Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/agS8KLHn3AJGhErrLjsq_PbF4GU.roa
File:                     agS8KLHn3AJGhErrLjsq_PbF4GU.roa (raw, json)
Hash identifier:          tNrggzH8zK1aNNh0Ozetc1OswWWDJw+ZKaQDi+9wJMU=
Subject key identifier:   6A:04:BC:28:B1:E7:DC:02:46:84:4A:EB:2E:3B:2A:FC:F6:C5:E0:65
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       0187E1CDD414F203674AFCFFEEE886D3F2E3
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/agS8KLHn3AJGhErrLjsq_PbF4GU.roa
Signing time:             Wed 03 May 2023 13:29:35 +0000
ROA not before:           Wed 03 May 2023 13:29:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        31.133.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:cd:d4:14:f2:03:67:4a:fc:ff:ee:e8:86:d3:f2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: May  3 13:29:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6a04bc28b1e7dc0246844aeb2e3b2afcf6c5e065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:7a:20:37:6f:3c:ac:6a:02:73:80:38:ed:
                    60:0f:5a:1a:b5:aa:dd:89:ca:5e:a9:2a:41:95:7f:
                    2d:2e:d0:6e:cc:91:57:a3:ef:83:53:3a:af:99:88:
                    84:4e:4c:8f:77:f8:7d:3c:3b:47:58:06:0b:44:6f:
                    97:b5:b3:29:41:58:39:99:e6:08:72:79:d1:2d:d1:
                    af:05:9f:72:ff:f0:98:b7:36:18:e1:31:ae:fc:ac:
                    27:cf:d2:2c:79:5a:dc:55:ea:42:0d:b6:79:e3:4f:
                    42:4c:14:91:b4:10:04:2f:18:ae:6b:b1:32:31:05:
                    5c:ce:46:9a:80:ee:ea:26:d3:72:aa:5f:f1:41:cf:
                    9b:d8:f4:0a:90:ac:90:41:d1:8b:36:b3:df:c7:6e:
                    18:3d:79:70:f5:4e:a5:34:26:9f:5e:0a:79:e2:cb:
                    2e:1e:ea:88:11:b3:9e:ca:55:f4:a2:83:10:b9:dc:
                    b9:c9:18:07:36:96:fa:92:1d:a6:9c:38:b1:e3:ce:
                    2f:cf:d1:6c:cb:55:6b:7b:da:99:e0:23:c1:5e:f5:
                    47:f6:1e:bd:19:5d:2d:91:08:85:05:90:92:3c:1e:
                    3c:6c:dd:ad:9c:60:8c:b7:19:2a:f2:49:f4:65:29:
                    5f:3b:a8:77:d5:59:e4:a2:26:ec:46:3e:b6:ce:1d:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:04:BC:28:B1:E7:DC:02:46:84:4A:EB:2E:3B:2A:FC:F6:C5:E0:65
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/agS8KLHn3AJGhErrLjsq_PbF4GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.133.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:39:b6:98:f6:f4:19:bc:03:1d:88:11:3f:e4:40:c0:88:
         6a:f2:65:63:c3:c6:88:5a:6c:18:92:5a:5e:00:b6:dc:56:7c:
         51:0b:c5:7d:1a:9a:fe:fb:fa:ef:b1:53:e3:29:a7:9c:07:c4:
         0c:35:da:bb:b2:d5:b5:77:6c:70:c3:22:5c:cf:4c:c9:60:30:
         ec:f2:ce:be:96:36:27:0f:af:22:7c:f2:46:17:99:35:f5:f1:
         a8:b7:a5:79:52:98:4f:ce:43:c2:75:39:8e:1c:13:c3:37:46:
         e0:8e:d7:e1:2d:63:34:a3:6b:94:fe:69:fb:81:10:49:16:c5:
         39:ab:ec:bb:27:ad:5f:7c:e9:d6:34:e3:30:0e:4d:12:cc:99:
         53:c6:4c:03:78:98:6b:68:45:b5:3d:f1:b9:1b:55:c9:0f:fc:
         e2:1b:df:7b:e3:bd:8c:33:11:e0:96:73:8a:78:98:dd:ba:b1:
         46:79:ac:60:0c:5d:2b:c9:5b:3d:ac:d0:3a:4d:65:25:ba:da:
         58:a6:62:a6:0e:7d:27:e7:a5:9d:07:a6:66:80:ed:17:75:c3:
         fe:9b:9c:60:b6:dd:64:53:b2:69:90:73:75:f2:a1:0a:e9:64:
         57:b2:65:43:06:ad:fb:c1:4f:2e:85:cb:02:37:bb:19:76:9f:
         45:2c:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----