Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa
File:                     IcXUhhFhMDnU48BIkzivyPo1ueA.roa (raw, json)
Hash identifier:          ucnVpwP1qu0s9JPDl+TgTmasMntu0yTslHizlAgqUVI=
Subject key identifier:   21:C5:D4:86:11:61:30:39:D4:E3:C0:48:93:38:AF:C8:FA:35:B9:E0
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       0186CC689FAD5EEE986C2CE7B7ACAA6BF914
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa
Signing time:             Fri 10 Mar 2023 16:44:14 +0000
ROA not before:           Fri 10 Mar 2023 16:44:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        91.231.186.0/24 maxlen: 24
                          2a10:1fc0:7::/48 maxlen: 48
                          2a10:1fc0:a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cc:68:9f:ad:5e:ee:98:6c:2c:e7:b7:ac:aa:6b:f9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Mar 10 16:44:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21c5d48611613039d4e3c0489338afc8fa35b9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:39:5e:eb:a7:ad:7a:0c:16:d1:58:86:3d:
                    30:1f:4b:df:b2:c2:28:89:6f:4f:a8:21:d5:dc:30:
                    1e:e2:5e:05:fc:4b:7a:79:87:33:a4:bf:53:d5:76:
                    d9:48:69:0b:38:2f:bd:df:74:e0:24:e9:50:f7:59:
                    41:08:17:af:3b:3a:85:6f:9a:2c:05:33:66:c8:bb:
                    71:d1:33:06:95:33:7b:2a:5b:19:47:ca:cf:13:59:
                    4d:6f:93:75:af:b0:bd:39:ff:39:31:79:3b:9e:20:
                    83:bf:1e:ee:1f:f0:a5:2c:dd:12:0f:60:a4:ab:00:
                    9d:0a:d8:95:67:7a:08:a3:56:1d:d8:d9:e0:af:98:
                    0b:6e:10:5d:d3:1a:7e:c4:2d:1d:df:d2:04:bd:6c:
                    ac:8e:77:20:e7:ba:84:29:a2:83:d2:fb:22:3a:38:
                    2a:c5:ae:d7:e5:c6:f8:f4:da:e3:ab:fc:fc:f8:dc:
                    ce:d4:b4:cf:ce:52:7f:8f:5a:90:86:be:f6:f7:af:
                    e1:f7:07:de:10:66:cb:ca:df:d2:6f:1e:fc:6b:30:
                    a5:c9:bb:1d:9b:7f:ef:7e:2e:92:b0:12:f8:13:72:
                    d6:a7:40:51:da:30:cc:6b:9b:0f:36:2f:6c:3c:16:
                    60:07:a8:c0:27:df:c6:26:92:56:cc:ea:ae:80:42:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:D4:86:11:61:30:39:D4:E3:C0:48:93:38:AF:C8:FA:35:B9:E0
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/IcXUhhFhMDnU48BIkzivyPo1ueA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.186.0/24
                IPv6:
                  2a10:1fc0:7::/48
                  2a10:1fc0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:3b:14:fa:37:93:99:0a:44:e9:e9:36:2b:58:41:9b:49:b5:
         18:92:9b:fb:53:d5:c2:52:a6:ee:1a:a0:2c:b3:8e:17:1e:33:
         85:6b:f4:24:43:77:46:76:46:d6:ef:89:5a:ae:21:05:2e:d1:
         d8:f5:de:29:2e:e6:e7:36:88:2c:53:3a:98:bf:89:c9:b9:44:
         a3:9c:bc:06:91:bf:45:12:e6:b3:6e:a3:83:d7:54:14:2f:0c:
         a6:73:30:4d:4d:3e:7f:0f:6a:30:73:cc:8e:a5:07:0c:2e:7f:
         e1:80:a0:ed:d9:fd:4d:15:2a:d0:ae:ac:f5:76:3d:a5:af:67:
         12:81:85:bc:0d:1c:ec:92:75:62:bf:53:fa:82:15:c1:54:af:
         9a:9a:34:fd:93:4c:dc:36:d2:54:d9:89:a1:9f:2a:62:4b:c3:
         f4:3b:1e:d0:8f:d7:c3:64:d1:ea:92:d6:d8:ad:b3:4a:91:6f:
         df:a1:91:f0:82:6f:76:cf:c0:f7:68:83:83:24:81:bd:57:c8:
         d4:a2:30:d7:dc:51:3c:26:dd:ce:ad:f0:78:23:35:d8:a4:df:
         56:38:1e:0e:3a:6f:a2:f0:7f:c5:56:9b:49:6f:02:1b:39:81:
         65:41:4e:ad:29:34:c1:25:75:6c:81:95:6f:dc:c2:a5:65:c1:
         5c:a9:3c:ee
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYbMaJ+tXu6YbCznt6yqa/kUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjMwMzEwMTY0NDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM1ZDQ4NjExNjEzMDM5ZDRlM2MwNDg5MzM4YWZjOGZhMzViOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOk5XuunrXoMFtFYhj0wH0vfssIo
iW9PqCHV3DAe4l4F/Et6eYczpL9T1XbZSGkLOC+933TgJOlQ91lBCBevOzqFb5os
BTNmyLtx0TMGlTN7KlsZR8rPE1lNb5N1r7C9Of85MXk7niCDvx7uH/ClLN0SD2Ck
qwCdCtiVZ3oIo1Yd2Nngr5gLbhBd0xp+xC0d39IEvWysjncg57qEKaKD0vsiOjgq
xa7X5cb49Nrjq/z8+NzO1LTPzlJ/j1qQhr7296/h9wfeEGbLyt/Sbx78azClybsd
m3/vfi6SsBL4E3LWp0BR2jDMa5sPNi9sPBZgB6jAJ9/GJpJWzOqugEJJUQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCHF1IYRYTA51OPASJM4r8j6NbngMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvSWNYVWhoRmhNRG5VNDhCSWt6aXZ5UG8xdWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAW+e6MBgE
AgACMBIDBwAqEB/AAAcDBwAqEB/AAAowDQYJKoZIhvcNAQELBQADggEBAAw7FPo3
k5kKROnpNitYQZtJtRiSm/tT1cJSpu4aoCyzjhceM4Vr9CRDd0Z2RtbviVquIQUu
0dj13iku5uc2iCxTOpi/icm5RKOcvAaRv0US5rNuo4PXVBQvDKZzME1NPn8PajBz
zI6lBwwuf+GAoO3Z/U0VKtCurPV2PaWvZxKBhbwNHOySdWK/U/qCFcFUr5qaNP2T
TNw20lTZiaGfKmJLw/Q7HtCP18Nk0eqS1tits0qRb9+hkfCCb3bPwPdog4Mkgb1X
yNSiMNfcUTwm3c6t8HgjNdik31Y4Hg46b6Lwf8VWm0lvAhs5gWVBTq0pNMEldWyB
lW/cwqVlwVypPO4=
-----END CERTIFICATE-----