Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/lENkXq8nPIrKvUHkEbE4L_QpAiw.roa
File:                     lENkXq8nPIrKvUHkEbE4L_QpAiw.roa (raw, json)
Hash identifier:          5O5s+uyrj6ZRJFspUOejmklExi8B1s5rD6Ti8OBBnw8=
Subject key identifier:   94:43:64:5E:AF:27:3C:8A:CA:BD:41:E4:11:B1:38:2F:F4:29:02:2C
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       018897A633EE9DF0946C2059C32ACD920AD3
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/lENkXq8nPIrKvUHkEbE4L_QpAiw.roa
Signing time:             Wed 07 Jun 2023 20:57:11 +0000
ROA not before:           Wed 07 Jun 2023 20:57:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206207
IP address blocks:        185.190.208.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:97:a6:33:ee:9d:f0:94:6c:20:59:c3:2a:cd:92:0a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Jun  7 20:57:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9443645eaf273c8acabd41e411b1382ff429022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:54:fb:ea:91:e4:7c:c3:05:a8:de:61:27:
                    71:e9:9a:9b:d4:7f:08:4d:49:4e:bf:43:cf:d7:0b:
                    04:ec:31:ee:12:3d:8b:9a:aa:0c:07:65:a2:17:d6:
                    85:bf:94:c1:f1:d1:72:c5:dc:fe:e3:24:3f:5a:fa:
                    d0:ea:b3:e8:bf:5b:02:29:6b:32:36:f4:4a:b3:4c:
                    36:7b:c9:ea:c1:44:2d:56:63:15:3e:7e:3b:8c:57:
                    56:5b:78:60:66:4e:5d:2b:db:85:78:70:0a:b4:15:
                    82:94:96:f9:d6:f0:c5:d5:81:68:fe:fe:79:38:fb:
                    3b:7d:f6:fb:6f:e8:55:a4:f3:72:e5:83:db:bd:a2:
                    86:88:53:0d:12:1e:cc:65:50:c8:3b:73:86:94:29:
                    bc:73:96:7a:e7:de:af:34:a6:1d:ab:51:57:e2:b5:
                    f7:ab:8c:86:ee:95:55:0d:1f:9e:01:fe:ca:89:0d:
                    52:0f:ad:f5:8f:7f:04:8e:ca:da:33:8d:2a:ed:fe:
                    30:57:ed:21:89:d6:5a:ef:6d:bb:87:ec:fb:c6:29:
                    0a:38:c6:69:7e:68:95:df:eb:31:67:d2:0b:af:3d:
                    6a:1f:25:df:73:73:d7:3b:a1:34:81:45:07:7b:47:
                    6b:16:0c:6d:a2:37:63:06:16:9e:1c:4a:b9:62:ec:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:43:64:5E:AF:27:3C:8A:CA:BD:41:E4:11:B1:38:2F:F4:29:02:2C
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/lENkXq8nPIrKvUHkEbE4L_QpAiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:22:64:c1:39:38:2a:96:b7:5f:40:28:0c:76:ea:40:dd:e4:
         d4:51:8a:40:7c:57:fc:f0:f8:57:54:f8:5f:9a:aa:d8:31:ce:
         bf:7f:3e:cd:ac:a1:79:16:71:73:73:db:ff:d3:01:35:ef:fb:
         f6:18:fc:8f:68:6a:f4:7b:8d:3c:e2:81:96:1c:7e:39:6a:10:
         c9:a3:0e:a3:ea:5a:b2:63:c8:64:6e:55:56:4e:2b:7c:5a:14:
         a8:79:d2:4b:18:88:82:7c:20:15:e7:4f:64:ce:04:c6:27:ab:
         c5:e1:24:94:6c:6b:2d:4e:aa:23:d0:0c:b8:f0:cd:04:95:cc:
         78:84:8d:2c:52:8b:6e:fc:d7:cf:d2:9c:9f:44:7e:f3:29:1d:
         e5:1e:14:04:ba:8c:62:07:5b:11:27:bf:b2:c1:92:ea:1c:77:
         bb:c1:2d:3a:58:96:dc:3a:38:f0:46:70:23:e7:52:60:8b:12:
         a3:9f:73:4b:25:93:6e:51:03:19:6a:15:fe:aa:35:1e:a9:2d:
         7b:3e:7a:26:5e:ed:69:54:81:0f:b7:d9:d6:17:3d:0f:d7:b9:
         6c:4b:90:5b:d2:d4:56:37:4b:fd:26:56:11:12:b9:8a:cb:9b:
         91:7a:b3:1c:0e:03:6a:fa:af:af:46:5e:8b:e3:7a:67:74:e0:
         d0:b7:e6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----