Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/lX1jjEc4SCSpreh_s0X-k04dkOU.roa
File:                     lX1jjEc4SCSpreh_s0X-k04dkOU.roa (raw, json)
Hash identifier:          8+FBhmCJdpSL4VJxvfJyi2mKDOABrc93PwmKR1jZ97s=
Subject key identifier:   95:7D:63:8C:47:38:48:24:A9:AD:E8:7F:B3:45:FE:93:4E:1D:90:E5
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       018C434EEC2FD8AC18A0C3FCBC0C37D7D742
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/lX1jjEc4SCSpreh_s0X-k04dkOU.roa
Signing time:             Thu 07 Dec 2023 08:04:54 +0000
ROA not before:           Thu 07 Dec 2023 08:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210008
IP address blocks:        185.230.181.0/24 maxlen: 24
                          185.230.182.0/24 maxlen: 24
                          185.230.183.0/24 maxlen: 24
                          2a13:d00:dc80::/48 maxlen: 48
                          2a13:d00:da80::/48 maxlen: 48
                          2a13:d00:da30::/48 maxlen: 48
                          2a13:d00:c180::/48 maxlen: 48
                          2a13:d00:a680::/48 maxlen: 48
                          2a13:d00:cf01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:4e:ec:2f:d8:ac:18:a0:c3:fc:bc:0c:37:d7:d7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Dec  7 08:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=957d638c47384824a9ade87fb345fe934e1d90e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:aa:08:69:81:39:fb:8c:ac:4b:50:96:99:
                    44:17:c3:32:02:9e:e2:e2:86:1f:97:12:9b:c4:63:
                    20:69:a2:3e:f3:50:16:7e:3a:64:89:9f:65:fc:ca:
                    d1:b6:53:f3:f7:d6:24:6d:f3:9d:19:da:2b:1b:5e:
                    84:ee:23:24:e8:17:5e:91:8b:6b:b2:39:28:22:e9:
                    c9:28:73:ad:ef:90:a0:f6:08:be:db:57:28:fb:da:
                    e9:14:e7:a9:5f:06:5f:de:4f:e6:1e:3d:28:82:a7:
                    e6:ef:d1:53:69:03:2a:4a:85:50:4d:45:cd:b3:e2:
                    60:6a:f1:e2:9b:4c:5c:49:e5:cb:c8:f8:c3:4c:94:
                    72:ee:d7:2c:4e:74:01:75:3b:55:39:9e:bb:95:25:
                    54:ff:7c:74:35:28:49:0d:fe:e9:b9:7b:d6:56:0f:
                    dd:c6:e1:e2:6c:25:3d:cc:d7:91:73:bf:27:48:bb:
                    ee:d9:8d:59:ef:10:f3:af:4e:6d:01:04:e6:60:c1:
                    27:c1:6d:55:5a:bc:f1:ff:de:30:25:94:f5:41:6d:
                    50:ab:7e:a3:25:35:24:0c:18:18:15:08:aa:d6:d7:
                    60:a1:a4:22:8b:d7:34:a9:1c:ba:0a:5f:ee:1d:de:
                    6a:94:4b:2a:56:67:3b:67:27:a8:02:8c:c7:cc:ba:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:63:8C:47:38:48:24:A9:AD:E8:7F:B3:45:FE:93:4E:1D:90:E5
