Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/_K3r4kjRZ7NYoVS49vUSLz6iM98.roa
File:                     _K3r4kjRZ7NYoVS49vUSLz6iM98.roa (raw, json)
Hash identifier:          yFGC2pu2RktPkGOV3tF35aafJ1seGZLnMGRbRmX/emc=
Subject key identifier:   FC:AD:EB:E2:48:D1:67:B3:58:A1:54:B8:F6:F5:12:2F:3E:A2:33:DF
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       01865A7BA31860B02C8EE73E14AD7B95F1BB
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/_K3r4kjRZ7NYoVS49vUSLz6iM98.roa
Signing time:             Thu 16 Feb 2023 13:48:17 +0000
ROA not before:           Thu 16 Feb 2023 13:48:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199839
IP address blocks:        31.24.249.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5a:7b:a3:18:60:b0:2c:8e:e7:3e:14:ad:7b:95:f1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Feb 16 13:48:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcadebe248d167b358a154b8f6f5122f3ea233df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:ac:14:bc:ac:4f:cd:79:8a:ee:25:a6:03:
                    21:79:08:10:fe:42:29:07:58:b1:f2:6c:27:fd:b8:
                    36:e0:6f:5c:aa:db:c1:72:a2:48:ea:9a:00:e2:4b:
                    27:00:91:95:f6:f0:6f:9a:9a:f6:76:20:c0:0b:88:
                    f9:b3:a1:0e:64:ca:41:76:04:c0:f2:6a:ec:ea:f1:
                    31:6d:fb:f4:ca:c2:ad:30:15:95:09:d1:23:56:0c:
                    c8:a1:9d:1d:77:7b:be:ab:e4:ba:be:d3:a0:85:60:
                    07:12:fb:c1:ea:7e:5a:9f:d8:fb:dc:36:f2:13:3b:
                    2d:23:02:4a:21:e0:47:ff:0c:10:65:9c:d3:6a:f9:
                    d4:4b:22:f7:f6:92:fb:7f:a2:20:27:0f:91:d5:42:
                    0d:5f:ab:14:08:d3:fe:40:d3:b3:49:41:c9:ed:bc:
                    15:f1:8d:45:45:b5:bd:d5:75:db:c7:cb:b1:65:eb:
                    b1:cf:1a:d4:0d:a0:c3:56:2a:b3:9f:b4:e1:9c:47:
                    ed:c7:bc:01:03:cc:58:eb:42:01:c9:c5:d4:44:d4:
                    1d:42:cd:e5:7e:18:72:8f:ca:64:1c:dd:12:02:53:
                    20:24:fd:3d:c2:ea:ee:7a:36:e8:30:39:3f:85:6b:
                    0e:6e:05:a1:a1:11:5e:db:e9:c1:a6:2a:4b:8c:1a:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:EB:E2:48:D1:67:B3:58:A1:54:B8:F6:F5:12:2F:3E:A2:33:DF
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/_K3r4kjRZ7NYoVS49vUSLz6iM98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:28:bb:6f:f8:e8:5f:c8:95:75:87:35:6a:59:a3:f3:98:58:
         d1:0a:6f:f4:e5:5c:cd:40:bb:a0:f4:77:f1:39:d4:2f:e1:2e:
         8a:9b:d6:2d:3a:39:e7:70:96:18:ff:bb:e2:ec:3a:26:38:af:
         44:56:b0:bd:b8:60:cf:f6:31:c9:0f:7d:be:46:c8:6e:14:6d:
         b7:ca:a6:d9:1f:67:22:f1:18:ac:c3:d4:2d:b3:53:d8:57:89:
         bd:f8:59:1f:cb:d7:f3:57:73:c6:7c:c0:b3:c9:4d:b3:76:12:
         44:03:d6:cd:46:df:5f:dc:c8:73:5e:58:15:44:c2:36:ef:67:
         b1:de:e8:36:bd:84:1c:1e:4c:fd:53:07:a5:9b:1f:57:1a:2c:
         d4:f6:09:f7:64:e0:2b:0f:a6:71:2b:5c:a2:c8:78:e2:f7:b0:
         67:04:48:02:d6:b1:3f:6d:61:0f:0a:cf:aa:d8:4b:62:e6:85:
         6b:b0:8e:23:72:85:7d:2b:ae:ae:c7:8a:7d:b8:22:39:aa:d0:
         51:57:a2:3e:92:84:40:55:fa:02:c8:6b:92:68:3e:74:e9:0a:
         2d:9f:30:ba:d9:df:a7:03:a0:ef:32:78:c8:5a:76:00:79:ec:
         01:71:b7:76:15:98:5a:0f:e2:41:33:75:7d:29:ad:84:bd:54:
         ed:79:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----