Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/7JpbgaMTFWpMEOhKKnqMTveTSW8.roa
File:                     7JpbgaMTFWpMEOhKKnqMTveTSW8.roa (raw, json)
Hash identifier:          fp16LNAbLFg70W15ssKhF8wWldN3mMv56A79LwmB2tY=
Subject key identifier:   EC:9A:5B:81:A3:13:15:6A:4C:10:E8:4A:2A:7A:8C:4E:F7:93:49:6F
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       01856F26CD6595A06EF8208E1A8AB3B0B409
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/7JpbgaMTFWpMEOhKKnqMTveTSW8.roa
Signing time:             Sun 01 Jan 2023 21:04:51 +0000
ROA not before:           Sun 01 Jan 2023 21:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203244
IP address blocks:        185.246.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:26:cd:65:95:a0:6e:f8:20:8e:1a:8a:b3:b0:b4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Jan  1 21:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec9a5b81a313156a4c10e84a2a7a8c4ef793496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:d6:13:d8:23:dd:36:14:33:b1:29:f8:2f:
                    7f:9a:84:20:b8:19:d7:4a:b0:d1:1d:9d:66:84:47:
                    e0:e7:44:29:23:df:86:18:3b:5b:8f:c8:3f:0a:57:
                    bf:6d:5a:55:a2:db:63:48:b8:6b:3a:20:df:d9:6a:
                    f4:d0:7a:2a:da:5f:0e:fe:32:a7:af:4f:85:7f:6f:
                    b3:13:36:a9:b4:ed:55:d1:5e:b8:99:bf:7a:2f:31:
                    d7:a7:4c:51:0d:a4:a5:94:66:a5:35:31:2b:65:fa:
                    ce:8a:3e:eb:a4:8e:98:26:a9:50:9a:89:20:08:e5:
                    42:48:c2:fb:dc:5e:97:1b:ea:43:58:82:7a:6d:66:
                    36:dd:8a:1c:30:05:6d:d8:17:bb:1d:b8:8b:4c:7a:
                    d8:d7:fc:03:e0:3c:22:02:94:98:be:d2:57:88:b0:
                    7a:0d:42:9d:f5:70:53:f5:65:05:62:f2:21:7b:a6:
                    45:01:52:ce:c0:c7:5d:17:59:96:e0:77:e3:9a:20:
                    d9:7b:54:70:25:c4:e6:51:5b:e9:04:1a:3b:db:f4:
                    23:34:4a:dc:10:16:c4:09:83:37:13:e6:bb:14:d5:
                    3c:9e:f5:41:15:ea:48:99:4c:f5:12:c2:6a:45:fa:
                    9e:93:c1:95:6c:e0:21:d9:a2:e8:ac:70:c1:96:0b:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9A:5B:81:A3:13:15:6A:4C:10:E8:4A:2A:7A:8C:4E:F7:93:49:6F
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/7JpbgaMTFWpMEOhKKnqMTveTSW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:fc:74:37:ca:04:10:d1:00:fc:d2:d0:b5:8d:88:63:55:
         cf:5a:d5:d5:20:e6:c4:58:22:69:51:dd:1f:af:e8:15:00:cf:
         b9:03:15:1e:f7:1d:b5:ec:9a:6f:bd:74:28:f1:9d:f1:a7:f2:
         2c:49:92:6e:c1:4e:33:38:04:67:c8:f7:67:cf:f7:d1:d4:b3:
         d1:f5:a5:9c:bb:3d:c0:66:60:aa:68:36:b7:56:2c:ec:4f:11:
         92:97:be:dc:52:94:23:c5:e0:c4:66:05:01:5d:e7:71:31:1b:
         13:a1:0c:5d:5f:ce:96:86:e0:11:bd:33:6f:bb:00:0c:69:83:
         71:81:3c:71:48:45:61:90:1b:56:49:20:6b:dc:6d:26:58:31:
         53:18:b6:82:91:18:e1:fd:ff:30:2f:01:b7:f6:29:86:a5:f0:
         fa:b7:38:47:37:71:4c:8b:30:6c:d5:47:f4:14:a1:16:53:59:
         32:1c:e4:f2:21:e5:89:96:e2:1a:05:8a:a8:ba:f1:fa:1f:55:
         fb:0f:04:30:38:69:d1:07:7d:b8:03:a0:db:a0:2f:3e:59:41:
         40:5a:4a:e4:2a:23:73:07:51:01:ba:b2:be:01:5e:c7:af:de:
         49:79:72:f8:7f:3e:57:3e:f7:97:d9:1f:ca:eb:4e:40:00:d5:
         2f:c3:c1:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJs1llaBu+CCOGoqzsLQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3
MDJmNGEwHhcNMjMwMTAxMjEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzlhNWI4MWEzMTMxNTZhNGMxMGU4NGEyYTdhOGM0ZWY3OTM0OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTWE9gj3TYUM7Ep+C9/moQguBnX
SrDRHZ1mhEfg50QpI9+GGDtbj8g/Cle/bVpVottjSLhrOiDf2Wr00Hoq2l8O/jKn
r0+Ff2+zEzaptO1V0V64mb96LzHXp0xRDaSllGalNTErZfrOij7rpI6YJqlQmokg
COVCSML73F6XG+pDWIJ6bWY23YocMAVt2Be7HbiLTHrY1/wD4DwiApSYvtJXiLB6
DUKd9XBT9WUFYvIhe6ZFAVLOwMddF1mW4HfjmiDZe1RwJcTmUVvpBBo72/QjNErc
EBbECYM3E+a7FNU8nvVBFepImUz1EsJqRfqek8GVbOAh2aLorHDBlguDUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyaW4GjExVqTBDoSip6jE73k0lvMB8GA1UdIwQY
MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt
MmM0OGNiMjk4NjQ2LzEvN0pwYmdhTVRGV3BNRU9oS0tucU1UdmVUU1c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2
LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufbEMA0G
CSqGSIb3DQEBCwUAA4IBAQBx0fx0N8oEENEA/NLQtY2IY1XPWtXVIObEWCJpUd0f
r+gVAM+5AxUe9x217JpvvXQo8Z3xp/IsSZJuwU4zOARnyPdnz/fR1LPR9aWcuz3A
ZmCqaDa3VizsTxGSl77cUpQjxeDEZgUBXedxMRsToQxdX86WhuARvTNvuwAMaYNx
gTxxSEVhkBtWSSBr3G0mWDFTGLaCkRjh/f8wLwG39imGpfD6tzhHN3FMizBs1Uf0
FKEWU1kyHOTyIeWJluIaBYqouvH6H1X7DwQwOGnRB324A6DboC8+WUFAWkrkKiNz
B1EBurK+AV7Hr95JeXL4fz5XPveX2R/K605AANUvw8FU
-----END CERTIFICATE-----