Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/zQLAPM010E3ur869zCZ98uibRIk.roa
File:                     zQLAPM010E3ur869zCZ98uibRIk.roa (raw, json)
Hash identifier:          7ULg/S+vgCReI+22YsOZvlT/d8ccFOixyBqSAdh6fBQ=
Subject key identifier:   CD:02:C0:3C:CD:35:D0:4D:EE:AF:CE:BD:CC:26:7D:F2:E8:9B:44:89
Certificate issuer:       /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial:       0185714C2BA741FD75FFA71163B69B6C9016
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/zQLAPM010E3ur869zCZ98uibRIk.roa
Signing time:             Mon 02 Jan 2023 07:04:55 +0000
ROA not before:           Mon 02 Jan 2023 07:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.186.25.0/24 maxlen: 24
                          2a0b:6c81::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:2b:a7:41:fd:75:ff:a7:11:63:b6:9b:6c:90:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
        Validity
            Not Before: Jan  2 07:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd02c03ccd35d04deeafcebdcc267df2e89b4489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:60:cf:2f:1a:2f:d8:06:53:05:6d:a3:72:
                    8b:8f:25:e1:98:3b:7c:ef:85:58:34:1f:f9:cd:47:
                    46:89:08:3e:9f:cd:3a:01:a0:19:e9:1d:34:ea:e8:
                    9f:c4:c2:66:b0:35:92:c0:3a:bc:b6:d8:67:1d:3d:
                    9f:fe:18:45:e7:82:d1:18:4c:9c:d3:cf:1c:73:74:
                    83:a2:e4:61:fb:4d:f3:66:85:ca:20:db:cf:b3:32:
                    55:0a:c4:7c:c3:e9:c7:cb:72:d3:76:18:1f:70:74:
                    9d:07:dc:35:c2:63:22:f1:0d:d9:a5:8f:a5:92:d1:
                    23:d2:18:21:48:98:b0:81:c8:55:5a:55:68:ea:cb:
                    a6:77:2f:66:7e:e4:92:19:e8:7c:de:1b:cb:2d:f2:
                    c1:eb:ac:3d:15:25:be:5a:30:60:d9:cb:0e:0e:ed:
                    b7:55:bd:14:fb:6e:af:4e:f8:ff:66:3e:2a:fe:4e:
                    4d:ad:80:2c:1e:74:8d:21:2f:84:d9:9b:1a:2d:96:
                    3c:ff:05:18:7e:ed:25:35:74:15:04:65:fd:84:e0:
                    c5:9b:fc:71:e6:7d:44:db:65:ba:9f:48:31:95:81:
                    93:27:00:c7:6e:88:e4:12:98:0f:4a:1d:b5:e7:dc:
                    52:44:c0:5e:7e:1f:9d:5a:a8:d9:ed:b0:43:a1:ff:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:C0:3C:CD:35:D0:4D:EE:AF:CE:BD:CC:26:7D:F2:E8:9B:44:89
            X509v3 Authority Key Identifier:
                keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/zQLAPM010E3ur869zCZ98uibRIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.25.0/24
                IPv6:
                  2a0b:6c81::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:92:6a:0c:b1:f7:62:af:e5:1e:3d:48:05:3e:c5:11:a4:82:
         9d:af:f5:e7:d1:a5:3e:8f:b0:fd:aa:68:7b:d9:c5:9f:8c:66:
         0a:b6:2c:95:4c:e0:43:3a:6e:65:d1:bc:df:22:74:08:10:e8:
         81:bb:43:d4:80:6d:09:2c:50:a6:96:71:b7:03:b6:9d:fc:6f:
         df:06:b5:01:37:73:b6:a9:07:51:17:78:8e:5e:b8:ee:96:8e:
         27:58:ce:8a:24:dc:2b:eb:41:9c:81:56:ff:01:ab:3d:8d:3c:
         76:9e:09:97:73:80:51:98:fc:19:80:c5:5c:79:89:c5:bb:79:
         61:91:9d:04:74:3d:f6:ad:85:fd:05:e5:62:ed:2e:9d:7b:97:
         00:0c:7d:e2:32:f4:25:35:27:ec:c0:13:b1:2e:fc:24:37:c6:
         91:ae:bd:12:af:92:8d:8f:ce:4b:5d:da:88:23:47:f3:79:e9:
         cc:b5:a1:70:88:2e:2e:05:74:1d:4c:e0:97:e3:31:4c:fc:bf:
         33:2e:85:70:55:e6:ff:b4:58:33:98:f8:09:18:0d:c6:ea:5a:
         b3:2d:57:52:f2:e6:17:93:59:bb:d1:25:f1:6c:80:60:ff:b2:
         76:41:14:38:92:fc:99:01:15:d4:57:88:30:b4:a4:26:03:56:
         1e:27:4f:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxTCunQf11/6cRY7abbJAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw
YjY1M2UwHhcNMjMwMTAyMDcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDAyYzAzY2NkMzVkMDRkZWVhZmNlYmRjYzI2N2RmMmU4OWI0NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJgzy8aL9gGUwVto3KLjyXhmDt8
74VYNB/5zUdGiQg+n806AaAZ6R006uifxMJmsDWSwDq8tthnHT2f/hhF54LRGEyc
088cc3SDouRh+03zZoXKINvPszJVCsR8w+nHy3LTdhgfcHSdB9w1wmMi8Q3ZpY+l
ktEj0hghSJiwgchVWlVo6sumdy9mfuSSGeh83hvLLfLB66w9FSW+WjBg2csODu23
Vb0U+26vTvj/Zj4q/k5NrYAsHnSNIS+E2ZsaLZY8/wUYfu0lNXQVBGX9hODFm/xx
5n1E22W6n0gxlYGTJwDHbojkEpgPSh2159xSRMBefh+dWqjZ7bBDof/g5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM0CwDzNNdBN7q/OvcwmffLom0SJMB8GA1UdIwQY
MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt
M2UzNmNhOWEyZDY5LzEvelFMQVBNMDEwRTN1cjg2OXpDWjk4dWliUklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5
LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuboZMA0E
AgACMAcDBQAqC2yBMA0GCSqGSIb3DQEBCwUAA4IBAQCQkmoMsfdir+UePUgFPsUR
pIKdr/Xn0aU+j7D9qmh72cWfjGYKtiyVTOBDOm5l0bzfInQIEOiBu0PUgG0JLFCm
lnG3A7ad/G/fBrUBN3O2qQdRF3iOXrjulo4nWM6KJNwr60GcgVb/Aas9jTx2ngmX
c4BRmPwZgMVceYnFu3lhkZ0EdD32rYX9BeVi7S6de5cADH3iMvQlNSfswBOxLvwk
N8aRrr0Sr5KNj85LXdqII0fzeenMtaFwiC4uBXQdTOCX4zFM/L8zLoVwVeb/tFgz
mPgJGA3G6lqzLVdS8uYXk1m70SXxbIBg/7J2QRQ4kvyZARXUV4gwtKQmA1YeJ0/C
-----END CERTIFICATE-----