Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/9i5dLtz_UpVDtp0xMAjkw89BUaI.roa
File:                     9i5dLtz_UpVDtp0xMAjkw89BUaI.roa (raw, json)
Hash identifier:          D3cxryVCosUHaVmgAwIllR9Is+ZjqCzdWW627TleLV0=
Subject key identifier:   F6:2E:5D:2E:DC:FF:52:95:43:B6:9D:31:30:08:E4:C3:CF:41:51:A2
Certificate issuer:       /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial:       0186DA243BD0AF564FAAC660E957B56F2E32
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/9i5dLtz_UpVDtp0xMAjkw89BUaI.roa
Signing time:             Mon 13 Mar 2023 08:44:13 +0000
ROA not before:           Mon 13 Mar 2023 08:44:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54339
IP address blocks:        176.114.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:da:24:3b:d0:af:56:4f:aa:c6:60:e9:57:b5:6f:2e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
        Validity
            Not Before: Mar 13 08:44:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f62e5d2edcff529543b69d313008e4c3cf4151a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:be:d0:c6:fa:ee:b8:d1:ed:cf:72:66:18:
                    66:e3:f4:87:7a:51:dc:50:85:37:b1:e5:e3:58:3a:
                    54:99:a3:09:34:77:34:de:93:88:f6:91:5c:7f:e8:
                    a1:c0:ed:b0:39:3c:2d:23:53:e2:d5:a2:f3:db:d3:
                    89:c5:4b:50:5c:15:c6:4c:a2:af:fb:21:6f:3c:10:
                    35:c0:af:66:29:90:12:e0:db:68:00:bc:f8:1c:7e:
                    31:c0:8d:0d:e8:66:56:a5:e0:d7:d0:ab:e0:54:e9:
                    30:f9:85:35:cc:bd:d6:43:f3:87:f6:a0:b8:db:91:
                    d6:2b:fb:74:27:19:cd:0d:07:14:da:e8:9c:73:e9:
                    a4:23:2f:9d:b5:1b:f6:9a:e9:bb:60:ff:57:e5:07:
                    3e:16:fe:94:71:3c:0e:17:52:d7:7a:f0:52:90:ec:
                    6a:43:79:70:97:f0:18:8e:da:83:a1:fc:d7:0b:61:
                    87:6e:13:81:e9:da:d7:ef:3c:35:a5:15:9d:c9:1b:
                    ec:21:97:5b:f8:41:7b:76:7f:eb:5e:33:31:ba:83:
                    5a:ba:f2:91:95:de:b8:57:6c:6d:a1:53:c5:08:1e:
                    de:15:dc:c2:3a:ab:72:8f:53:29:8f:c7:23:ab:40:
                    51:5a:f4:45:50:55:3d:15:dd:c9:21:75:f4:b0:74:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:5D:2E:DC:FF:52:95:43:B6:9D:31:30:08:E4:C3:CF:41:51:A2
            X509v3 Authority Key Identifier:
                keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/9i5dLtz_UpVDtp0xMAjkw89BUaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.114.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:10:a0:d3:10:a6:66:e1:18:62:4f:00:b9:8b:25:22:e6:
         82:d7:5f:92:8c:3f:f8:c2:e9:f1:34:19:21:df:c5:7d:1b:49:
         70:be:16:62:da:e0:db:6b:57:77:a2:e1:73:a1:7c:f7:99:9d:
         95:b7:b9:c0:20:54:46:d7:cb:27:83:aa:c9:0c:2e:4a:da:74:
         96:6b:81:5f:2d:8e:fd:0d:0e:f4:cb:01:91:a6:db:e5:70:09:
         44:05:ac:3c:a2:c0:d6:5a:0a:d1:0c:10:36:81:40:fd:52:6c:
         d2:13:4c:a5:f6:1c:a5:4b:c0:07:f6:7d:c5:a4:39:93:93:77:
         b3:da:9b:63:9a:84:e0:7b:23:45:5d:7e:b4:59:2d:83:6f:5d:
         b7:8e:28:80:49:31:2b:00:f3:01:ea:5b:5e:c6:67:9d:09:ce:
         05:61:d1:51:2b:7b:42:d9:72:2d:53:c3:a8:6d:7f:6d:13:3c:
         df:41:c8:e0:75:7a:27:02:0e:2f:91:83:75:55:b2:95:87:3a:
         c1:5e:1a:81:58:eb:f5:62:17:80:b8:57:02:87:f5:f6:8e:38:
         da:63:df:ae:75:9d:9b:6c:bd:eb:fb:6b:00:7c:5f:f9:82:ad:
         8e:c2:40:3b:a7:bd:64:5e:4f:68:92:f9:65:b9:50:84:f2:c7:
         cf:f8:d2:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbaJDvQr1ZPqsZg6Ve1by4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjFkNWIwNmY1NzAxNTU1ZmY1ODg4MTU0ZGQxNDFiNDg4
OTYxMTcwHhcNMjMwMzEzMDg0NDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjJlNWQyZWRjZmY1Mjk1NDNiNjlkMzEzMDA4ZTRjM2NmNDE1MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyK+0Mb67rjR7c9yZhhm4/SHelHc
UIU3seXjWDpUmaMJNHc03pOI9pFcf+ihwO2wOTwtI1Pi1aLz29OJxUtQXBXGTKKv
+yFvPBA1wK9mKZAS4NtoALz4HH4xwI0N6GZWpeDX0KvgVOkw+YU1zL3WQ/OH9qC4
25HWK/t0JxnNDQcU2uicc+mkIy+dtRv2mum7YP9X5Qc+Fv6UcTwOF1LXevBSkOxq
Q3lwl/AYjtqDofzXC2GHbhOB6drX7zw1pRWdyRvsIZdb+EF7dn/rXjMxuoNauvKR
ld64V2xtoVPFCB7eFdzCOqtyj1Mpj8cjq0BRWvRFUFU9Fd3JIXX0sHRZmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYuXS7c/1KVQ7adMTAI5MPPQVGiMB8GA1UdIwQY
MBaAFLnx1bBvVwFVX/WIgVTdFBtIiWEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZIVnNHOVhBVlZmOVlpQlZOMFVHMGlKWVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jYWY1ZWEtNjI2ZS00NTVhLTg3MDgt
ZjVjYThmYTcyNzBkLzEvOWk1ZEx0el9VcFZEdHAweE1Bamt3ODlCVWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jYWY1ZWEtNjI2ZS00NTVhLTg3MDgtZjVjYThmYTcyNzBk
LzEvdWZIVnNHOVhBVlZmOVlpQlZOMFVHMGlKWVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHJeMA0G
CSqGSIb3DQEBCwUAA4IBAQC88hCg0xCmZuEYYk8AuYslIuaC11+SjD/4wunxNBkh
38V9G0lwvhZi2uDba1d3ouFzoXz3mZ2Vt7nAIFRG18sng6rJDC5K2nSWa4FfLY79
DQ70ywGRptvlcAlEBaw8osDWWgrRDBA2gUD9UmzSE0yl9hylS8AH9n3FpDmTk3ez
2ptjmoTgeyNFXX60WS2Db123jiiASTErAPMB6ltexmedCc4FYdFRK3tC2XItU8Oo
bX9tEzzfQcjgdXonAg4vkYN1VbKVhzrBXhqBWOv1YheAuFcCh/X2jjjaY9+udZ2b
bL3r+2sAfF/5gq2OwkA7p71kXk9okvlluVCE8sfP+NLH
-----END CERTIFICATE-----