Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa
File:                     VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa (raw, json)
Hash identifier:          xI6AVpm4r98lbQ/pNyQMCAkmhwTlMFBr+/FVQsNEfT8=
Subject key identifier:   56:69:CB:50:86:82:7E:04:98:A1:34:06:43:19:A9:D0:5A:9C:E0:77
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018571C319A3C3B02A183823313AB0FC5F24
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa
Signing time:             Mon 02 Jan 2023 09:14:49 +0000
ROA not before:           Mon 02 Jan 2023 09:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200753
IP address blocks:        185.133.210.0/24 maxlen: 24
                          2a06:e880:c0::/46 maxlen: 48
                          2a06:e880::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:19:a3:c3:b0:2a:18:38:23:31:3a:b0:fc:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 09:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5669cb5086827e0498a134064319a9d05a9ce077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:23:bc:77:bf:28:3d:d2:b5:b5:8f:bb:a2:
                    51:a7:ec:ca:3f:c2:3b:de:f2:46:84:42:ec:8c:52:
                    95:52:97:ff:4f:53:8e:39:51:8a:d5:8c:70:5a:c8:
                    43:bb:de:a8:c0:9d:3e:6c:19:e5:c1:e3:ea:4a:9f:
                    c4:9d:49:ba:90:9b:fd:b3:ae:a4:ba:6c:68:ba:7f:
                    75:ee:53:40:14:31:95:75:dd:90:66:c1:9a:c0:65:
                    73:5e:10:c0:79:5a:de:d1:0f:4e:24:23:ea:8e:1c:
                    ca:e6:cd:71:2a:a8:c7:2c:97:20:ae:0c:97:05:3c:
                    37:11:f0:9d:f9:d9:42:45:12:6d:f3:87:54:17:3e:
                    da:6a:4b:37:e7:29:6d:0e:80:a6:00:bc:3c:ca:45:
                    1e:02:9a:66:f7:90:02:0c:09:5e:39:3b:2b:6a:6a:
                    e2:bb:bc:e7:fe:0f:0b:b1:3c:a9:60:83:f2:ca:6e:
                    c5:9a:d4:1a:6a:77:54:52:d4:f0:34:f7:13:6a:bd:
                    9c:01:e2:ce:f9:b8:ba:6a:82:3e:a6:09:eb:12:39:
                    e4:db:37:db:29:9a:7a:3b:8a:82:3b:4d:b8:b1:16:
                    9b:8c:8a:c8:7a:6f:aa:d6:3b:30:4c:98:a5:ea:18:
                    64:4d:04:38:65:3b:ce:80:45:17:fe:86:26:1a:0e:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:CB:50:86:82:7E:04:98:A1:34:06:43:19:A9:D0:5A:9C:E0:77
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/VmnLUIaCfgSYoTQGQxmp0Fqc4Hc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.210.0/24
                IPv6:
                  2a06:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:b8:5d:7c:dd:b3:b9:ed:62:ea:ee:45:3e:ac:36:00:5f:
         31:60:f6:1d:49:87:cf:6e:db:45:75:42:a7:f1:37:2e:be:3e:
         8c:ed:bb:34:76:5b:6f:e4:ba:50:8c:bd:de:79:01:11:fc:09:
         29:12:6c:d6:d2:56:ce:4b:20:0a:f2:2c:d1:47:72:84:9b:cd:
         3d:b4:a5:3d:55:31:6e:fa:3c:a7:d3:aa:ea:46:a0:59:3d:f8:
         11:6d:5e:e6:d0:9f:35:12:3e:48:11:50:b0:2a:69:55:76:77:
         3a:2b:50:47:cb:f1:4f:3a:56:b3:63:a1:c9:39:d8:f3:30:3e:
         a2:1f:8d:19:64:9d:d6:31:a3:c2:80:b6:45:2a:de:a5:c1:40:
         d6:29:c8:f4:51:0c:7e:1d:96:2e:21:27:4c:2f:e4:67:93:d8:
         7e:cb:f4:34:cb:8e:7a:32:e3:2d:e9:d8:2d:0b:46:06:3a:1d:
         67:5c:1f:a5:df:84:7d:c1:59:58:63:b5:f2:e8:32:34:01:b2:
         a6:cb:9c:cc:b8:7f:ec:2f:d8:69:f1:e8:ab:14:80:d3:d3:bb:
         5c:4a:c9:3b:ce:97:10:f9:bc:4a:84:24:c1:34:f3:be:cd:d3:
         93:ff:b4:73:5d:99:77:81:1a:a7:fa:0a:fb:d6:ed:3d:b9:13:
         a5:df:8d:d9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxwxmjw7AqGDgjMTqw/F8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMwMTAyMDkxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjY5Y2I1MDg2ODI3ZTA0OThhMTM0MDY0MzE5YTlkMDVhOWNlMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxgjvHe/KD3StbWPu6JRp+zKP8I7
3vJGhELsjFKVUpf/T1OOOVGK1YxwWshDu96owJ0+bBnlwePqSp/EnUm6kJv9s66k
umxoun917lNAFDGVdd2QZsGawGVzXhDAeVre0Q9OJCPqjhzK5s1xKqjHLJcgrgyX
BTw3EfCd+dlCRRJt84dUFz7aaks35yltDoCmALw8ykUeAppm95ACDAleOTsramri
u7zn/g8LsTypYIPyym7FmtQaandUUtTwNPcTar2cAeLO+bi6aoI+pgnrEjnk2zfb
KZp6O4qCO024sRabjIrIem+q1jswTJil6hhkTQQ4ZTvOgEUX/oYmGg7CkQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFZpy1CGgn4EmKE0BkMZqdBanOB3MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvVm1uTFVJYUNmZ1NZb1RRR1F4bXAwRnFjNEhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYXSMA0E
AgACMAcDBQAqBuiAMA0GCSqGSIb3DQEBCwUAA4IBAQAeQbhdfN2zue1i6u5FPqw2
AF8xYPYdSYfPbttFdUKn8Tcuvj6M7bs0dltv5LpQjL3eeQER/AkpEmzW0lbOSyAK
8izRR3KEm809tKU9VTFu+jyn06rqRqBZPfgRbV7m0J81Ej5IEVCwKmlVdnc6K1BH
y/FPOlazY6HJOdjzMD6iH40ZZJ3WMaPCgLZFKt6lwUDWKcj0UQx+HZYuISdML+Rn
k9h+y/Q0y456MuMt6dgtC0YGOh1nXB+l34R9wVlYY7Xy6DI0AbKmy5zMuH/sL9hp
8eirFIDT07tcSsk7zpcQ+bxKhCTBNPO+zdOT/7RzXZl3gRqn+gr71u09uROl343Z
-----END CERTIFICATE-----