Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2c46uGHdpHqo8wmUyMtlggIR2yk.roa
File:                     2c46uGHdpHqo8wmUyMtlggIR2yk.roa (raw, json)
Hash identifier:          05NFa3vIRKl8HXki8qhGBphWgCBWqDf+atuHZEBbN/0=
Subject key identifier:   D9:CE:3A:B8:61:DD:A4:7A:A8:F3:09:94:C8:CB:65:82:02:11:DB:29
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018B5BE1A4933D5B23F0EEC6769061B4748B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2c46uGHdpHqo8wmUyMtlggIR2yk.roa
Signing time:             Mon 23 Oct 2023 09:33:16 +0000
ROA not before:           Mon 23 Oct 2023 09:33:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398343
IP address blocks:        194.135.104.0/24 maxlen: 24
                          193.124.15.0/24 maxlen: 24
                          195.133.83.0/24 maxlen: 24
                          193.124.24.0/24 maxlen: 24
                          194.87.123.0/24 maxlen: 24
                          194.58.223.0/24 maxlen: 24
                          194.87.29.0/24 maxlen: 24
                          195.133.21.0/24 maxlen: 24
                          195.133.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:e1:a4:93:3d:5b:23:f0:ee:c6:76:90:61:b4:74:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Oct 23 09:33:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9ce3ab861dda47aa8f30994c8cb65820211db29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e1:7a:f5:6e:46:1f:26:fd:d6:e0:d8:89:41:
                    28:6b:5c:ac:14:a9:7c:b1:f8:7d:dd:5c:56:24:21:
                    2e:3e:39:50:c9:e5:4d:7e:da:3f:63:48:09:d9:5c:
                    36:50:db:75:ca:b5:b7:c5:49:98:ae:a0:70:35:80:
                    5f:32:9b:4f:dd:73:4d:aa:f7:1c:4b:4f:c9:30:bf:
                    9e:59:94:eb:7e:fd:85:0e:04:d8:f0:8d:73:37:c7:
                    16:ff:b4:08:d9:dd:b9:f8:79:8a:30:e8:b5:30:5c:
                    d1:55:a3:19:df:cb:c4:4f:03:95:87:6e:87:b5:1d:
                    fe:55:c3:cf:a6:e5:40:3d:3f:13:fe:e4:d1:48:67:
                    61:0c:dc:18:14:c7:f5:15:4f:e7:05:57:02:aa:82:
                    81:c8:2d:94:f3:1f:51:b2:2c:81:83:25:7f:77:0f:
                    29:46:03:35:97:d6:1c:e1:d1:b1:ed:9d:9a:48:33:
                    fe:51:96:31:df:db:b0:ed:b3:3e:7a:75:e9:9c:7b:
                    99:b8:e0:70:0a:90:eb:66:1b:de:5e:2c:cd:71:46:
                    79:61:a3:5c:0c:0d:ca:1e:b2:39:f4:e9:c8:a5:2d:
                    f1:d7:b3:54:e5:f3:b6:23:b0:16:3a:b9:98:7e:1d:
                    f1:0d:90:3b:9b:09:1e:b5:66:f3:0e:b6:2a:94:5f:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CE:3A:B8:61:DD:A4:7A:A8:F3:09:94:C8:CB:65:82:02:11:DB:29
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2c46uGHdpHqo8wmUyMtlggIR2yk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.15.0/24
                  193.124.24.0/24
                  194.58.223.0/24
                  194.87.29.0/24
                  194.87.123.0/24
                  194.135.104.0/24
                  195.133.21.0/24
                  195.133.26.0/23
                  195.133.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:f1:a1:95:da:17:aa:42:c6:ef:50:bf:f0:2f:cb:27:af:
         97:f3:7d:fe:79:77:d6:4c:9b:9e:bd:04:db:56:56:b6:37:22:
         2e:ae:c7:4c:5f:7f:7f:67:32:2e:e8:87:e0:0f:31:7e:da:f5:
         7c:b8:30:ba:5c:7c:c1:87:fa:e4:30:18:80:fb:fc:96:43:64:
         47:a9:a7:97:2b:6e:73:44:c8:f2:45:32:ec:4a:92:a3:52:7a:
         54:33:43:f6:f3:ff:de:bd:82:5b:ec:43:7c:b2:c1:a2:34:17:
         51:4c:8a:b5:52:14:69:bb:e6:78:37:dd:d8:d1:18:96:39:12:
         7b:7b:89:21:ee:02:90:2d:19:a1:8c:6f:b4:aa:7e:b7:cd:ed:
         81:4a:8d:c0:23:8a:c0:f1:96:f9:12:9d:ff:13:03:53:1f:8f:
         33:af:a5:af:f3:38:3f:bc:b4:76:ec:24:52:f6:fa:1f:89:69:
         10:5c:42:34:ac:35:1f:02:fb:d1:58:24:4d:96:2f:cb:0a:ae:
         f0:68:67:be:8a:37:05:06:f8:aa:f4:bd:bf:dd:b4:c3:17:2e:
         b9:3f:39:0d:d7:2c:64:3a:8c:61:fe:0b:0c:32:91:86:11:aa:
         a3:92:5a:42:fe:5b:67:3d:81:70:bf:d4:3f:25:4b:d2:01:f5:
         fe:c0:a8:a7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYtb4aSTPVsj8O7GdpBhtHSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDIzMDkzMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWNlM2FiODYxZGRhNDdhYThmMzA5OTRjOGNiNjU4MjAyMTFkYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOF69W5GHyb91uDYiUEoa1ysFKl8
sfh93VxWJCEuPjlQyeVNfto/Y0gJ2Vw2UNt1yrW3xUmYrqBwNYBfMptP3XNNqvcc
S0/JML+eWZTrfv2FDgTY8I1zN8cW/7QI2d25+HmKMOi1MFzRVaMZ38vETwOVh26H
tR3+VcPPpuVAPT8T/uTRSGdhDNwYFMf1FU/nBVcCqoKByC2U8x9RsiyBgyV/dw8p
RgM1l9Yc4dGx7Z2aSDP+UZYx39uw7bM+enXpnHuZuOBwCpDrZhveXizNcUZ5YaNc
DA3KHrI59OnIpS3x17NU5fO2I7AWOrmYfh3xDZA7mwketWbzDrYqlF+5LQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNnOOrhh3aR6qPMJlMjLZYICEdspMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMmM0NnVHSGRwSHFvOHdtVXlNdGxnZ0lSMnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwXwPAwQA
wXwYAwQAwjrfAwQAwlcdAwQAwld7AwQAwodoAwQAw4UVAwQBw4UaAwQAw4VTMA0G
CSqGSIb3DQEBCwUAA4IBAQCJOvGhldoXqkLG71C/8C/LJ6+X833+eXfWTJuevQTb
Vla2NyIursdMX39/ZzIu6IfgDzF+2vV8uDC6XHzBh/rkMBiA+/yWQ2RHqaeXK25z
RMjyRTLsSpKjUnpUM0P28//evYJb7EN8ssGiNBdRTIq1UhRpu+Z4N93Y0RiWORJ7
e4kh7gKQLRmhjG+0qn63ze2BSo3AI4rA8Zb5Ep3/EwNTH48zr6Wv8zg/vLR27CRS
9vofiWkQXEI0rDUfAvvRWCRNli/LCq7waGe+ijcFBviq9L2/3bTDFy65PzkN1yxk
Ooxh/gsMMpGGEaqjklpC/ltnPYFwv9Q/JUvSAfX+wKin
-----END CERTIFICATE-----