Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/chO-dFmPLr2b4TqSXe9_XsuTIGc.roa
File:                     chO-dFmPLr2b4TqSXe9_XsuTIGc.roa (raw, json)
Hash identifier:          W2ZY3zDgZeFiFwKi0BY0oFxehISfYM1pvEd+NXAeLLE=
Subject key identifier:   72:13:BE:74:59:8F:2E:BD:9B:E1:3A:92:5D:EF:7F:5E:CB:93:20:67
Certificate issuer:       /CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Certificate serial:       0186AEEA12208C023F3CC92F636A73558E59
Authority key identifier: 48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/chO-dFmPLr2b4TqSXe9_XsuTIGc.roa
Signing time:             Sat 04 Mar 2023 23:17:00 +0000
ROA not before:           Sat 04 Mar 2023 23:17:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        185.179.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ae:ea:12:20:8c:02:3f:3c:c9:2f:63:6a:73:55:8e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
        Validity
            Not Before: Mar  4 23:17:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7213be74598f2ebd9be13a925def7f5ecb932067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:ff:83:b8:ce:b8:30:68:ec:67:f0:e8:8a:
                    8e:81:27:4a:0f:4f:5e:3e:b2:be:a8:1d:0b:a6:12:
                    d5:e0:b8:e5:a4:c9:41:50:50:17:17:6f:ad:e6:cd:
                    77:fc:5b:00:0f:1c:46:07:3f:54:e3:64:cc:53:99:
                    1d:8c:35:c9:c1:d2:4d:3e:75:96:ff:f5:f1:0f:52:
                    d0:bd:e1:a5:9c:2b:fa:31:c8:ac:a1:05:74:bd:0f:
                    e9:c5:27:ad:83:a6:44:8b:43:6a:b3:c0:ef:d4:96:
                    68:b0:86:dd:dc:0e:5e:3c:d2:a9:74:7e:0b:81:66:
                    97:0a:49:9d:2a:b9:a3:82:0c:2a:71:cd:fc:8e:83:
                    25:7e:aa:f4:7b:a9:8d:e1:43:de:e1:07:88:c6:8c:
                    27:66:52:63:ec:44:70:fd:2c:65:f0:91:79:f0:07:
                    27:f9:df:e1:d9:1b:1d:c3:e8:2c:3c:13:16:cf:c5:
                    c6:55:b1:1e:36:07:cb:80:18:a2:bb:17:03:69:bc:
                    cc:48:80:0c:07:0f:e6:b0:c4:ae:ec:ee:ef:01:af:
                    a2:5a:4c:57:dc:74:77:81:a9:d1:6d:0c:d2:71:c1:
                    63:47:72:0d:c4:fb:c9:b4:2d:a3:c5:c0:11:f3:cd:
                    a0:4f:90:e8:b3:c3:95:1e:94:23:66:b3:e8:81:ae:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:BE:74:59:8F:2E:BD:9B:E1:3A:92:5D:EF:7F:5E:CB:93:20:67
            X509v3 Authority Key Identifier:
                keyid:48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/chO-dFmPLr2b4TqSXe9_XsuTIGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/SAvxwTbs_9MS_Dm6PIKv-TneJPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:86:80:94:9d:a9:c9:ec:c8:8d:1b:e2:f3:3b:d3:93:c5:
         ad:b7:47:2d:22:6d:21:cc:34:ac:99:d0:6a:1f:0f:f9:e9:17:
         51:3a:4d:b2:3b:7c:da:87:98:13:55:4f:01:56:54:9c:51:fa:
         36:1f:62:85:9f:b8:d5:fb:81:35:98:1e:e8:a3:ac:2b:43:e0:
         b9:84:60:72:2b:7e:5f:f6:be:f3:2b:82:c8:6e:7f:ad:1b:9d:
         9c:92:bd:93:15:61:1e:43:30:d6:0e:cc:58:d8:e7:0b:47:80:
         59:40:37:f8:c4:b7:91:d0:e2:3d:46:42:14:d5:85:07:f4:11:
         01:81:ef:7c:34:74:82:95:df:52:68:11:6e:19:9a:47:37:4e:
         50:72:6e:2d:96:54:0f:9d:5a:e3:02:73:1d:99:dc:81:ec:a3:
         d8:2c:b0:a3:93:10:7b:ad:fa:fc:75:af:41:3f:8f:79:8c:b0:
         56:53:51:96:fd:a6:bf:aa:f6:18:f7:d3:55:84:64:af:f7:7f:
         c0:38:83:52:5b:42:61:20:d7:52:ad:07:bb:61:68:d7:b4:29:
         ff:df:9e:25:a3:ae:db:3f:cb:5b:22:72:a1:61:6e:55:f2:35:
         f1:8f:c1:f1:cb:fa:e9:45:9f:c4:11:70:42:2b:68:84:df:96:
         4f:cd:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----