Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/R4pJCXmDi9yF3lGcfrjd58bPk1o.roa
File:                     R4pJCXmDi9yF3lGcfrjd58bPk1o.roa (raw, json)
Hash identifier:          nV4utd4BmEZ/uc6g8Ih8d0kieJ+TXbUVo1YzHiQE4MU=
Subject key identifier:   47:8A:49:09:79:83:8B:DC:85:DE:51:9C:7E:B8:DD:E7:C6:CF:93:5A
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       01896250D577B98667625C8EB2C9144CE043
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/R4pJCXmDi9yF3lGcfrjd58bPk1o.roa
Signing time:             Mon 17 Jul 2023 05:26:51 +0000
ROA not before:           Mon 17 Jul 2023 05:26:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        82.117.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:50:d5:77:b9:86:67:62:5c:8e:b2:c9:14:4c:e0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Jul 17 05:26:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=478a490979838bdc85de519c7eb8dde7c6cf935a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:68:35:28:fa:a4:67:ab:16:b8:80:3d:af:
                    cc:5c:f3:15:0e:66:be:0f:45:92:d9:f8:6c:94:4d:
                    cf:7b:13:96:0c:06:ca:c8:b4:24:4b:32:b5:dc:a5:
                    ea:9f:03:b2:64:9d:80:f5:9a:87:00:dd:96:55:aa:
                    c7:e4:7a:2d:7d:64:e3:eb:1f:4c:b4:04:00:4d:a3:
                    34:5e:a2:4a:5f:c6:51:09:93:18:59:a9:42:df:ea:
                    f9:28:80:a7:a9:ef:8e:59:a4:79:c4:9d:28:49:a1:
                    aa:de:01:16:a1:55:69:c6:54:e6:01:0f:ef:99:58:
                    a8:6f:d8:61:da:0e:74:2a:8c:fe:6d:ad:c8:7e:be:
                    88:57:83:1c:a3:78:32:c4:72:f6:b6:11:9d:85:ec:
                    45:ba:53:f8:27:62:3d:44:17:8c:3b:1a:22:19:20:
                    b0:60:29:e5:a8:47:62:1e:51:d4:1c:4f:1c:e5:8a:
                    aa:fa:3e:db:fe:66:4e:60:ae:46:de:c3:6f:5f:20:
                    e6:d5:4f:47:2c:5f:70:53:0e:9a:a6:f8:0e:1b:40:
                    4a:7a:c2:b3:24:98:0c:ff:9a:e5:2f:e0:9c:dd:d5:
                    88:bb:e2:88:a8:85:75:77:64:69:26:e6:40:c8:67:
                    fc:14:b3:c9:f4:ed:09:33:11:c8:8e:f8:e1:8b:bd:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:49:09:79:83:8B:DC:85:DE:51:9C:7E:B8:DD:E7:C6:CF:93:5A
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/R4pJCXmDi9yF3lGcfrjd58bPk1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.117.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:97:d8:d9:d4:4f:91:15:dc:3e:0f:33:1c:ff:2d:76:ef:8e:
         3e:59:66:5e:20:38:4f:6b:05:47:72:ce:40:ec:52:6f:69:ad:
         1a:f0:04:82:3b:ef:0b:46:42:f4:15:84:0b:bb:27:6d:b4:7e:
         3a:ff:fd:bb:1d:1d:64:65:0a:a8:22:88:f9:14:e8:c4:07:34:
         13:37:aa:47:57:fa:70:3c:de:8d:96:54:dc:04:bd:28:b0:68:
         67:47:75:a3:e3:96:13:cf:64:86:15:6a:23:ac:b5:46:95:31:
         73:62:44:12:e6:78:b0:83:cd:23:a0:e2:8a:b7:68:a0:e3:e9:
         6d:88:61:01:bb:a8:93:f0:21:a9:e2:03:4a:40:6a:8a:fd:86:
         c6:bd:3c:06:0a:55:3d:a0:36:b4:17:5a:46:2e:fd:8e:87:1e:
         d2:18:95:3e:ef:9b:6e:43:43:bb:d7:af:07:49:3f:0d:3b:3e:
         c4:99:c5:12:09:9e:3a:cb:dd:1d:85:a8:0b:74:e7:14:fd:de:
         95:ba:0e:00:77:ac:e3:47:73:c3:ee:46:ad:24:c1:2c:1c:11:
         9a:f9:0a:09:88:d7:7c:1b:59:f9:b2:41:01:d0:af:03:9e:5a:
         14:f6:b2:05:33:60:5b:10:c7:8e:98:d5:e6:9b:cd:d7:55:b9:
         99:c8:ab:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYliUNV3uYZnYlyOsskUTOBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli
YmIxZTIwHhcNMjMwNzE3MDUyNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzhhNDkwOTc5ODM4YmRjODVkZTUxOWM3ZWI4ZGRlN2M2Y2Y5MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWpoNSj6pGerFriAPa/MXPMVDma+
D0WS2fhslE3PexOWDAbKyLQkSzK13KXqnwOyZJ2A9ZqHAN2WVarH5HotfWTj6x9M
tAQATaM0XqJKX8ZRCZMYWalC3+r5KICnqe+OWaR5xJ0oSaGq3gEWoVVpxlTmAQ/v
mViob9hh2g50Koz+ba3Ifr6IV4Mco3gyxHL2thGdhexFulP4J2I9RBeMOxoiGSCw
YCnlqEdiHlHUHE8c5Yqq+j7b/mZOYK5G3sNvXyDm1U9HLF9wUw6apvgOG0BKesKz
JJgM/5rlL+Cc3dWIu+KIqIV1d2RpJuZAyGf8FLPJ9O0JMxHIjvjhi71a0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeKSQl5g4vchd5RnH643efGz5NaMB8GA1UdIwQY
MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt
ZmI5N2RkZDU0ODkxLzEvUjRwSkNYbURpOXlGM2xHY2ZyamQ1OGJQazFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx
LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUnXmMA0G
CSqGSIb3DQEBCwUAA4IBAQBjl9jZ1E+RFdw+DzMc/y12744+WWZeIDhPawVHcs5A
7FJvaa0a8ASCO+8LRkL0FYQLuydttH46//27HR1kZQqoIoj5FOjEBzQTN6pHV/pw
PN6NllTcBL0osGhnR3Wj45YTz2SGFWojrLVGlTFzYkQS5niwg80joOKKt2ig4+lt
iGEBu6iT8CGp4gNKQGqK/YbGvTwGClU9oDa0F1pGLv2Ohx7SGJU+75tuQ0O7168H
ST8NOz7EmcUSCZ46y90dhagLdOcU/d6Vug4Ad6zjR3PD7katJMEsHBGa+QoJiNd8
G1n5skEB0K8DnloU9rIFM2BbEMeOmNXmm83XVbmZyKsz
-----END CERTIFICATE-----