Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/qDqUFxWa1FQUAoeaNzN9cygLPaU.roa
File:                     qDqUFxWa1FQUAoeaNzN9cygLPaU.roa (raw, json)
Hash identifier:          dRRnrIU8ODT9dPDNJ+PYmM2lKyZ2zyC5rwkNp12j/iI=
Subject key identifier:   A8:3A:94:17:15:9A:D4:54:14:02:87:9A:37:33:7D:73:28:0B:3D:A5
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       0186BF3A12299CE937E800A2BA486CD111E5
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/qDqUFxWa1FQUAoeaNzN9cygLPaU.roa
Signing time:             Wed 08 Mar 2023 03:18:19 +0000
ROA not before:           Wed 08 Mar 2023 03:18:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.144.236.0/22 maxlen: 22
                          2a07:4407::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bf:3a:12:29:9c:e9:37:e8:00:a2:ba:48:6c:d1:11:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Mar  8 03:18:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a83a9417159ad4541402879a37337d73280b3da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:5b:f7:09:b4:6b:b1:25:09:c3:a2:2f:81:
                    4d:ef:0c:38:bc:a3:8b:6e:74:54:f6:74:24:55:76:
                    5c:f9:e8:ec:9d:0b:7a:f4:19:46:db:89:9e:a6:bf:
                    41:21:4c:b7:1e:0b:91:8f:a6:d7:a8:34:30:b7:dd:
                    5d:21:24:82:7e:98:a3:d6:49:75:a6:3c:be:05:e0:
                    5d:e5:d6:84:0c:9c:d0:e0:0c:ab:f5:ad:17:0d:c1:
                    b1:ed:6f:90:1b:30:a2:58:64:7c:13:b6:a0:d0:9e:
                    3b:1b:8f:71:fd:a9:9d:65:36:09:c5:82:df:c4:b0:
                    fc:ff:2f:71:1b:ef:f3:89:3e:d8:07:1e:e9:82:51:
                    47:ec:e7:01:46:40:7b:8c:ba:5c:f0:b7:9f:75:cc:
                    fe:6a:b5:1d:78:fd:cf:bb:13:59:4f:8c:1d:e2:d3:
                    36:e9:5d:ed:2b:9f:b7:a3:8f:8f:67:65:2a:ac:c2:
                    4a:06:27:d4:82:66:b2:8e:eb:46:46:f1:70:ab:a5:
                    75:95:6e:a7:2e:a6:4e:d0:66:e7:80:81:c8:03:d6:
                    75:6f:5a:53:31:0f:95:b9:66:af:a7:74:3c:25:57:
                    23:5f:03:ed:54:6e:fe:80:cb:34:6b:ac:3f:fb:50:
                    8b:41:23:45:59:73:a0:41:5d:8b:29:a2:55:fa:e0:
                    dd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3A:94:17:15:9A:D4:54:14:02:87:9A:37:33:7D:73:28:0B:3D:A5
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/qDqUFxWa1FQUAoeaNzN9cygLPaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.144.236.0/22
                IPv6:
                  2a07:4407::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:1c:49:ee:b1:31:a7:33:10:1f:b4:ee:54:21:98:c3:e4:5a:
         80:de:02:22:09:11:70:69:36:be:e5:4d:1f:ed:33:64:f4:9c:
         dd:d1:32:97:cd:69:96:14:e4:6f:95:da:e6:f2:90:28:9a:ea:
         8a:69:b0:86:c4:8e:c3:ca:1b:ac:85:f5:0a:cb:77:0a:42:fd:
         3f:98:f2:89:0b:ad:7d:4a:5c:80:94:47:bc:ae:db:94:4b:1d:
         dc:29:be:1a:73:60:0a:60:09:70:e4:12:2c:84:f7:63:91:48:
         16:d1:e3:a5:e3:50:db:a0:27:19:6a:48:69:a7:ac:2d:a5:0b:
         81:8a:6b:f5:c4:5e:35:85:82:14:f2:67:f3:55:10:84:95:07:
         54:a5:1a:64:ad:76:82:7b:fa:88:5d:03:d6:86:11:fb:da:08:
         75:81:d9:9d:58:6e:92:12:8d:d3:0d:bd:8b:25:45:bd:55:00:
         2e:97:88:36:49:58:60:bf:d5:99:7c:c3:08:3a:56:01:75:36:
         b0:cb:bf:a9:c8:4a:4c:71:f1:8e:97:88:42:b0:75:36:d9:74:
         cd:83:7f:b8:4d:3c:dc:1b:ee:be:35:2d:9f:a6:5d:c0:35:ca:
         73:e7:87:57:e6:20:ea:d4:c7:6b:18:11:25:5c:46:d3:b4:f9:
         94:40:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----