Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFVU4weCPCDkzWUs7PpGXQlKSfs.roa
File:                     HFVU4weCPCDkzWUs7PpGXQlKSfs.roa (raw, json)
Hash identifier:          1ID/FVNjb2l7/Ebgt5buBkR6LxOkucsYlq/qiXui9Pk=
Subject key identifier:   1C:55:54:E3:07:82:3C:20:E4:CD:65:2C:EC:FA:46:5D:09:4A:49:FB
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53F1BA9E334747DFA86B239D7A71EE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFVU4weCPCDkzWUs7PpGXQlKSfs.roa
Signing time:             Sun 01 Jan 2023 07:55:18 +0000
ROA not before:           Sun 01 Jan 2023 07:55:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42831
IP address blocks:        193.222.101.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:f1:ba:9e:33:47:47:df:a8:6b:23:9d:7a:71:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c5554e307823c20e4cd652cecfa465d094a49fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:66:d3:d8:a7:a7:7c:d1:55:a0:72:e9:54:
                    e5:65:bb:1e:0a:33:a2:28:b7:57:f1:4b:e0:33:df:
                    de:35:6a:45:bf:59:a1:56:79:8d:9f:ae:4d:d6:33:
                    b4:f6:de:49:b0:1e:38:ee:48:12:48:4b:9d:2e:fb:
                    4c:81:e0:ac:7f:cc:7a:fe:18:a1:3f:8a:ad:4b:5e:
                    4b:f2:a2:df:ea:92:c6:df:1d:1d:d1:bf:b2:9a:92:
                    eb:6e:f1:7d:7b:29:94:96:66:64:03:83:4d:cf:7e:
                    50:d0:3f:4f:a2:11:9c:59:dc:cb:aa:45:ca:f8:fc:
                    de:68:3a:97:c3:74:2b:b4:ab:72:c0:02:bd:52:9b:
                    31:7d:8f:b5:1a:85:bc:86:18:7f:69:0e:93:38:4b:
                    3a:95:a6:7b:34:6c:eb:97:13:4d:28:c0:c1:b7:14:
                    82:02:0d:56:a8:94:5d:bd:90:be:89:be:2f:dc:22:
                    15:c6:88:e2:1b:66:be:0f:ae:d4:29:c6:ed:2d:c8:
                    e6:32:56:41:de:39:0e:71:4f:ac:b0:f3:78:14:1e:
                    91:8d:30:df:9a:5a:0e:77:72:96:e9:8c:8a:7c:e0:
                    42:a8:83:3c:41:7a:b7:4f:1a:50:76:5f:e2:0c:7a:
                    aa:b1:99:15:f0:97:b5:b9:53:10:54:e9:f6:c9:ae:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:55:54:E3:07:82:3C:20:E4:CD:65:2C:EC:FA:46:5D:09:4A:49:FB
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/HFVU4weCPCDkzWUs7PpGXQlKSfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:27:a1:ca:d2:f5:81:46:fc:17:af:76:fe:01:c3:d2:d5:
         f0:d4:95:56:16:61:2b:4d:1d:72:ef:84:9d:f4:75:af:45:92:
         da:98:19:31:1e:eb:fe:fc:54:a7:51:ce:a7:a5:bd:a4:af:f6:
         a5:7c:0d:e3:22:fe:88:d9:ba:49:6f:a9:79:cb:e8:e3:9f:e5:
         f7:35:d3:a7:38:13:e5:5a:aa:b8:67:b5:76:82:ba:41:f3:4a:
         ed:60:7a:c2:d6:c0:66:e1:5f:73:22:ad:71:6e:1c:9f:4a:33:
         c3:f1:20:59:0b:d4:62:28:9d:77:3d:0f:7c:b8:e6:81:a4:07:
         47:c2:13:de:26:38:d1:06:92:a9:eb:ea:3a:65:d4:84:7f:51:
         48:ab:39:47:c3:85:d1:d3:49:88:d7:25:42:d7:eb:84:4b:6e:
         80:fb:4e:f5:6d:7d:fe:e1:66:39:30:1c:6a:ba:aa:42:5e:a3:
         99:a5:d7:53:1a:69:bb:24:51:08:56:40:b3:2c:dd:fb:bd:0a:
         48:e5:fc:e8:e2:87:72:9a:4a:bf:45:d8:f9:93:6d:d1:af:99:
         0c:3b:bc:ce:98:e8:30:b0:66:68:4a:8a:0c:27:f6:62:72:ad:
         8d:01:04:43:f8:0c:a0:89:fa:f3:65:82:8b:9c:1b:ff:0f:5d:
         a6:95:1e:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU/G6njNHR9+oayOdenHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzU1NTRlMzA3ODIzYzIwZTRjZDY1MmNlY2ZhNDY1ZDA5NGE0OWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjENm09inp3zRVaBy6VTlZbseCjOi
KLdX8UvgM9/eNWpFv1mhVnmNn65N1jO09t5JsB447kgSSEudLvtMgeCsf8x6/hih
P4qtS15L8qLf6pLG3x0d0b+ympLrbvF9eymUlmZkA4NNz35Q0D9PohGcWdzLqkXK
+PzeaDqXw3QrtKtywAK9UpsxfY+1GoW8hhh/aQ6TOEs6laZ7NGzrlxNNKMDBtxSC
Ag1WqJRdvZC+ib4v3CIVxojiG2a+D67UKcbtLcjmMlZB3jkOcU+ssPN4FB6RjTDf
mloOd3KW6YyKfOBCqIM8QXq3TxpQdl/iDHqqsZkV8Je1uVMQVOn2ya7pvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxVVOMHgjwg5M1lLOz6Rl0JSkn7MB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvSEZWVTR3ZUNQQ0RreldVczdQcEdYUWxLU2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5lMA0G
CSqGSIb3DQEBCwUAA4IBAQBf+iehytL1gUb8F692/gHD0tXw1JVWFmErTR1y74Sd
9HWvRZLamBkxHuv+/FSnUc6npb2kr/alfA3jIv6I2bpJb6l5y+jjn+X3NdOnOBPl
Wqq4Z7V2grpB80rtYHrC1sBm4V9zIq1xbhyfSjPD8SBZC9RiKJ13PQ98uOaBpAdH
whPeJjjRBpKp6+o6ZdSEf1FIqzlHw4XR00mI1yVC1+uES26A+071bX3+4WY5MBxq
uqpCXqOZpddTGmm7JFEIVkCzLN37vQpI5fzo4odymkq/Rdj5k23Rr5kMO7zOmOgw
sGZoSooMJ/Zicq2NAQRD+AygifrzZYKLnBv/D12mlR6Y
-----END CERTIFICATE-----