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/lX1jjEc4SCSpreh_s0X-k04dkOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.181.0-185.230.183.255
                IPv6:
                  2a13:d00:a680::/48
                  2a13:d00:c180::/48
                  2a13:d00:cf01::/48
                  2a13:d00:da30::/48
                  2a13:d00:da80::/48
                  2a13:d00:dc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:87:f6:73:ad:a6:79:2c:57:e4:65:a8:4f:16:24:2e:83:73:
         15:99:d9:3a:74:19:28:32:88:ec:76:d9:1d:cd:b4:54:fa:70:
         57:3f:a7:da:d6:06:be:f5:45:d6:3c:43:ff:29:f5:cc:81:86:
         af:03:8d:8c:a4:2e:7f:13:75:00:cf:8f:c2:ea:e4:ba:0d:16:
         d4:ff:81:05:dd:ba:39:f1:e1:4f:23:3f:60:02:64:3f:a0:3b:
         bf:9c:58:a7:b4:0d:9c:81:dd:1c:1a:2f:db:89:6c:79:f6:1d:
         ec:82:6b:52:86:71:ac:9c:b9:89:9d:d7:3a:88:3a:b7:f9:0e:
         aa:c7:1a:00:42:ae:8a:16:1d:7a:ca:c9:34:f5:61:fb:40:62:
         18:50:6d:4a:d7:8f:16:fa:cc:7c:b3:30:86:77:f9:ad:89:91:
         f8:96:dd:91:44:50:a5:8a:e6:9f:d4:5c:b8:86:06:ca:95:c1:
         5f:00:d9:0e:ef:6d:b2:71:68:05:ed:b0:4b:c3:f4:a7:61:00:
         22:c0:78:12:cf:ac:a2:b0:03:47:a9:7c:be:55:ce:db:26:3d:
         0c:35:b3:c2:41:18:6f:3a:ff:e0:79:3b:82:d7:e7:cc:f2:93:
         01:d4:94:06:9f:c4:a2:fe:18:aa:10:61:42:9b:5a:21:6e:c8:
         31:59:1b:76
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYxDTuwv2KwYoMP8vAw319dCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjMxMjA3MDgwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdkNjM4YzQ3Mzg0ODI0YTlhZGU4N2ZiMzQ1ZmU5MzRlMWQ5MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPiqCGmBOfuMrEtQlplEF8MyAp7i
4oYflxKbxGMgaaI+81AWfjpkiZ9l/MrRtlPz99YkbfOdGdorG16E7iMk6BdekYtr
sjkoIunJKHOt75Cg9gi+21co+9rpFOepXwZf3k/mHj0ogqfm79FTaQMqSoVQTUXN
s+JgavHim0xcSeXLyPjDTJRy7tcsTnQBdTtVOZ67lSVU/3x0NShJDf7puXvWVg/d
xuHibCU9zNeRc78nSLvu2Y1Z7xDzr05tAQTmYMEnwW1VWrzx/94wJZT1QW1Qq36j
JTUkDBgYFQiq1tdgoaQii9c0qRy6Cl/uHd5qlEsqVmc7ZyeoAozHzLqZfQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFJV9Y4xHOEgkqa3of7NF/pNOHZDlMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvbFgxampFYzRTQ1NwcmVoX3MwWC1rMDRka09VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDAUBAIAATAOMAwDBAC55rUD
BAO55rAwPAQCAAIwNgMHACoTDQCmgAMHACoTDQDBgAMHACoTDQDPAQMHACoTDQDa
MAMHACoTDQDagAMHACoTDQDcgDANBgkqhkiG9w0BAQsFAAOCAQEAeYf2c62meSxX
5GWoTxYkLoNzFZnZOnQZKDKI7HbZHc20VPpwVz+n2tYGvvVF1jxD/yn1zIGGrwON
jKQufxN1AM+Pwurkug0W1P+BBd26OfHhTyM/YAJkP6A7v5xYp7QNnIHdHBov24ls
efYd7IJrUoZxrJy5iZ3XOog6t/kOqscaAEKuihYdesrJNPVh+0BiGFBtStePFvrM
fLMwhnf5rYmR+JbdkURQpYrmn9RcuIYGypXBXwDZDu9tsnFoBe2wS8P0p2EAIsB4
Es+sorADR6l8vlXO2yY9DDWzwkEYbzr/4Hk7gtfnzPKTAdSUBp/Eov4YqhBhQpta
IW7IMVkbdg==
-----END CERTIFICATE-----