Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L3SHHYaUu0sUavom8RgHXY9tKiI.roa
File:                     L3SHHYaUu0sUavom8RgHXY9tKiI.roa (raw, json)
Hash identifier:          W2j5vGdpseAxDaUpxo1ai1fOvix9sm6r8kJtzEmQ+qU=
Subject key identifier:   2F:74:87:1D:86:94:BB:4B:14:6A:FA:26:F1:18:07:5D:8F:6D:2A:22
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       01884F09879A1733C39407AB6367B8ECE7F0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L3SHHYaUu0sUavom8RgHXY9tKiI.roa
Signing time:             Wed 24 May 2023 18:33:24 +0000
ROA not before:           Wed 24 May 2023 18:33:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201703
IP address blocks:        185.215.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4f:09:87:9a:17:33:c3:94:07:ab:63:67:b8:ec:e7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: May 24 18:33:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f74871d8694bb4b146afa26f118075d8f6d2a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:29:63:61:b4:ea:a8:bf:40:3e:a7:35:68:
                    59:6d:48:da:a2:bb:b2:c5:9e:41:6b:a7:49:fd:78:
                    13:97:c5:01:85:e9:bc:68:c8:93:4d:56:65:d2:a2:
                    84:bb:9f:df:a2:6e:ff:83:cc:ae:6f:44:41:2b:fa:
                    ed:3d:70:74:b9:00:8c:de:8a:31:82:25:c7:45:b8:
                    6a:15:a4:c8:5c:9c:7b:e0:60:27:37:09:91:99:61:
                    f6:62:3a:8c:14:5a:0a:fa:93:ea:07:a0:fb:0b:99:
                    de:91:4b:a3:68:e9:f5:fc:df:16:20:2b:cb:23:ae:
                    d2:93:88:4b:3b:49:2d:40:39:55:80:ae:9d:9f:f6:
                    15:6f:5a:0a:29:61:3a:09:97:43:22:02:db:f0:3f:
                    5e:73:37:b0:b4:8a:32:6f:3f:3f:0c:6c:39:1d:23:
                    bb:b6:9e:49:af:a8:89:05:9c:e3:8a:41:c4:10:a6:
                    0b:cb:a2:87:4e:c7:82:ae:a8:7c:fc:93:f5:14:ca:
                    36:a8:2f:6b:bc:f5:c9:8e:91:91:b7:cc:e8:98:d8:
                    ce:f4:c1:3a:c4:dc:1c:e3:0b:47:5c:2c:1e:94:a5:
                    79:97:0f:6a:fa:32:a3:35:0e:5f:a4:b3:e4:1e:3a:
                    b1:e6:dd:5a:1a:e8:42:45:1b:7d:3e:7c:e8:1d:3e:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:74:87:1D:86:94:BB:4B:14:6A:FA:26:F1:18:07:5D:8F:6D:2A:22
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/L3SHHYaUu0sUavom8RgHXY9tKiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:f7:39:21:74:cf:e5:da:4a:46:5c:26:00:e5:fb:1f:6b:
         d7:cd:5d:25:8e:11:c3:d5:6a:ce:10:57:f4:bc:4c:2f:94:ed:
         6e:ad:f5:18:bb:b8:65:5b:8b:df:c6:a2:89:90:2d:55:94:9b:
         49:78:99:9f:c0:ea:ad:5f:e0:1c:92:30:a0:60:16:c2:96:68:
         ec:15:cd:48:48:19:b7:3f:65:05:91:78:b5:f5:e9:45:a3:e8:
         44:21:e3:5c:3f:1a:fc:28:1d:2e:84:84:8f:48:af:95:48:01:
         f1:96:b5:44:31:60:c0:9c:0b:c6:56:b4:ea:e4:3e:ae:a9:53:
         26:a4:65:51:c9:53:07:7b:51:86:bb:8c:42:f7:0c:92:ac:c3:
         22:3d:bd:2b:a6:f5:fe:29:0b:a7:34:b1:64:50:bb:20:82:72:
         d6:76:64:67:8d:22:c6:e9:29:54:9b:d5:59:57:fb:89:c2:29:
         23:a7:f1:ae:d6:90:36:a7:54:f0:18:1a:c5:ed:33:37:fb:4b:
         57:63:98:e6:e3:9a:ef:69:b0:e4:0d:14:a4:b9:4c:d6:f8:fb:
         d7:cc:33:b9:8e:5e:b0:c0:66:11:dd:ed:01:73:e0:6c:86:27:
         22:ad:5b:08:b7:f6:5d:3d:fe:92:81:92:dc:0f:08:05:65:06:
         8c:ee:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----