Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/OJLQ-dcsOO5nR-fSfI6XcPWXycM.roa
File:                     OJLQ-dcsOO5nR-fSfI6XcPWXycM.roa (raw, json)
Hash identifier:          U6c1J4GQcD7XUvw92YrI3bTHbkesE66JbqIQzpnFzpk=
Subject key identifier:   38:92:D0:F9:D7:2C:38:EE:67:47:E7:D2:7C:8E:97:70:F5:97:C9:C3
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       018AB67469EE2FF7BA184322546CD519379E
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/OJLQ-dcsOO5nR-fSfI6XcPWXycM.roa
Signing time:             Thu 21 Sep 2023 06:36:37 +0000
ROA not before:           Thu 21 Sep 2023 06:36:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.229.147.0/24 maxlen: 24
                          2a0d:d600::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b6:74:69:ee:2f:f7:ba:18:43:22:54:6c:d5:19:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: Sep 21 06:36:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3892d0f9d72c38ee6747e7d27c8e9770f597c9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:c8:88:04:43:1e:36:0c:16:db:20:41:59:
                    73:92:62:93:7f:77:43:de:56:fd:e7:d9:da:ed:e9:
                    3f:30:35:9a:4b:50:fc:d0:e4:5f:94:e9:1e:a6:5d:
                    c3:9b:b5:90:ef:59:c7:41:9c:8b:75:08:8a:a9:ef:
                    99:45:5f:07:66:a5:1d:2e:99:7e:e2:57:60:6b:cb:
                    6e:ff:c1:91:38:82:94:ab:77:c6:53:ba:a9:35:0a:
                    0b:c4:1a:eb:9a:96:ea:c3:e7:02:4c:f7:82:42:d7:
                    d7:d8:f4:54:e3:6c:83:43:a9:cc:87:ff:10:67:d5:
                    85:72:79:10:8e:3e:96:c9:18:0e:71:7c:a1:3d:af:
                    ae:79:0e:49:d6:28:00:e8:68:09:86:8f:6c:fd:64:
                    33:98:18:44:2e:73:a7:b0:42:84:b0:be:f1:10:a8:
                    e8:46:59:1b:05:2d:53:a5:9c:d3:0c:ac:dd:5a:6e:
                    6c:6f:36:c1:2e:57:cf:dc:e4:6e:f9:04:40:5e:62:
                    97:9c:74:39:08:34:c2:39:ef:db:1a:65:ed:70:69:
                    9d:85:e5:d3:e4:11:43:71:6a:d1:d5:20:f3:47:cf:
                    1e:d9:75:10:6e:62:1a:48:9b:74:09:66:d4:5d:34:
                    1b:03:89:20:69:b9:39:6e:41:ac:bb:a5:4c:f2:69:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:D0:F9:D7:2C:38:EE:67:47:E7:D2:7C:8E:97:70:F5:97:C9:C3
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/OJLQ-dcsOO5nR-fSfI6XcPWXycM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.147.0/24
                IPv6:
                  2a0d:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:40:9b:76:30:ff:74:9a:2e:2e:ee:0e:51:36:54:a8:f8:90:
         aa:56:85:16:bc:b1:cc:c0:d7:53:e4:68:88:9a:c8:ea:3b:5a:
         16:4e:55:fd:66:82:ac:58:c4:50:08:dd:64:a8:48:40:18:05:
         fe:47:1e:e8:67:84:14:a1:ed:8d:22:60:fa:11:07:66:f8:a3:
         67:e0:a9:e4:6c:0e:9d:20:12:48:53:76:61:70:37:13:47:62:
         92:dc:83:59:42:8d:29:9d:e8:b6:16:70:56:ff:f8:cf:f1:25:
         9e:c7:7a:d1:d3:3e:63:7a:12:03:b6:3e:0b:be:38:01:e2:ab:
         1f:fe:3d:27:e8:54:2f:ac:1a:b7:24:9c:bd:4f:58:fd:a2:71:
         5e:9e:57:de:d8:4d:9a:a2:3f:2d:e0:f5:f6:fd:13:fd:ce:d5:
         93:42:d6:1d:97:a8:1a:dd:55:b5:2b:b3:d1:55:a5:72:03:d0:
         f2:89:3b:e2:a1:e6:de:11:76:bc:08:15:bf:32:6e:ab:08:60:
         4a:dc:5d:ce:61:00:c0:9f:d4:df:79:6b:ec:f5:de:65:f2:e6:
         78:e4:9c:8a:3d:e0:4b:a9:8c:94:69:fe:55:28:27:44:94:0b:
         25:c5:e9:f4:b0:84:58:28:59:7f:0f:ef:57:ce:e6:82:ea:da:
         ae:7f:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----