Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dQ9-m9PVuHPYDsdsNcWI6slajo0.roa
File:                     dQ9-m9PVuHPYDsdsNcWI6slajo0.roa (raw, json)
Hash identifier:          wi2dYMAIUFavISthvXNQ1TNSqxKY7pEOUrFQn/BoDa8=
Subject key identifier:   75:0F:7E:9B:D3:D5:B8:73:D8:0E:C7:6C:35:C5:88:EA:C9:5A:8E:8D
Certificate issuer:       /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial:       0186FE593F7407985E6DB174BE8D3125E9A5
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dQ9-m9PVuHPYDsdsNcWI6slajo0.roa
Signing time:             Mon 20 Mar 2023 09:28:27 +0000
ROA not before:           Mon 20 Mar 2023 09:28:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12586
IP address blocks:        185.186.24.0/24 maxlen: 24
                          2a0b:6c80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fe:59:3f:74:07:98:5e:6d:b1:74:be:8d:31:25:e9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
        Validity
            Not Before: Mar 20 09:28:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=750f7e9bd3d5b873d80ec76c35c588eac95a8e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:45:3f:0e:ce:97:4a:3c:8c:2c:db:c8:83:
                    85:64:e5:a4:cf:3d:32:1d:3e:2f:fb:c3:b2:b6:67:
                    11:c2:bf:66:6d:2c:ac:5c:f5:bc:dc:fe:0e:d1:61:
                    2c:33:72:fa:63:32:85:df:86:57:0d:e9:a3:5c:ea:
                    61:2a:05:bb:26:d7:db:b8:9e:5c:35:cc:78:7c:91:
                    2c:5a:a7:0b:9f:3d:0d:ce:ec:b9:37:e8:5a:07:98:
                    24:ff:9d:fe:c6:d2:4d:bb:d5:dc:f7:66:87:96:0a:
                    5e:41:12:6e:46:ca:5a:e1:0f:e9:d5:d6:a1:88:4d:
                    70:ee:7b:69:a4:4b:c2:2e:c0:e3:c1:9e:c2:94:e2:
                    64:89:f1:7e:82:a4:ed:c3:2b:0f:21:75:7f:06:df:
                    6a:29:31:44:cb:8b:17:3a:91:9f:30:0c:f7:8c:ff:
                    c8:b2:49:fd:84:86:6c:a5:41:37:92:29:cf:4d:12:
                    7c:81:1f:28:b7:91:e6:6a:35:a8:91:9b:a7:82:2b:
                    76:14:2e:28:59:98:0a:c4:e7:ea:fa:cb:44:8e:43:
                    81:3b:8c:13:6b:dc:2b:54:e0:1d:9e:67:a9:a6:f0:
                    af:bd:7c:23:86:f7:dc:98:94:94:5b:ec:12:3c:e0:
                    20:d1:55:bb:79:c4:66:3b:e3:f1:78:df:3f:36:75:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0F:7E:9B:D3:D5:B8:73:D8:0E:C7:6C:35:C5:88:EA:C9:5A:8E:8D
            X509v3 Authority Key Identifier:
                keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dQ9-m9PVuHPYDsdsNcWI6slajo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.24.0/24
                IPv6:
                  2a0b:6c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:c3:b5:97:5f:08:f6:d5:47:cd:ae:00:16:d4:73:f4:1c:
         5a:06:5e:77:e5:39:b6:cf:85:4a:ee:b4:fc:83:a0:1e:52:6e:
         24:ba:6b:94:1e:bc:66:d3:ad:ef:5a:9f:6b:cf:a0:5a:b1:85:
         93:f6:13:cc:58:c5:a6:36:d7:58:c4:c7:4b:2b:77:77:19:a3:
         41:f0:6d:a3:1c:2f:51:0f:38:d1:e0:49:65:ef:ec:76:07:e9:
         65:5b:16:cb:f1:a0:47:de:2d:f7:bf:34:02:58:93:fa:99:a1:
         f2:65:af:3b:1d:32:f9:1c:8a:a7:50:7b:96:cc:71:80:62:b2:
         46:bf:07:a5:c2:a3:b7:d6:34:8c:35:ba:5e:44:cb:6f:4f:53:
         fc:d3:a9:24:92:c8:64:5f:02:91:ac:1b:e9:08:4d:65:e3:fe:
         67:43:26:80:00:ec:1b:e0:40:63:53:9a:68:5c:e5:15:5a:e4:
         dd:4d:f2:eb:3e:fe:9b:3b:77:c2:eb:8c:57:41:3f:0b:00:1f:
         59:00:62:29:a4:4a:25:9c:47:21:1a:fa:7c:40:f0:dc:4d:95:
         e9:06:4b:15:00:89:95:eb:55:4e:8a:e3:43:f4:a1:16:3a:e9:
         c3:49:6f:64:51:e5:6a:7f:d2:48:80:c7:8f:ab:71:55:f1:ea:
         21:11:39:d2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYb+WT90B5hebbF0vo0xJemlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw
YjY1M2UwHhcNMjMwMzIwMDkyODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTBmN2U5YmQzZDViODczZDgwZWM3NmMzNWM1ODhlYWM5NWE4ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2RFPw7Ol0o8jCzbyIOFZOWkzz0y
HT4v+8OytmcRwr9mbSysXPW83P4O0WEsM3L6YzKF34ZXDemjXOphKgW7JtfbuJ5c
Ncx4fJEsWqcLnz0Nzuy5N+haB5gk/53+xtJNu9Xc92aHlgpeQRJuRspa4Q/p1dah
iE1w7ntppEvCLsDjwZ7ClOJkifF+gqTtwysPIXV/Bt9qKTFEy4sXOpGfMAz3jP/I
skn9hIZspUE3kinPTRJ8gR8ot5HmajWokZungit2FC4oWZgKxOfq+stEjkOBO4wT
a9wrVOAdnmeppvCvvXwjhvfcmJSUW+wSPOAg0VW7ecRmO+PxeN8/NnWqiQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHUPfpvT1bhz2A7HbDXFiOrJWo6NMB8GA1UdIwQY
MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt
M2UzNmNhOWEyZDY5LzEvZFE5LW05UFZ1SFBZRHNkc05jV0k2c2xham8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5
LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuboYMA0E
AgACMAcDBQAqC2yAMA0GCSqGSIb3DQEBCwUAA4IBAQCdPsO1l18I9tVHza4AFtRz
9BxaBl535Tm2z4VK7rT8g6AeUm4kumuUHrxm063vWp9rz6BasYWT9hPMWMWmNtdY
xMdLK3d3GaNB8G2jHC9RDzjR4Ell7+x2B+llWxbL8aBH3i33vzQCWJP6maHyZa87
HTL5HIqnUHuWzHGAYrJGvwelwqO31jSMNbpeRMtvT1P806kkkshkXwKRrBvpCE1l
4/5nQyaAAOwb4EBjU5poXOUVWuTdTfLrPv6bO3fC64xXQT8LAB9ZAGIppEolnEch
Gvp8QPDcTZXpBksVAImV61VOiuND9KEWOunDSW9kUeVqf9JIgMePq3FV8eohETnS
-----END CERTIFICATE-----