Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RDcmN2m4XpV1EYTJt7oIoWbUM_4.roa
File:                     RDcmN2m4XpV1EYTJt7oIoWbUM_4.roa (raw, json)
Hash identifier:          AcWLeo+DiWXR8QXAfA9F3oNs2avO3A5UE4E3o+8Udoo=
Subject key identifier:   44:37:26:37:69:B8:5E:95:75:11:84:C9:B7:BA:08:A1:66:D4:33:FE
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0187D3787D867D763955857B431F8809AB9C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RDcmN2m4XpV1EYTJt7oIoWbUM_4.roa
Signing time:             Sun 30 Apr 2023 18:41:41 +0000
ROA not before:           Sun 30 Apr 2023 18:41:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205774
IP address blocks:        194.87.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d3:78:7d:86:7d:76:39:55:85:7b:43:1f:88:09:ab:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Apr 30 18:41:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4437263769b85e95751184c9b7ba08a166d433fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:f6:d4:2e:d1:11:61:84:3c:67:94:21:2c:
                    f7:ad:c2:d9:cb:3c:61:31:14:4c:46:08:64:c1:5a:
                    3b:c9:75:e9:06:0c:1a:19:08:a1:a2:d6:7d:ca:04:
                    0a:25:6c:87:6e:4f:51:d7:3a:f9:99:9c:52:4c:c2:
                    bf:48:fa:1f:fa:31:2b:71:aa:28:66:07:07:1b:d6:
                    b9:98:30:e2:c9:5f:4d:94:32:60:3e:25:9e:61:18:
                    53:10:5d:c0:6c:47:ec:91:0b:37:ad:45:28:02:69:
                    f7:53:da:1d:05:6c:e1:33:29:e7:33:f8:d6:a0:00:
                    2a:a7:a5:81:83:2c:3d:48:ef:4e:4f:aa:85:16:78:
                    c8:55:d6:46:36:33:df:e0:9e:27:92:a4:76:b3:5f:
                    70:eb:2e:96:7d:13:dc:81:53:e2:f5:d2:8c:54:c9:
                    4b:81:8c:bd:6f:2d:47:43:7a:f8:6b:98:c4:71:e2:
                    46:7e:67:04:38:9f:6e:0b:d2:21:e2:04:11:1c:b5:
                    7b:5b:81:45:0e:8c:15:3f:93:27:c1:96:49:d1:f2:
                    17:62:e1:4a:a0:e6:80:5a:7a:60:e8:b0:e0:99:01:
                    fc:dc:3e:80:95:dc:c9:f8:9f:88:dd:a8:f5:d0:a6:
                    6c:87:be:1c:d4:bd:98:4c:f0:27:35:95:98:c0:1b:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:26:37:69:B8:5E:95:75:11:84:C9:B7:BA:08:A1:66:D4:33:FE
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RDcmN2m4XpV1EYTJt7oIoWbUM_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:83:ab:f0:31:71:21:34:99:05:52:d5:6e:85:3c:19:7b:15:
         41:f4:76:29:dc:6c:5a:6b:65:7a:f8:cd:6c:d1:bb:32:0b:9d:
         2f:c4:6b:ab:f7:74:38:84:f4:09:5a:91:e7:24:fd:97:71:f3:
         a4:f0:f4:fd:54:cd:12:0f:c9:0e:3c:5c:26:9d:a8:38:05:b5:
         5b:8b:c0:54:d8:9d:da:f5:ef:12:57:74:08:3e:b7:fc:e4:61:
         0c:e3:a2:15:18:10:39:05:e8:83:17:26:68:0f:72:28:3a:fb:
         c6:bc:a3:8b:ec:2b:e9:14:d6:4b:68:e6:7b:be:97:49:3e:5c:
         de:af:59:4b:d6:ed:3a:1c:c1:c4:6c:60:56:48:41:a7:52:a3:
         5c:e9:88:b6:d1:47:ed:31:1a:bf:d5:8f:a6:44:02:92:4d:41:
         ab:7a:3c:73:9c:ff:46:c8:e3:f9:b9:ec:43:1c:60:59:db:57:
         79:fd:00:52:dc:4c:be:20:80:eb:cd:2f:d2:8b:c2:aa:b6:83:
         1b:94:5c:f0:52:9d:93:47:b7:28:fb:09:eb:bb:d6:ec:bb:26:
         c7:94:07:4f:1a:57:4c:c2:6f:78:bc:83:f1:f6:17:90:ab:7e:
         92:81:7e:3e:14:a2:1b:2d:8c:63:d7:2d:1b:05:e8:b6:8b:fc:
         3e:46:8d:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfTeH2GfXY5VYV7Qx+ICaucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDMwMTg0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDM3MjYzNzY5Yjg1ZTk1NzUxMTg0YzliN2JhMDhhMTY2ZDQzM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivn21C7REWGEPGeUISz3rcLZyzxh
MRRMRghkwVo7yXXpBgwaGQihotZ9ygQKJWyHbk9R1zr5mZxSTMK/SPof+jErcaoo
ZgcHG9a5mDDiyV9NlDJgPiWeYRhTEF3AbEfskQs3rUUoAmn3U9odBWzhMynnM/jW
oAAqp6WBgyw9SO9OT6qFFnjIVdZGNjPf4J4nkqR2s19w6y6WfRPcgVPi9dKMVMlL
gYy9by1HQ3r4a5jEceJGfmcEOJ9uC9Ih4gQRHLV7W4FFDowVP5MnwZZJ0fIXYuFK
oOaAWnpg6LDgmQH83D6AldzJ+J+I3aj10KZsh74c1L2YTPAnNZWYwBtJeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQ3JjdpuF6VdRGEybe6CKFm1DP+MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUkRjbU4ybTRYcFYxRVlUSnQ3b0lvV2JVTV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleyMA0G
CSqGSIb3DQEBCwUAA4IBAQCBg6vwMXEhNJkFUtVuhTwZexVB9HYp3Gxaa2V6+M1s
0bsyC50vxGur93Q4hPQJWpHnJP2XcfOk8PT9VM0SD8kOPFwmnag4BbVbi8BU2J3a
9e8SV3QIPrf85GEM46IVGBA5BeiDFyZoD3IoOvvGvKOL7CvpFNZLaOZ7vpdJPlze
r1lL1u06HMHEbGBWSEGnUqNc6Yi20UftMRq/1Y+mRAKSTUGrejxznP9GyOP5uexD
HGBZ21d5/QBS3Ey+IIDrzS/Si8KqtoMblFzwUp2TR7co+wnru9bsuybHlAdPGldM
wm94vIPx9heQq36SgX4+FKIbLYxj1y0bBei2i/w+Ro3z
-----END CERTIFICATE-----