Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WqiXkSY07l6OM3MMVLKVI_S8WVs.roa
File:                     WqiXkSY07l6OM3MMVLKVI_S8WVs.roa (raw, json)
Hash identifier:          G3vSOtpE2ATBZXEO+7BDk2slGuc/DdVlunch+aTU6k4=
Subject key identifier:   5A:A8:97:91:26:34:EE:5E:8E:33:73:0C:54:B2:95:23:F4:BC:59:5B
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       0188A2ACCCB1D5F6FC11B8432ADE08F82CF0
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WqiXkSY07l6OM3MMVLKVI_S8WVs.roa
Signing time:             Sat 10 Jun 2023 00:20:13 +0000
ROA not before:           Sat 10 Jun 2023 00:20:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203729
IP address blocks:        185.186.8.0/24 maxlen: 24
                          2a0b:6b81:210::/48 maxlen: 48
                          2a0b:6b81:208::/48 maxlen: 48
                          2a0b:6b81:1::/48 maxlen: 48
                          2a0b:6b81:205::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a2:ac:cc:b1:d5:f6:fc:11:b8:43:2a:de:08:f8:2c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jun 10 00:20:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5aa897912634ee5e8e33730c54b29523f4bc595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:9d:76:7f:5a:e0:67:e8:91:13:9a:c2:3a:
                    51:a2:6e:78:d3:08:8b:d5:6e:96:65:d2:44:01:af:
                    d6:89:cc:22:14:6a:17:5b:97:40:43:d9:ab:c0:c9:
                    58:04:ed:be:57:e3:87:e0:d6:b4:55:04:16:a9:17:
                    c4:2e:23:c8:a3:b0:a8:cf:24:ba:a2:13:01:64:11:
                    c3:cb:90:ad:08:85:ee:60:57:86:e4:c3:fc:6e:b9:
                    61:7b:fa:0f:50:88:f2:7c:d3:5a:db:a4:53:6b:3c:
                    8a:f9:c9:25:cf:ac:46:52:3e:fe:0c:15:eb:fd:27:
                    89:3d:1a:fd:c9:87:b0:d8:c6:c9:8e:6f:ba:57:e7:
                    80:ab:44:4b:7c:35:8d:49:e2:26:a0:06:46:75:a2:
                    fd:d5:b1:cd:b4:00:f0:8a:2f:7d:00:3a:5d:e3:6e:
                    57:30:aa:f0:38:c8:da:2a:26:a8:fc:03:be:4e:ad:
                    df:09:cf:8d:32:05:f6:88:ef:af:f5:98:f5:16:a8:
                    ba:c2:81:6e:09:58:4f:4d:33:90:d9:90:09:81:3b:
                    90:a0:d7:fe:df:0b:32:41:32:83:33:e3:18:ca:cc:
                    35:53:b4:ea:1f:f7:81:6a:3e:42:34:b5:06:c2:87:
                    70:92:b2:87:d1:6a:fe:98:06:a3:54:9c:4a:6b:bf:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A8:97:91:26:34:EE:5E:8E:33:73:0C:54:B2:95:23:F4:BC:59:5B
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/WqiXkSY07l6OM3MMVLKVI_S8WVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.8.0/24
                IPv6:
                  2a0b:6b81:1::/48
                  2a0b:6b81:205::/48
                  2a0b:6b81:208::/48
                  2a0b:6b81:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:86:13:41:aa:e1:89:bc:66:85:38:10:6a:d0:e6:67:15:80:
         df:c3:3d:70:32:ba:1e:31:94:94:52:c0:9a:c2:bd:7e:ae:93:
         a3:0d:82:16:19:c3:61:89:cf:ac:9c:d0:7d:dc:29:8b:d6:8e:
         f9:f1:da:8c:e9:e8:5b:e7:ca:9a:bc:aa:1d:83:8e:81:57:aa:
         d0:ac:92:82:ee:d1:54:1b:82:52:1e:c2:bd:7c:c7:da:33:19:
         84:b1:bf:ea:f3:be:8a:d9:3f:43:42:95:39:c4:77:49:ef:4f:
         db:9b:13:ad:14:e7:15:89:6f:a4:8f:53:63:70:94:7e:74:ab:
         a9:75:df:9b:c9:01:48:9b:c9:3d:b6:19:c0:d6:ef:66:9c:74:
         cc:ec:5f:aa:d5:5b:b3:91:9f:fd:a1:09:a0:27:57:46:0b:36:
         1d:a5:6b:3f:ab:ec:38:26:8c:d7:96:8d:12:46:ef:20:07:81:
         f8:83:b4:b0:51:c2:26:0c:88:cd:3d:9e:96:3f:94:82:77:3e:
         eb:25:64:86:49:fb:f8:50:e5:dc:8c:81:bc:c7:fb:5c:7d:c9:
         19:08:d3:3b:65:f7:c4:d5:e5:d1:ee:30:02:b4:02:31:10:a8:
         8b:f0:a8:fd:61:90:d6:cf:c1:1b:cf:d4:99:4b:5c:f4:50:b5:
         41:cc:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----