Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/wW2-6MQnY4K2Iaf85r0k_zXXmp8.roa
File:                     wW2-6MQnY4K2Iaf85r0k_zXXmp8.roa (raw, json)
Hash identifier:          yCrPmM2DTUs5BRZLTGxUw1wx/4Qhb2fXqCQFC21PGsU=
Subject key identifier:   C1:6D:BE:E8:C4:27:63:82:B6:21:A7:FC:E6:BD:24:FF:35:D7:9A:9F
Certificate issuer:       /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial:       01856C0A3118DC79618468CF2D3B01507520
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/wW2-6MQnY4K2Iaf85r0k_zXXmp8.roa
Signing time:             Sun 01 Jan 2023 06:34:45 +0000
ROA not before:           Sun 01 Jan 2023 06:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208309
IP address blocks:        91.231.34.0/24 maxlen: 24
                          2a12:88c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:0a:31:18:dc:79:61:84:68:cf:2d:3b:01:50:75:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
        Validity
            Not Before: Jan  1 06:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c16dbee8c4276382b621a7fce6bd24ff35d79a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:65:37:a8:eb:0b:ef:e9:12:ce:91:c3:f5:
                    df:9a:87:6a:99:2e:51:ca:9c:ba:86:0b:c7:23:85:
                    ed:0d:ea:48:6e:7f:93:3a:df:77:c9:9e:59:08:55:
                    93:2e:39:72:af:e7:24:00:4e:0a:01:78:28:30:95:
                    ae:9f:6f:49:e6:1c:65:23:b9:ee:ba:fb:71:9c:1f:
                    ad:c1:4e:9e:ae:85:a7:0d:08:b4:59:94:9c:5d:bd:
                    71:5b:49:b6:5e:49:5c:e5:c0:e8:34:98:b4:7f:e6:
                    66:4b:f4:d7:e3:4e:1a:15:5d:6c:8a:84:1c:52:8e:
                    bb:f4:09:07:69:d5:45:90:3b:b7:c9:21:4a:a1:d8:
                    9b:3e:83:a5:c6:fd:d1:57:bc:f9:0f:98:c3:19:e7:
                    05:ff:5e:e0:2f:16:8f:98:1e:47:59:5b:0b:56:29:
                    9d:2a:cd:35:6e:d2:91:2d:ae:cc:26:0a:fe:dd:e1:
                    ee:73:ec:5f:9f:be:4c:e1:17:5d:da:eb:28:08:6a:
                    b4:80:f6:dd:ac:46:8c:30:15:f9:76:1d:d1:30:38:
                    87:88:c5:8c:fb:1b:6e:bf:0d:61:3d:6e:b5:8b:bb:
                    fa:c2:14:47:68:5d:c9:fc:07:1f:cf:c5:bd:33:33:
                    a1:a7:14:7d:dd:51:bf:73:bd:96:ca:5d:24:2d:81:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:BE:E8:C4:27:63:82:B6:21:A7:FC:E6:BD:24:FF:35:D7:9A:9F
            X509v3 Authority Key Identifier:
                keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/wW2-6MQnY4K2Iaf85r0k_zXXmp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.34.0/24
                IPv6:
                  2a12:88c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:ef:ca:2d:44:9a:68:26:97:7b:b2:2c:a5:44:ef:e4:11:
         f8:e1:31:e3:8d:e3:83:46:79:da:fe:6f:84:65:7d:d0:9d:15:
         6f:66:03:f4:2d:6d:53:e4:4e:f1:62:b0:4c:44:e3:1f:8e:eb:
         f3:e5:2a:04:e7:36:58:1b:32:ca:bf:51:84:88:82:bc:ec:e8:
         c4:f5:80:69:15:c9:57:49:39:d1:b3:83:eb:f8:20:89:80:85:
         a4:1b:c4:62:76:b3:a6:df:11:e4:58:06:28:a2:55:9b:84:44:
         e3:40:35:f2:1a:26:9f:9f:f6:58:90:78:a0:82:49:3a:a4:9e:
         dc:2f:e9:f9:ec:e9:6e:9a:57:e1:e6:98:88:ea:8e:c0:85:01:
         91:c0:b4:7f:c1:e8:b4:02:a3:d3:12:ec:ca:f4:8f:4f:53:4e:
         fb:61:40:36:36:a4:5b:92:5a:38:6c:b5:84:37:c3:10:b0:3a:
         73:cd:68:bb:d3:4d:61:e7:72:89:02:5d:f3:36:24:8f:d1:1e:
         0f:34:79:f9:51:6f:72:d4:7d:ac:06:8d:cd:6f:53:97:04:b7:
         51:02:68:ce:53:09:a4:a5:15:b6:12:93:8a:d2:57:c1:a3:2a:
         bc:4d:a8:f5:b4:4f:67:54:31:15:cd:c5:70:d1:0b:0e:11:20:
         3d:bf:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----