Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/PcEFcyUJLGpAne_gBONGBsUn_zw.roa
File:                     PcEFcyUJLGpAne_gBONGBsUn_zw.roa (raw, json)
Hash identifier:          POJlO7nU8H31TQJ43Rv8PsRDyrtxDKTdi4Tiqz0XiOA=
Subject key identifier:   3D:C1:05:73:25:09:2C:6A:40:9D:EF:E0:04:E3:46:06:C5:27:FF:3C
Certificate issuer:       /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial:       01877554DBABC573AB4687778E25E089B965
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/PcEFcyUJLGpAne_gBONGBsUn_zw.roa
Signing time:             Wed 12 Apr 2023 11:58:28 +0000
ROA not before:           Wed 12 Apr 2023 11:58:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201401
IP address blocks:        45.157.76.0/22 maxlen: 22
                          2a10:c240::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:75:54:db:ab:c5:73:ab:46:87:77:8e:25:e0:89:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
        Validity
            Not Before: Apr 12 11:58:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3dc1057325092c6a409defe004e34606c527ff3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:9f:fd:ce:87:fb:d4:5e:94:1f:8c:a9:b7:
                    31:0e:af:d7:6a:e8:32:5f:02:29:10:32:53:97:7d:
                    e7:a2:2b:b7:33:44:f5:c5:9f:f8:aa:e2:63:d8:ac:
                    5e:2e:82:48:3b:b4:8c:4f:67:a8:c3:f3:0c:53:2d:
                    7f:e5:e5:e1:11:08:07:6d:74:a6:d9:6f:23:b7:3a:
                    4d:51:44:3e:27:cf:13:68:46:6d:1a:56:29:f2:a5:
                    e1:b0:a7:7e:ba:79:49:d6:1e:8f:56:ec:5c:62:a7:
                    af:a4:8f:c3:d0:60:a4:f0:a9:f6:bc:15:6d:b8:9c:
                    dd:76:06:35:c1:49:b1:63:29:64:54:45:92:fb:de:
                    db:2a:fe:07:53:62:59:39:c2:e2:81:84:43:a4:b4:
                    80:03:12:21:32:19:1e:bf:3c:12:bb:fb:c8:a1:74:
                    4f:82:e2:b1:c3:60:d2:a9:7a:f4:c2:09:c5:9b:f2:
                    a0:82:a1:49:19:0e:5b:1c:eb:cc:bb:34:68:9a:bf:
                    fa:0f:f0:b9:36:2a:52:75:94:8a:ad:89:c7:db:43:
                    d3:6c:ab:60:ea:c9:8c:58:4f:9a:9d:07:6e:50:84:
                    be:c4:10:14:1f:39:62:b2:2b:30:70:35:fb:12:10:
                    68:6f:2d:3f:22:68:14:2e:9d:7f:ab:e8:5a:2e:99:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:05:73:25:09:2C:6A:40:9D:EF:E0:04:E3:46:06:C5:27:FF:3C
            X509v3 Authority Key Identifier:
                keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/PcEFcyUJLGpAne_gBONGBsUn_zw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.76.0/22
                IPv6:
                  2a10:c240::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:7e:5b:89:7f:23:38:69:d0:8a:82:dd:95:c9:35:01:cf:f0:
         06:6f:f8:0b:de:52:f2:0f:ae:a5:dd:0d:07:61:6d:07:9a:24:
         08:9e:09:d3:71:a7:f2:7e:39:34:9b:7f:13:ad:46:82:05:23:
         19:42:d2:84:7b:e4:ee:40:1c:f1:44:45:bf:5e:6b:56:3e:99:
         fd:fe:18:10:77:8a:e0:f9:3a:6c:f3:28:1b:88:90:90:88:ff:
         27:12:48:93:50:04:e2:b6:21:d6:54:f2:37:9a:55:30:e2:12:
         84:08:a3:2d:de:28:99:7b:ac:2d:37:2a:11:42:78:9f:25:fb:
         a8:02:0a:23:00:04:e1:4b:5d:83:a5:95:73:1c:3e:2f:cb:ef:
         d7:65:7d:19:27:0f:7a:7d:cc:8e:e2:8f:54:9b:aa:cd:25:e6:
         07:cd:47:e5:78:07:83:4b:a8:c9:e3:5b:d0:44:19:6b:f1:9d:
         f2:de:e9:dd:e0:e5:07:a9:b6:3e:05:31:0c:e8:ce:bd:a5:22:
         6f:a5:dd:b2:53:01:23:d8:a8:7f:03:40:fb:67:20:95:59:8a:
         a8:55:35:7f:ec:72:1c:f2:c5:9d:dc:1f:42:79:34:3c:d6:9d:
         c2:b3:20:43:af:e1:32:a4:dc:48:58:4b:ff:c9:1c:54:b8:d9:
         ab:ee:bf:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYd1VNurxXOrRod3jiXgibllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm
NDI5NzgwHhcNMjMwNDEyMTE1ODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGMxMDU3MzI1MDkyYzZhNDA5ZGVmZTAwNGUzNDYwNmM1MjdmZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQKf/c6H+9RelB+MqbcxDq/Xaugy
XwIpEDJTl33noiu3M0T1xZ/4quJj2KxeLoJIO7SMT2eow/MMUy1/5eXhEQgHbXSm
2W8jtzpNUUQ+J88TaEZtGlYp8qXhsKd+unlJ1h6PVuxcYqevpI/D0GCk8Kn2vBVt
uJzddgY1wUmxYylkVEWS+97bKv4HU2JZOcLigYRDpLSAAxIhMhkevzwSu/vIoXRP
guKxw2DSqXr0wgnFm/KggqFJGQ5bHOvMuzRomr/6D/C5NipSdZSKrYnH20PTbKtg
6smMWE+anQduUIS+xBAUHzlisiswcDX7EhBoby0/ImgULp1/q+haLpnqLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD3BBXMlCSxqQJ3v4ATjRgbFJ/88MB8GA1UdIwQY
MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt
YWYxZTZkMDc3ZTBjLzEvUGNFRmN5VUpMR3BBbmVfZ0JPTkdCc1VuX3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj
LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ1MMA0E
AgACMAcDBQAqEMJAMA0GCSqGSIb3DQEBCwUAA4IBAQAIfluJfyM4adCKgt2VyTUB
z/AGb/gL3lLyD66l3Q0HYW0HmiQIngnTcafyfjk0m38TrUaCBSMZQtKEe+TuQBzx
REW/XmtWPpn9/hgQd4rg+Tps8ygbiJCQiP8nEkiTUATitiHWVPI3mlUw4hKECKMt
3iiZe6wtNyoRQnifJfuoAgojAAThS12DpZVzHD4vy+/XZX0ZJw96fcyO4o9Um6rN
JeYHzUfleAeDS6jJ41vQRBlr8Z3y3und4OUHqbY+BTEM6M69pSJvpd2yUwEj2Kh/
A0D7ZyCVWYqoVTV/7HIc8sWd3B9CeTQ81p3CsyBDr+EypNxIWEv/yRxUuNmr7r+h
-----END CERTIFICATE-----