:a7:43:24:ee:c5:54:
         43:b9:ab:c7:61:24:0d:00:39:cd:81:62:14:9b:20:22:85:cf:
         ac:7b:3a:78:49:2a:74:ab:27:65:74:ad:c1:51:a5:42:fc:e1:
         48:00:ae:bb:3c:7f:89:38:83:19:03:ab:b2:d8:f0:1f:80:95:
         2e:f3:5b:25:92:e8:66:79:b9:88:30:a5:4f:40:5d:fe:f9:99:
         99:f5:3b:06:ce:5f:23:65:ed:38:f2:64:c5:52:7f:46:97:b4:
         3e:6c:70:a7:95:bd:fd:71:3f:6d:a2:ff:5b:c1:69:ef:97:d3:
         5f:76:7d:11:18:97:10:05:bd:16:e1:9b:90:b2:77:96:e9:af:
         7a:13:4f:4b:c0:01:f4:b4:c9:83:f3:a9:02:df:94:1a:1f:fb:
         85:eb:98:18:a1:c9:a4:4f:97:ee:41:8b:3f:55:26:42:3f:6a:
         fc:6b:3b:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbidfcraapi8uOdjT3390xQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjMwMzE0MjMzMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNkMjRmYjkyZWZlMGUxMDM3M2ExNmI2Y2I5YWM5NGRiNzM0Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8CLXey9O03MTyVOhb4XQpUVO5hI
4SFeXDURM2HIZ1Hns+CufQrKmxBHUlHvrqNYXrLj8EYqh/lAbg5Qozvf4V8KXCwz
+a8zCuhOYZ3vBrG18LC9zKYmWlmB2EliMsxU8C8H9I7pMjoUUxZVY+UNWZ6Q+qCx
enwf3uAXWh/mp8q/A5GaggJQ7pDiJFyfTkdtpW0Ey8kQQItd9zvKDUQCh4ID83Xx
djPBhSi7p1tpGyCk4V3RTdJC+7jLppv1SqwYbdQjVpGeTZ+CwnZNQwNqXOX5ompu
HWlDxSQkqWziOuMnoQfagQPKmPEYlvEsCW4L9zVsWAjEaWqBOVCGPmIn6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErNJPuS7+DhA3Oha2y5rJTbc0zqMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvU3Mway01THY0T0VEYzZGcmJMbXNsTnR6VE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEX2+QMA0G
CSqGSIb3DQEBCwUAA4IBAQBOL1qvskYiBQXwisNmfGpBAvQmoHJZSmpNiL46jXun
24G3H/lVN0IFiK6X8uTdpnCxbuJUkf2ldJrcdG6Tec3KpFr62MyW5Aq/xVvk4BwV
I3jyyCmnQyTuxVRDuavHYSQNADnNgWIUmyAihc+sezp4SSp0qydldK3BUaVC/OFI
AK67PH+JOIMZA6uy2PAfgJUu81slkuhmebmIMKVPQF3++ZmZ9TsGzl8jZe048mTF
Un9Gl7Q+bHCnlb39cT9tov9bwWnvl9Nfdn0RGJcQBb0W4ZuQsneW6a96E09LwAH0
tMmD86kC35QaH/uF65gYocmkT5fuQYs/VSZCP2r8azv5
-----END CERTIFICATE-----