Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/2R2RSYOnCM202EheYqOD-OWQxrE.roa
File:                     2R2RSYOnCM202EheYqOD-OWQxrE.roa (raw, json)
Hash identifier:          y8PWEshGXrkvTyitm1dlhetnLne+HPXAcmKoB9Xwb9o=
Subject key identifier:   D9:1D:91:49:83:A7:08:CD:B4:D8:48:5E:62:A3:83:F8:E5:90:C6:B1
Certificate issuer:       /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial:       018DA1F5E066E6EEE9364B7853E40F2F2BB6
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/2R2RSYOnCM202EheYqOD-OWQxrE.roa
Signing time:             Tue 13 Feb 2024 10:14:21 +0000
ROA not before:           Tue 13 Feb 2024 10:14:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        185.18.221.0/24 maxlen: 24
                          2a13:2c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 23:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a1:f5:e0:66:e6:ee:e9:36:4b:78:53:e4:0f:2f:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Validity
            Not Before: Feb 13 10:14:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d91d914983a708cdb4d8485e62a383f8e590c6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:ae:5a:f5:07:bb:64:cc:cf:1d:02:7b:94:
                    a0:6f:48:80:85:20:f2:a8:7d:54:e6:4a:5b:7c:d2:
                    90:70:11:e1:a3:df:c7:f0:30:55:77:64:f6:e8:9e:
                    c1:5f:c5:d1:5b:f5:0b:6e:5e:c0:d1:d9:88:f4:15:
                    32:46:13:1d:13:ca:ae:51:b1:5b:b1:92:9d:bc:b0:
                    39:56:65:a8:a1:2f:7a:84:b8:d2:32:dc:d7:fa:29:
                    ab:18:10:67:e3:e9:9b:58:8b:22:f8:2e:e3:72:c3:
                    f9:1f:c1:75:5c:30:6f:df:15:7f:74:17:30:99:45:
                    24:97:76:29:29:f6:d8:0a:49:c8:db:cc:9f:26:1b:
                    cb:6c:2f:5a:a7:15:eb:96:21:b1:67:81:83:d8:97:
                    5a:8b:4c:44:ff:71:66:40:ba:bc:c3:56:94:89:d4:
                    d4:a8:a5:85:44:86:0b:5c:8b:69:db:36:e8:ba:5a:
                    0f:6b:19:c2:17:d5:42:4b:66:2c:09:c6:4f:ae:8c:
                    95:a1:47:c1:18:e8:bd:30:c0:b8:1c:28:d4:c8:79:
                    8e:90:63:d2:d0:06:ed:46:06:68:7f:a5:d4:d0:0b:
                    20:77:31:39:f9:91:9f:be:bf:0b:bd:b8:e2:46:fc:
                    a2:43:b6:1f:86:d9:ae:29:11:e3:14:33:a5:2a:2c:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:91:49:83:A7:08:CD:B4:D8:48:5E:62:A3:83:F8:E5:90:C6:B1
            X509v3 Authority Key Identifier:
                keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/2R2RSYOnCM202EheYqOD-OWQxrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.18.221.0/24
                IPv6:
                  2a13:2c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:49:db:4b:47:3d:21:36:3a:cd:11:78:3d:32:cf:fb:9f:01:
         2c:83:a8:de:41:30:5a:db:1c:95:41:6f:78:1d:4b:03:5a:26:
         4c:fa:1c:d5:b4:e8:f7:07:e7:71:2d:fa:d6:36:39:61:9a:b0:
         bc:6b:c9:5a:54:36:ff:8c:2e:8d:97:e0:9a:e2:67:7c:48:3c:
         c2:bc:bf:4b:07:2c:78:5e:ac:ca:37:d7:0b:4f:7c:c0:40:38:
         31:53:3f:a5:04:39:e8:93:65:33:fb:e2:00:e1:d8:34:49:73:
         60:a3:45:8b:10:e4:bc:e0:b9:e6:e4:45:57:28:91:96:e1:37:
         b3:34:f4:67:06:34:69:c6:d7:4b:03:f2:dc:8f:b7:a2:b6:48:
         0a:44:6d:71:d6:71:9c:d2:40:88:9f:41:52:a6:51:43:27:0b:
         33:42:77:81:23:c3:9c:65:17:a4:ef:3a:35:ca:3d:9e:6d:d0:
         71:cf:d0:b3:43:e2:11:b2:f7:59:c3:b1:eb:e7:cb:0b:ed:33:
         6a:9f:92:d8:a9:9d:43:bf:6e:7f:e3:9e:ca:25:f0:94:08:a2:
         d9:f9:b7:4f:ad:85:09:f9:b9:5c:ca:ce:e4:77:8c:4b:e0:b5:
         8e:a0:6b:4f:48:56:28:27:93:e6:83:72:d9:c8:eb:cd:e6:e9:
         dd:c6:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----