Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa
File:                     bgISQnS_iog7XMQRA1qe1LXMNuE.roa (raw, json)
Hash identifier:          HrMPqVzqlae84u9QjiwFY4n40fyPh4JgscrJBQoMYAI=
Subject key identifier:   6E:02:12:42:74:BF:8A:88:3B:5C:C4:11:03:5A:9E:D4:B5:CC:36:E1
Certificate issuer:       /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial:       01857246B150DF320B139C95A0D9FB50C025
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa
Signing time:             Mon 02 Jan 2023 11:38:33 +0000
ROA not before:           Mon 02 Jan 2023 11:38:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60472
IP address blocks:        185.128.11.0/24 maxlen: 24
                          2a0f:5ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:b1:50:df:32:0b:13:9c:95:a0:d9:fb:50:c0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
        Validity
            Not Before: Jan  2 11:38:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e02124274bf8a883b5cc411035a9ed4b5cc36e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:24:34:50:29:6f:21:52:25:02:5f:aa:49:
                    e1:24:94:89:b4:e3:56:9d:a5:6d:a3:74:29:0c:31:
                    21:00:92:fb:4a:15:ed:bd:45:1f:04:26:40:14:d0:
                    fa:00:9d:0c:31:9e:96:70:fc:87:02:06:32:1a:69:
                    78:9d:ef:ca:94:19:79:c7:da:4a:64:ea:69:e4:5f:
                    28:ca:b6:6a:2c:e6:a3:c5:c7:e5:89:fa:d2:2c:19:
                    35:9a:94:dd:6b:0b:26:7b:8c:1f:71:fd:c7:f3:52:
                    d2:22:1a:bc:98:db:39:e3:ab:d2:8d:bd:75:bf:01:
                    91:16:c3:97:1a:8e:98:20:12:27:d7:fb:17:0e:9b:
                    16:70:46:54:67:e7:99:dc:68:17:9e:63:7c:61:b4:
                    23:c1:bb:28:b6:0e:de:7e:17:57:21:90:41:76:c0:
                    e9:d9:9e:f7:c7:d9:8e:cf:52:6e:be:ce:a2:e9:4a:
                    de:6e:1c:15:ec:2a:f3:f8:26:18:e3:31:84:5d:0a:
                    77:cb:d2:ea:90:38:2a:1a:d3:5e:d7:16:4f:4e:4e:
                    ba:0d:b5:e8:0c:17:b7:7c:fb:00:f6:43:1b:fa:91:
                    9f:3d:60:dd:53:bd:1e:d8:b7:a9:00:a0:dd:d2:1d:
                    bb:77:30:35:6e:9f:68:ea:a3:e6:1b:88:93:47:47:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:02:12:42:74:BF:8A:88:3B:5C:C4:11:03:5A:9E:D4:B5:CC:36:E1
            X509v3 Authority Key Identifier:
                keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/bgISQnS_iog7XMQRA1qe1LXMNuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.11.0/24
                IPv6:
                  2a0f:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:54:00:d3:4e:fa:fd:43:9f:c0:e2:c9:f4:45:56:94:d1:
         c1:1e:2d:79:60:29:35:e0:e6:f9:c8:c9:a4:48:24:41:c2:83:
         cf:13:a0:e0:6f:ec:f2:56:0a:33:03:ac:ad:48:0b:74:09:00:
         b3:bb:4f:e0:ec:d0:c0:33:f5:0d:6c:63:a9:3f:6a:2a:55:80:
         c3:1f:ad:f2:a2:72:08:93:c7:c8:db:5a:07:70:30:b8:4e:fb:
         55:88:6a:32:5a:4c:ce:f4:79:cb:d3:49:b7:e1:8e:11:2f:1a:
         e4:59:c1:2b:68:aa:bc:e9:b7:97:38:cc:38:40:b6:73:22:b9:
         3e:59:67:ba:d7:89:ec:3e:7b:b3:7c:ca:b0:2e:fd:7a:9d:45:
         28:28:9d:5c:35:c7:db:55:ee:83:d9:8a:70:0d:9c:e2:63:56:
         f4:d5:55:e7:06:15:1c:45:c3:fc:d9:3c:a7:75:16:e9:e2:11:
         04:e8:65:14:c7:f3:88:79:a1:6c:18:fe:4e:4a:03:37:d5:77:
         9b:88:04:e3:62:ba:2b:37:32:f0:07:58:bf:1d:ab:8f:36:75:
         38:07:98:92:93:45:e6:3d:7d:0d:7d:33:bd:82:56:d4:89:cb:
         fb:10:f3:31:cb:84:03:68:df:7f:37:b2:c6:e9:3c:06:45:10:
         c4:1c:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----