Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/uWNEeRdlGxQ4v433ipjUj6zYlq4.roa
File:                     uWNEeRdlGxQ4v433ipjUj6zYlq4.roa (raw, json)
Hash identifier:          TOu/t4e7Q9h8W8M6utDwy813PRWul2uSQoRFgh//Zq0=
Subject key identifier:   B9:63:44:79:17:65:1B:14:38:BF:8D:F7:8A:98:D4:8F:AC:D8:96:AE
Certificate issuer:       /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial:       018DA1F5E0F83677E421FB91830E48B769F3
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/uWNEeRdlGxQ4v433ipjUj6zYlq4.roa
Signing time:             Tue 13 Feb 2024 10:14:22 +0000
ROA not before:           Tue 13 Feb 2024 10:14:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        185.18.221.0/24 maxlen: 24
                          2a13:2c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 23:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a1:f5:e0:f8:36:77:e4:21:fb:91:83:0e:48:b7:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
        Validity
            Not Before: Feb 13 10:14:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b963447917651b1438bf8df78a98d48facd896ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:eb:83:ad:8d:a3:5f:70:c6:55:e2:72:1e:
                    f4:d3:62:26:c2:90:a2:45:b7:ff:69:f7:96:8b:11:
                    94:67:f0:44:56:da:6b:34:2c:49:25:30:20:ec:45:
                    76:46:af:1c:b3:1f:f3:74:c9:fc:ed:f2:5f:94:ac:
                    2f:b9:19:51:e1:cf:fd:6b:bd:5b:49:75:0a:29:60:
                    7b:d1:f7:82:8a:03:df:14:b4:1f:92:60:ba:70:32:
                    63:b3:8f:1f:eb:b1:17:bc:8c:be:93:cb:ca:82:4d:
                    e9:d7:07:fd:c7:c0:c7:2e:cd:41:34:ee:7a:47:e9:
                    93:22:8f:66:5b:24:48:9e:06:9a:b4:10:f7:05:27:
                    74:bd:e4:bc:f1:4d:2e:19:7b:77:14:1c:dd:af:c4:
                    8e:2e:01:6c:a9:17:fd:50:9d:d5:78:5f:ea:17:95:
                    06:20:f2:18:18:27:d0:06:20:8a:09:ee:78:dd:52:
                    c2:c8:cd:a2:d2:29:da:34:fb:29:b4:4d:1e:16:26:
                    62:dc:ef:d4:e1:57:1b:7a:86:bf:c0:3c:73:c1:f1:
                    79:85:17:00:19:b0:0f:d5:37:a9:dd:70:f5:29:51:
                    aa:22:c1:81:b7:d8:2a:19:82:24:59:f2:c0:1c:69:
                    34:c0:eb:57:12:18:ef:c1:34:e2:27:73:8d:16:75:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:63:44:79:17:65:1B:14:38:BF:8D:F7:8A:98:D4:8F:AC:D8:96:AE
            X509v3 Authority Key Identifier:
                keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/uWNEeRdlGxQ4v433ipjUj6zYlq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.18.221.0/24
                IPv6:
                  2a13:2c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:9a:04:e7:c4:75:5e:ac:38:1b:f8:48:00:b6:9b:0c:43:
         7a:9c:ff:f2:09:03:ad:d3:af:8a:e2:1c:83:75:7a:e3:99:51:
         98:0b:d2:0f:79:fb:4d:a2:8a:78:9d:d7:28:af:ea:b4:67:36:
         ba:ce:99:87:32:fc:57:20:c1:b4:24:36:4a:96:f3:eb:54:fc:
         7f:d6:a6:e0:c3:11:72:af:a9:8c:87:c4:27:bc:fc:48:22:24:
         7d:07:d9:53:e5:51:68:28:98:2c:9f:0b:3d:2c:45:1e:95:0f:
         10:01:c8:0e:97:61:1b:7f:85:8f:34:bf:5c:c9:39:c7:de:00:
         6c:9f:05:8c:c2:fd:ab:aa:60:cb:4e:a2:46:dd:dc:53:73:5a:
         cd:0f:6b:66:a3:16:26:03:fe:03:3c:03:c4:18:e5:b3:8c:2f:
         5a:b3:f9:97:bf:f3:9a:ed:1c:5c:d2:77:01:74:a3:e8:39:b5:
         54:62:ab:96:89:43:02:c3:c5:f2:37:ec:60:99:1a:f4:df:09:
         4a:9b:62:ed:87:ef:8e:79:16:4f:45:c2:b4:76:97:da:8f:ce:
         e5:6e:a1:d2:6d:9b:f6:cf:64:ea:df:b6:93:0f:b5:8b:06:94:
         01:e7:f6:7f:df:80:71:95:0c:49:59:6c:73:85:c5:63:ec:e3:
         f2:b4:c0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----