Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/_1bBBrWvZIMcT5FgmVq83B68jLY.roa
File:                     _1bBBrWvZIMcT5FgmVq83B68jLY.roa (raw, json)
Hash identifier:          S9v1a4c/cEDdn44p3DBjFY7x5acEQfJXPV7d6LAV3TQ=
Subject key identifier:   FF:56:C1:06:B5:AF:64:83:1C:4F:91:60:99:5A:BC:DC:1E:BC:8C:B6
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       0186EEFFCDC18C8C55D15B4CDFB7626F0DA7
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/_1bBBrWvZIMcT5FgmVq83B68jLY.roa
Signing time:             Fri 17 Mar 2023 09:56:27 +0000
ROA not before:           Fri 17 Mar 2023 09:56:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12779
IP address blocks:        86.105.14.0/24 maxlen: 24
                          2a0c:79c0:4::/48 maxlen: 48
                          2a0c:79c0:2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ee:ff:cd:c1:8c:8c:55:d1:5b:4c:df:b7:62:6f:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Mar 17 09:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff56c106b5af64831c4f9160995abcdc1ebc8cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:6e:dc:b7:fd:97:56:c7:48:40:6b:be:ff:
                    8e:c4:d3:f4:cd:4e:3d:e7:b4:52:b2:27:78:16:b9:
                    48:48:52:aa:9b:de:43:44:c5:5d:9b:99:28:f6:40:
                    62:a0:a6:e3:17:c8:37:e9:04:20:fb:0b:82:e5:fc:
                    ee:21:4e:5c:9c:8d:9c:d1:e5:ba:d3:86:29:07:72:
                    b4:54:e0:75:94:3c:52:f8:07:c4:41:08:ab:7e:8d:
                    35:71:ba:09:9c:b7:00:97:28:b4:be:c9:52:44:e5:
                    86:d6:a2:b4:6a:5f:79:e5:28:85:63:8f:36:cb:ca:
                    94:fd:2b:7d:0e:11:85:8c:05:cf:f9:d7:11:29:e5:
                    ac:41:15:38:f6:ba:1a:27:eb:b9:8d:58:e4:cb:0f:
                    52:1f:69:2e:0a:40:78:49:e8:da:d4:c1:20:80:b2:
                    a3:c8:84:a3:b0:8f:86:14:f1:a4:9d:4f:b4:82:f6:
                    20:6b:68:50:0b:e8:61:b6:b1:45:05:fa:59:b7:f6:
                    b8:35:a9:b1:32:c7:2b:44:94:ca:d3:e5:9a:64:6f:
                    5b:b9:32:ff:ff:dd:9c:bb:eb:ab:c8:3e:b2:f3:61:
                    f4:80:f6:15:07:a2:dc:68:b6:8c:ae:b6:53:14:db:
                    e2:75:1b:7c:79:18:6a:c8:19:95:56:2a:df:5b:05:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:C1:06:B5:AF:64:83:1C:4F:91:60:99:5A:BC:DC:1E:BC:8C:B6
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/_1bBBrWvZIMcT5FgmVq83B68jLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.14.0/24
                IPv6:
                  2a0c:79c0:2::/48
                  2a0c:79c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:8b:6b:b8:bc:1b:c5:79:50:e1:28:5d:8b:9f:66:36:2b:
         a4:58:39:63:a7:0c:ab:83:be:40:b8:69:60:d8:7d:e8:6e:e6:
         d2:ce:b8:53:4d:0e:85:bb:c2:75:f7:c4:fe:6f:fc:11:34:19:
         a1:de:a3:02:f9:bf:55:ee:e9:da:d4:e0:9f:3f:54:ab:b8:6e:
         5e:76:da:02:15:5a:c8:7c:69:34:d6:b3:d7:94:24:71:46:96:
         47:67:79:66:82:20:0a:9b:7f:45:c2:6e:63:a4:65:c4:c1:a8:
         88:d0:dd:de:61:0c:e0:38:eb:df:e3:0b:49:3b:84:08:93:64:
         fe:4f:dd:40:62:5e:0a:69:92:d5:34:a7:63:cf:3f:a8:a2:91:
         4d:7f:92:5c:d3:0c:88:12:25:8e:8a:1b:37:1d:25:c1:94:d2:
         b5:d8:14:77:82:9f:bb:f9:b9:75:30:76:33:3a:83:08:0d:ab:
         ab:62:e3:e6:b7:73:6a:97:f9:e8:70:e1:df:dd:a5:ed:67:fd:
         69:c9:4b:76:31:ba:50:ff:4e:2c:46:4b:dd:7b:15:84:cb:a4:
         92:c0:44:28:8b:08:30:19:1e:9f:7d:c5:eb:02:80:50:64:f4:
         59:81:d6:ad:94:12:03:a0:a8:4c:7c:88:32:9b:0e:8d:23:69:
         b9:9f:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----