Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Jkk-FHpa0YvJbNQutckfF2HJBQo.roa
File:                     Jkk-FHpa0YvJbNQutckfF2HJBQo.roa (raw, json)
Hash identifier:          GaMYgTogizmKf3E/HFuCCStXV0aXnUm+tWu2UnuInDo=
Subject key identifier:   26:49:3E:14:7A:5A:D1:8B:C9:6C:D4:2E:B5:C9:1F:17:61:C9:05:0A
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       01856FC28487F7E478C3E6FB987145E414E0
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Jkk-FHpa0YvJbNQutckfF2HJBQo.roa
Signing time:             Sun 01 Jan 2023 23:54:56 +0000
ROA not before:           Sun 01 Jan 2023 23:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49901
IP address blocks:        31.14.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:84:87:f7:e4:78:c3:e6:fb:98:71:45:e4:14:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jan  1 23:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26493e147a5ad18bc96cd42eb5c91f1761c9050a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:ea:65:d3:0f:77:a1:a9:fd:5e:a6:ec:fa:
                    ec:30:92:3f:02:56:1f:0e:41:88:bc:93:c4:24:9d:
                    fe:3a:57:74:fc:0a:0c:38:6d:37:79:9e:40:63:61:
                    08:58:1b:d5:2f:91:d6:2c:20:4e:a9:06:2e:ac:4e:
                    c7:e7:01:48:1a:47:98:99:99:ae:d8:14:35:4d:03:
                    fe:d9:28:7c:b0:75:22:ad:79:d5:c1:c5:f0:04:a5:
                    4c:14:d8:d9:72:54:16:c8:e0:aa:18:1c:fc:17:7b:
                    f6:fc:14:10:61:e1:26:a9:13:31:99:19:a2:92:6e:
                    f8:a8:6d:f4:32:e5:b9:28:f4:72:b1:80:0b:e6:fe:
                    3f:8c:5c:7d:fc:5a:df:0e:92:74:27:07:ce:5f:ff:
                    d7:c4:22:57:c7:c0:7d:ff:fa:97:fc:eb:31:47:c7:
                    be:ae:d0:0f:cc:21:93:5e:4d:4d:68:3b:93:77:46:
                    b1:a7:6e:7f:54:2f:91:c8:92:ca:8a:51:c8:7c:1a:
                    87:ef:90:ae:b6:8d:0c:1d:2c:00:3b:33:75:48:a3:
                    35:75:f1:ab:62:91:61:ee:e5:2a:7c:dd:3b:8b:b4:
                    bc:1d:74:94:7f:84:76:21:95:fb:d2:a9:76:c7:8f:
                    67:4b:61:a1:95:df:64:83:23:ba:09:fc:05:2c:32:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:3E:14:7A:5A:D1:8B:C9:6C:D4:2E:B5:C9:1F:17:61:C9:05:0A
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Jkk-FHpa0YvJbNQutckfF2HJBQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:ac:c6:60:b5:b4:8b:ed:42:fa:5a:7b:fc:8f:52:01:fb:4a:
         7a:d6:2f:10:6a:23:8b:93:7c:9b:89:64:85:9d:bc:b9:6c:1b:
         1d:f7:68:80:5d:8c:8e:b0:8e:99:ee:26:c4:64:0f:a0:aa:be:
         ae:ab:86:ab:f8:17:98:f5:98:69:6e:a3:72:88:7d:50:f9:5c:
         b7:d9:b2:48:c3:25:d5:04:a9:ea:91:31:0b:07:6f:ff:4c:4c:
         7a:a6:9b:07:84:22:3d:e8:0e:d8:bc:08:3d:21:e2:97:7e:a5:
         7b:1b:7c:f2:d4:eb:8a:82:d8:74:79:25:24:49:c9:97:42:da:
         95:08:0a:80:e5:13:04:62:65:e0:d1:c6:cb:ad:72:4e:66:86:
         6e:15:b3:44:85:54:af:d6:0b:8b:1c:91:e8:54:0e:5f:84:3c:
         d3:ed:78:bd:99:97:e5:2d:35:b1:59:13:ff:fb:22:93:39:85:
         15:d0:99:38:47:15:53:dc:d1:05:4e:3a:12:3b:11:97:3a:67:
         3a:f6:57:bb:cb:4a:e7:c4:ed:9f:8f:72:c5:72:4e:65:87:fa:
         bb:dd:02:c0:8b:41:93:3b:ef:25:21:a4:76:15:21:b1:80:64:
         72:1c:e0:57:ea:44:79:68:5e:63:8d:61:64:5f:9e:4a:b7:5c:
         b3:0c:c2:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwoSH9+R4w+b7mHFF5BTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjMwMTAxMjM1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ5M2UxNDdhNWFkMThiYzk2Y2Q0MmViNWM5MWYxNzYxYzkwNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuXqZdMPd6Gp/V6m7PrsMJI/AlYf
DkGIvJPEJJ3+Old0/AoMOG03eZ5AY2EIWBvVL5HWLCBOqQYurE7H5wFIGkeYmZmu
2BQ1TQP+2Sh8sHUirXnVwcXwBKVMFNjZclQWyOCqGBz8F3v2/BQQYeEmqRMxmRmi
km74qG30MuW5KPRysYAL5v4/jFx9/FrfDpJ0JwfOX//XxCJXx8B9//qX/OsxR8e+
rtAPzCGTXk1NaDuTd0axp25/VC+RyJLKilHIfBqH75Cuto0MHSwAOzN1SKM1dfGr
YpFh7uUqfN07i7S8HXSUf4R2IZX70ql2x49nS2Ghld9kgyO6CfwFLDIXPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZJPhR6WtGLyWzULrXJHxdhyQUKMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvSmtrLUZIcGEwWXZKYk5RdXRja2ZGMkhKQlFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4nMA0G
CSqGSIb3DQEBCwUAA4IBAQAzrMZgtbSL7UL6Wnv8j1IB+0p61i8QaiOLk3ybiWSF
nby5bBsd92iAXYyOsI6Z7ibEZA+gqr6uq4ar+BeY9ZhpbqNyiH1Q+Vy32bJIwyXV
BKnqkTELB2//TEx6ppsHhCI96A7YvAg9IeKXfqV7G3zy1OuKgth0eSUkScmXQtqV
CAqA5RMEYmXg0cbLrXJOZoZuFbNEhVSv1guLHJHoVA5fhDzT7Xi9mZflLTWxWRP/
+yKTOYUV0Jk4RxVT3NEFTjoSOxGXOmc69le7y0rnxO2fj3LFck5lh/q73QLAi0GT
O+8lIaR2FSGxgGRyHOBX6kR5aF5jjWFkX55Kt1yzDMLW
-----END CERTIFICATE-----