Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa
File:                     w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa (raw, json)
Hash identifier:          zA8d/EGQLcLNm02F8t9PhobFfS9hHMP3j4UntEvZ6YE=
Subject key identifier:   C3:5B:EC:60:8B:D7:18:11:9A:86:04:3D:9A:DC:68:39:9A:F3:CC:71
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D81E44EBEB0FCD09340E214362BA6E6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa
Signing time:             Sun 01 Jan 2023 13:25:07 +0000
ROA not before:           Sun 01 Jan 2023 13:25:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39368
IP address blocks:        185.218.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:e4:4e:be:b0:fc:d0:93:40:e2:14:36:2b:a6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c35bec608bd718119a86043d9adc68399af3cc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:ff:67:2a:56:07:05:86:e1:8e:ea:42:76:
                    35:2a:da:fc:8c:9a:80:56:6e:ea:3d:b9:0e:c3:19:
                    06:9c:41:27:4e:0d:9e:74:3a:9e:4c:98:7e:08:04:
                    4e:ba:6f:fc:86:07:f3:bc:48:e7:75:10:6f:ce:26:
                    b8:dc:1a:f1:5d:7e:21:ed:c1:22:a7:7a:0c:7e:a5:
                    15:d4:13:50:df:b7:18:fd:d5:c0:7c:85:f7:3b:e6:
                    4d:35:07:e8:f2:0c:35:b0:a8:c7:24:9e:53:a9:4c:
                    b9:84:57:02:b5:ce:64:4a:09:7c:17:2c:23:59:21:
                    c3:ad:1e:6c:3d:e3:d6:db:05:76:7a:52:b0:b9:86:
                    2a:b1:6e:cf:e6:a1:1c:d1:e1:5b:56:4b:d5:6a:37:
                    be:8d:88:99:dd:e3:bb:44:7a:bc:07:c2:9e:de:dd:
                    ea:9c:f6:f0:e2:01:c3:00:a7:b9:90:bc:84:44:0c:
                    af:d7:20:97:22:c1:2c:71:68:9d:c7:18:64:83:23:
                    23:33:79:b8:8a:c8:22:24:1f:6d:b3:b4:af:93:f4:
                    ba:a7:a8:10:1e:2a:37:a0:e5:5b:da:67:17:fa:4f:
                    a0:db:8d:42:bc:61:5e:6e:88:bd:7b:b0:ba:41:6d:
                    fd:7c:9e:e4:da:a4:6c:fa:8b:3b:a0:c8:67:d3:c3:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:EC:60:8B:D7:18:11:9A:86:04:3D:9A:DC:68:39:9A:F3:CC:71
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/w1vsYIvXGBGahgQ9mtxoOZrzzHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:5a:71:d3:9c:66:2c:08:5d:3d:1a:28:25:6e:15:ec:f0:
         a9:55:31:50:d1:d8:90:0b:e6:88:20:88:ef:0c:ad:67:99:a0:
         5d:2c:04:71:fd:ff:0e:8f:3d:af:0d:b6:09:72:18:8f:d2:23:
         39:7d:ab:b3:0b:26:c3:35:cc:71:d9:72:25:2a:fa:4c:5b:59:
         f5:7c:1c:9e:d5:15:1e:36:bf:d3:8e:4a:ee:e3:66:43:0d:5c:
         e9:73:6f:f0:d2:17:ef:ec:77:31:da:4e:67:aa:9d:7d:e1:8c:
         64:dc:12:5c:3b:4e:5e:0d:0d:d9:f6:5c:dd:8c:9e:1a:c0:ea:
         e7:56:a3:06:5d:cf:43:ba:d5:8e:64:5c:d2:a8:41:a8:ec:51:
         d3:90:58:22:fb:60:ed:50:c7:9b:5a:d4:e3:f8:70:4c:cb:41:
         b7:44:b0:a0:91:c8:82:80:85:62:f4:6c:16:56:6a:5e:e6:01:
         ed:3e:1a:6a:d0:e0:2c:b3:43:3f:f3:3f:28:6d:7e:8f:4e:b4:
         6c:01:5c:2e:2c:4a:5f:ee:7b:32:e0:94:6a:1a:4d:f0:1a:6e:
         72:53:c5:50:59:21:af:07:15:ee:69:d5:08:e0:2f:8e:26:94:
         47:d0:cb:19:13:71:18:66:a5:5b:5f:2f:1f:12:57:e9:b7:eb:
         0e:33:3e:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgeROvrD80JNA4hQ2K6bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzViZWM2MDhiZDcxODExOWE4NjA0M2Q5YWRjNjgzOTlhZjNjYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRX/ZypWBwWG4Y7qQnY1Ktr8jJqA
Vm7qPbkOwxkGnEEnTg2edDqeTJh+CAROum/8hgfzvEjndRBvzia43BrxXX4h7cEi
p3oMfqUV1BNQ37cY/dXAfIX3O+ZNNQfo8gw1sKjHJJ5TqUy5hFcCtc5kSgl8Fywj
WSHDrR5sPePW2wV2elKwuYYqsW7P5qEc0eFbVkvVaje+jYiZ3eO7RHq8B8Ke3t3q
nPbw4gHDAKe5kLyERAyv1yCXIsEscWidxxhkgyMjM3m4isgiJB9ts7Svk/S6p6gQ
Hio3oOVb2mcX+k+g241CvGFeboi9e7C6QW39fJ7k2qRs+os7oMhn08MDkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNb7GCL1xgRmoYEPZrcaDma88xxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdzF2c1lJdlhHQkdhaGdROW10eG9PWnJ6ekhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqLMA0G
CSqGSIb3DQEBCwUAA4IBAQCw1Vpx05xmLAhdPRooJW4V7PCpVTFQ0diQC+aIIIjv
DK1nmaBdLARx/f8Ojz2vDbYJchiP0iM5fauzCybDNcxx2XIlKvpMW1n1fBye1RUe
Nr/Tjkru42ZDDVzpc2/w0hfv7Hcx2k5nqp194Yxk3BJcO05eDQ3Z9lzdjJ4awOrn
VqMGXc9DutWOZFzSqEGo7FHTkFgi+2DtUMebWtTj+HBMy0G3RLCgkciCgIVi9GwW
Vmpe5gHtPhpq0OAss0M/8z8obX6PTrRsAVwuLEpf7nsy4JRqGk3wGm5yU8VQWSGv
BxXuadUI4C+OJpRH0MsZE3EYZqVbXy8fElfpt+sOMz5c
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org