Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/k-zVZJ8xQMlM2naZNBMqig_ke0U.roa
File:                     k-zVZJ8xQMlM2naZNBMqig_ke0U.roa (raw, json)
Hash identifier:          fAg7NBG8pt0XNgn4pKpn3MlPyBJnKI0KPZQ9No1V+3I=
Subject key identifier:   93:EC:D5:64:9F:31:40:C9:4C:DA:76:99:34:13:2A:8A:0F:E4:7B:45
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       01856D93F042B9C5C1EAC0F4826C885F7776
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/k-zVZJ8xQMlM2naZNBMqig_ke0U.roa
Signing time:             Sun 01 Jan 2023 13:44:49 +0000
ROA not before:           Sun 01 Jan 2023 13:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212973
IP address blocks:        185.1.175.0/24 maxlen: 24
                          2001:7f8:f8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:93:f0:42:b9:c5:c1:ea:c0:f4:82:6c:88:5f:77:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jan  1 13:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93ecd5649f3140c94cda769934132a8a0fe47b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:8a:87:72:b8:66:a2:52:bb:a5:c2:b5:28:
                    13:5c:10:da:4f:a3:79:e0:be:28:37:21:ed:a1:fb:
                    be:23:26:9b:69:a3:fd:e9:33:7e:30:c0:b8:3d:5a:
                    96:2e:df:6d:a1:d8:87:dc:28:f3:99:dc:bc:fe:c2:
                    be:be:eb:f0:d3:56:c4:72:58:9b:f0:12:54:af:96:
                    8d:78:8f:92:24:b2:5b:12:52:13:f7:d3:7f:51:87:
                    ae:43:dc:d7:2c:96:c2:57:b2:c2:01:42:50:81:c8:
                    bd:26:49:2f:ed:a8:08:d2:f6:e5:f5:52:cf:01:d4:
                    35:58:95:0e:6d:36:22:1f:72:06:17:51:aa:ad:7b:
                    8b:d1:2f:24:5b:d9:7d:83:aa:01:2c:bc:a3:e6:d2:
                    11:ac:4a:b3:13:a3:42:e9:98:1a:3d:2c:eb:d6:32:
                    4c:52:01:b0:88:2c:fd:a5:cd:1a:6d:84:a2:a7:d1:
                    14:d8:2d:5d:70:de:e1:c9:66:04:50:10:44:bd:e3:
                    fe:c7:b2:20:db:e9:68:3e:39:32:f0:1c:e5:c4:1f:
                    7d:d1:ce:b1:5c:41:0f:43:6e:bc:0c:93:cb:cb:5b:
                    87:46:88:2b:d5:63:01:b1:0c:30:dc:d6:d1:02:12:
                    37:a6:70:30:39:4c:e1:91:26:03:b7:f4:84:e3:c4:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:D5:64:9F:31:40:C9:4C:DA:76:99:34:13:2A:8A:0F:E4:7B:45
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/k-zVZJ8xQMlM2naZNBMqig_ke0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.175.0/24
                IPv6:
                  2001:7f8:f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:f5:eb:b6:3e:3f:b4:d3:1c:bc:5f:4b:11:68:be:ce:52:
         52:0b:63:ae:93:20:5e:04:05:e3:66:72:b7:fd:a4:9a:67:04:
         28:b3:29:2c:bd:74:4a:e5:24:ab:44:89:53:a5:56:1f:52:d8:
         af:06:80:71:1f:3b:7c:12:7a:70:11:b3:f6:40:e8:6a:e6:ab:
         4f:fb:36:d6:2f:6b:a2:32:9e:44:e0:c9:ba:2a:f7:74:85:60:
         b2:6b:b5:e4:ad:58:26:8c:8e:12:b5:77:b3:35:b9:e0:90:fd:
         b2:9b:47:8e:a1:cc:ff:01:20:c8:5a:ff:90:18:96:41:86:bf:
         5c:e8:a2:d8:9e:d5:46:4c:c4:e3:f7:82:f1:34:dd:cf:49:27:
         37:11:5e:5d:6d:e3:66:93:64:82:dd:49:03:a6:c9:34:89:db:
         e4:a4:f1:0b:b5:a2:f5:78:13:d1:7e:8f:ae:eb:00:a3:69:87:
         ea:79:31:80:ca:99:b3:98:55:1b:e1:80:82:be:b3:64:48:4d:
         8e:f2:e0:ba:dd:c0:24:37:87:76:c9:af:0a:e4:92:a5:7c:30:
         89:e6:19:04:6d:44:18:a0:7c:a4:53:76:f8:eb:0e:b9:27:1e:
         27:52:8a:b3:58:f4:ae:95:4c:18:bd:1c:1d:e4:f4:c1:56:36:
         36:04:1e:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtk/BCucXB6sD0gmyIX3d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm
ZjBlNWIwHhcNMjMwMTAxMTM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2VjZDU2NDlmMzE0MGM5NGNkYTc2OTkzNDEzMmE4YTBmZTQ3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMaKh3K4ZqJSu6XCtSgTXBDaT6N5
4L4oNyHtofu+IyabaaP96TN+MMC4PVqWLt9todiH3Cjzmdy8/sK+vuvw01bEclib
8BJUr5aNeI+SJLJbElIT99N/UYeuQ9zXLJbCV7LCAUJQgci9Jkkv7agI0vbl9VLP
AdQ1WJUObTYiH3IGF1GqrXuL0S8kW9l9g6oBLLyj5tIRrEqzE6NC6ZgaPSzr1jJM
UgGwiCz9pc0abYSip9EU2C1dcN7hyWYEUBBEveP+x7Ig2+loPjky8BzlxB990c6x
XEEPQ268DJPLy1uHRogr1WMBsQww3NbRAhI3pnAwOUzhkSYDt/SE48TnowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJPs1WSfMUDJTNp2mTQTKooP5HtFMB8GA1UdIwQY
MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt
NmFhYjJiMWI5MjJjLzEvay16VlpKOHhRTWxNMm5hWk5CTXFpZ19rZTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj
LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGvMA8E
AgACMAkDBwAgAQf4APgwDQYJKoZIhvcNAQELBQADggEBAEuM9eu2Pj+00xy8X0sR
aL7OUlILY66TIF4EBeNmcrf9pJpnBCizKSy9dErlJKtEiVOlVh9S2K8GgHEfO3wS
enARs/ZA6Grmq0/7NtYva6IynkTgyboq93SFYLJrteStWCaMjhK1d7M1ueCQ/bKb
R46hzP8BIMha/5AYlkGGv1zootie1UZMxOP3gvE03c9JJzcRXl1t42aTZILdSQOm
yTSJ2+Sk8Qu1ovV4E9F+j67rAKNph+p5MYDKmbOYVRvhgIK+s2RITY7y4LrdwCQ3
h3bJrwrkkqV8MInmGQRtRBigfKRTdvjrDrknHidSirNY9K6VTBi9HB3k9MFWNjYE
Hp0=
-----END CERTIFICATE-----