Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f0FHs3_bfXtUz4ugCf_GPE86H6Q.roa
File:                     f0FHs3_bfXtUz4ugCf_GPE86H6Q.roa (raw, json)
Hash identifier:          fjK3sYFsGXkuJdzeZUWzEDVWvhGNKbx0GaJAC7oUcr4=
Subject key identifier:   7F:41:47:B3:7F:DB:7D:7B:54:CF:8B:A0:09:FF:C6:3C:4F:3A:1F:A4
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       018ADDC17D945A52F1E6BDD15ABAEB8CF50B
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f0FHs3_bfXtUz4ugCf_GPE86H6Q.roa
Signing time:             Thu 28 Sep 2023 21:45:59 +0000
ROA not before:           Thu 28 Sep 2023 21:45:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36231
IP address blocks:        37.72.132.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dd:c1:7d:94:5a:52:f1:e6:bd:d1:5a:ba:eb:8c:f5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Sep 28 21:45:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f4147b37fdb7d7b54cf8ba009ffc63c4f3a1fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:d9:8b:3d:97:38:5b:80:10:0c:26:ac:8e:
                    2e:95:5c:58:45:25:8d:2e:76:55:b1:b9:ee:d7:35:
                    7e:04:08:16:e5:ad:45:39:1c:ef:f3:b7:78:69:42:
                    83:97:33:99:87:f1:d8:35:21:c7:9d:71:c7:ed:e7:
                    c2:da:3e:96:d2:22:5a:f3:72:26:2b:d2:82:84:dd:
                    a3:a4:b1:72:bd:8a:17:45:3e:6c:24:f0:b5:9f:59:
                    54:8d:f2:69:ba:76:12:dc:bc:0a:a2:ff:f2:68:99:
                    21:ec:c8:3b:74:f0:68:fa:9a:0a:11:24:0f:72:69:
                    b5:47:cc:03:28:05:80:8b:28:b4:18:f5:6c:e4:10:
                    29:67:07:0c:5d:b2:82:79:b7:53:fa:54:d3:6a:47:
                    b7:76:0a:c7:e4:fd:62:90:48:91:67:a4:ac:42:49:
                    89:5c:c7:66:31:32:99:ab:55:36:90:cd:ab:4e:e0:
                    b6:ac:46:0b:dd:7e:38:4c:6e:9d:35:a4:fe:48:bc:
                    55:7f:99:82:6b:dc:c3:8c:52:9e:a3:d4:79:23:f0:
                    3e:0c:a0:42:75:05:68:f7:4b:30:5d:a4:3b:ca:9b:
                    41:03:77:58:ed:25:25:f0:ee:4e:7d:dd:f4:dd:a1:
                    84:89:8f:96:4c:62:12:02:d7:32:07:fb:84:de:9e:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:47:B3:7F:DB:7D:7B:54:CF:8B:A0:09:FF:C6:3C:4F:3A:1F:A4
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f0FHs3_bfXtUz4ugCf_GPE86H6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:30:c4:bf:cc:0c:0f:1b:86:7a:12:93:64:cc:cb:26:18:
         7c:86:de:42:6f:e6:e2:35:08:dc:3d:c8:09:a3:f4:94:99:b0:
         71:9e:15:69:48:e8:cb:f7:34:e1:f1:a0:41:0c:31:2d:91:67:
         97:4f:47:88:8a:2c:2c:f5:f3:ec:68:bd:46:fb:5a:57:55:a5:
         57:3e:16:ee:88:53:4d:17:71:9f:81:96:32:19:f5:0a:6b:4e:
         eb:c9:8e:e4:27:29:c6:fe:69:43:12:a9:44:14:c3:d6:60:04:
         7f:d8:95:e4:af:5d:87:f2:b8:22:e2:98:7d:b3:52:5a:4d:f8:
         7c:2a:f2:0e:de:50:f4:5a:0c:a9:6b:33:8a:0b:38:90:28:af:
         68:30:30:9e:2a:d9:9c:3d:4e:3f:d6:70:21:0f:21:d4:e3:e9:
         59:e3:af:3b:b6:2b:3f:55:cb:bc:3b:1e:48:1c:85:fe:76:23:
         08:14:20:fa:8e:e9:a0:33:df:51:94:f2:8a:69:dd:d9:cf:9f:
         da:2b:61:ae:58:8c:a6:56:f2:3e:34:fe:84:50:f8:ed:5d:21:
         a6:ed:6d:c9:40:6a:bd:bb:ec:50:4b:35:dd:a4:8e:d2:09:04:
         db:c3:47:77:a1:09:ff:0e:7b:fe:33:9b:20:a0:52:24:33:0c:
         fb:d5:f3:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrdwX2UWlLx5r3RWrrrjPULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk
NDI1YjAwHhcNMjMwOTI4MjE0NTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjQxNDdiMzdmZGI3ZDdiNTRjZjhiYTAwOWZmYzYzYzRmM2ExZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFnZiz2XOFuAEAwmrI4ulVxYRSWN
LnZVsbnu1zV+BAgW5a1FORzv87d4aUKDlzOZh/HYNSHHnXHH7efC2j6W0iJa83Im
K9KChN2jpLFyvYoXRT5sJPC1n1lUjfJpunYS3LwKov/yaJkh7Mg7dPBo+poKESQP
cmm1R8wDKAWAiyi0GPVs5BApZwcMXbKCebdT+lTTake3dgrH5P1ikEiRZ6SsQkmJ
XMdmMTKZq1U2kM2rTuC2rEYL3X44TG6dNaT+SLxVf5mCa9zDjFKeo9R5I/A+DKBC
dQVo90swXaQ7yptBA3dY7SUl8O5Ofd303aGEiY+WTGISAtcyB/uE3p42UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9BR7N/2317VM+LoAn/xjxPOh+kMB8GA1UdIwQY
MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt
YjAzZGY5OTZlNDgxLzEvZjBGSHMzX2JmWHRVejR1Z0NmX0dQRTg2SDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx
LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUiEMA0G
CSqGSIb3DQEBCwUAA4IBAQAG6DDEv8wMDxuGehKTZMzLJhh8ht5Cb+biNQjcPcgJ
o/SUmbBxnhVpSOjL9zTh8aBBDDEtkWeXT0eIiiws9fPsaL1G+1pXVaVXPhbuiFNN
F3GfgZYyGfUKa07ryY7kJynG/mlDEqlEFMPWYAR/2JXkr12H8rgi4ph9s1JaTfh8
KvIO3lD0WgypazOKCziQKK9oMDCeKtmcPU4/1nAhDyHU4+lZ4687tis/Vcu8Ox5I
HIX+diMIFCD6jumgM99RlPKKad3Zz5/aK2GuWIymVvI+NP6EUPjtXSGm7W3JQGq9
u+xQSzXdpI7SCQTbw0d3oQn/Dnv+M5sgoFIkMwz71fPQ
-----END CERTIFICATE-----