Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/G4wZqadCAj7jGvBNmsNffr2jlms.roa
File:                     G4wZqadCAj7jGvBNmsNffr2jlms.roa (raw, json)
Hash identifier:          xrfPBz+Pp7lqnOOYPF7+p07AgTSHRn6TSpn/yntrU2M=
Subject key identifier:   1B:8C:19:A9:A7:42:02:3E:E3:1A:F0:4D:9A:C3:5F:7E:BD:A3:96:6B
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       018582183655246C840DFC3F55A1056FFA78
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/G4wZqadCAj7jGvBNmsNffr2jlms.roa
Signing time:             Thu 05 Jan 2023 13:21:42 +0000
ROA not before:           Thu 05 Jan 2023 13:21:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202314
IP address blocks:        139.28.206.0/24 maxlen: 24
                          2a0d:1a45:666::/48 maxlen: 48
                          2a06:1e86::/32 maxlen: 48
                          2a0d:1a41:cafe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:18:36:55:24:6c:84:0d:fc:3f:55:a1:05:6f:fa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan  5 13:21:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b8c19a9a742023ee31af04d9ac35f7ebda3966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:7d:93:4b:c9:46:1c:29:cd:bd:b2:29:52:
                    11:98:65:34:c1:9d:df:f5:cf:86:90:68:93:19:a2:
                    82:d6:ed:f1:33:69:7d:2a:c8:78:67:c7:5d:1f:fb:
                    86:32:d5:7a:96:48:e6:5f:0f:c9:79:34:5f:5d:2c:
                    69:d9:b4:42:5f:bf:89:2e:1f:15:68:56:2c:2f:49:
                    72:5f:ed:10:a7:53:8c:3c:57:c8:66:5e:27:c5:72:
                    38:6b:7d:1e:d3:da:e7:f7:f7:b1:71:be:cc:50:ad:
                    38:5c:6a:ba:ca:ec:77:77:f1:57:fc:6a:66:62:87:
                    7a:a0:11:4b:aa:74:2b:72:c8:4d:a0:66:ae:e6:c6:
                    4c:54:06:5e:be:5f:32:ff:49:03:18:66:39:06:1d:
                    91:1a:8d:f6:fb:e0:56:da:e2:1f:41:74:aa:b5:86:
                    af:05:ed:3a:ff:f9:39:78:a8:34:16:31:66:70:df:
                    ae:ce:a9:bb:dc:2a:f6:c5:d6:23:12:5f:1f:3d:39:
                    49:4f:87:2a:26:52:87:1a:d7:6b:68:6f:c9:00:ec:
                    4f:b7:05:ef:c7:2a:be:0d:64:af:a8:63:f1:5e:0c:
                    26:12:2f:bf:96:4c:ae:e4:e9:86:5f:e9:70:db:8e:
                    85:c2:d5:a6:71:03:22:d7:42:6e:e6:2b:8c:2b:89:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:19:A9:A7:42:02:3E:E3:1A:F0:4D:9A:C3:5F:7E:BD:A3:96:6B
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/G4wZqadCAj7jGvBNmsNffr2jlms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.206.0/24
                IPv6:
                  2a06:1e86::/32
                  2a0d:1a41:cafe::/48
                  2a0d:1a45:666::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c2:a5:37:cd:fd:ad:d9:c6:ea:4f:17:e4:d4:19:66:ac:d1:
         0b:fd:38:2d:32:75:04:1c:e7:ce:82:b0:bc:f8:97:b3:02:91:
         77:92:09:6c:47:c3:d4:aa:37:e8:65:85:05:d8:8d:69:24:b4:
         0c:eb:57:11:6c:c2:3d:66:02:68:2c:75:3b:e9:10:5e:57:d2:
         ed:7e:4d:4f:96:94:ab:c8:e5:24:73:ea:bb:e7:6e:43:01:fa:
         21:26:e6:3c:77:97:17:c1:00:33:c3:16:48:3e:15:6f:90:b5:
         d3:8c:f1:4d:26:2e:f9:5d:69:5d:f4:67:f7:53:0c:14:6e:44:
         84:43:7e:48:eb:63:ed:f7:fb:13:fb:77:9d:44:e6:8e:dc:ba:
         92:bb:c6:c7:e3:cf:e0:bd:25:25:c7:68:56:c5:18:58:09:72:
         b1:a5:14:18:54:62:a8:10:cc:6b:4d:55:ea:7e:91:85:31:35:
         01:8c:f7:b8:23:84:20:9d:da:2f:c9:4d:af:f1:a1:65:cd:ad:
         d9:bb:de:6b:f0:85:ba:f8:82:3e:52:1c:6c:81:6a:bb:cf:6d:
         3a:a8:cf:e8:4c:ef:d8:ea:dd:ad:95:a2:48:7b:18:ed:f4:23:
         56:9f:64:71:1c:69:d0:c2:31:87:4e:a3:6b:11:07:cc:ed:e8:
         6f:7b:13:46
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYWCGDZVJGyEDfw/VaEFb/p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjMwMTA1MTMyMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjhjMTlhOWE3NDIwMjNlZTMxYWYwNGQ5YWMzNWY3ZWJkYTM5NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Td9k0vJRhwpzb2yKVIRmGU0wZ3f
9c+GkGiTGaKC1u3xM2l9Ksh4Z8ddH/uGMtV6lkjmXw/JeTRfXSxp2bRCX7+JLh8V
aFYsL0lyX+0Qp1OMPFfIZl4nxXI4a30e09rn9/excb7MUK04XGq6yux3d/FX/Gpm
Yod6oBFLqnQrcshNoGau5sZMVAZevl8y/0kDGGY5Bh2RGo32++BW2uIfQXSqtYav
Be06//k5eKg0FjFmcN+uzqm73Cr2xdYjEl8fPTlJT4cqJlKHGtdraG/JAOxPtwXv
xyq+DWSvqGPxXgwmEi+/lkyu5OmGX+lw246FwtWmcQMi10Ju5iuMK4nuMQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFBuMGamnQgI+4xrwTZrDX369o5ZrMB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvRzR3WnFhZENBajdqR3ZCTm1zTmZmcjJqbG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQAixzOMB8E
AgACMBkDBQAqBh6GAwcAKg0aQcr+AwcAKg0aRQZmMA0GCSqGSIb3DQEBCwUAA4IB
AQCLwqU3zf2t2cbqTxfk1BlmrNEL/TgtMnUEHOfOgrC8+JezApF3kglsR8PUqjfo
ZYUF2I1pJLQM61cRbMI9ZgJoLHU76RBeV9Ltfk1PlpSryOUkc+q7525DAfohJuY8
d5cXwQAzwxZIPhVvkLXTjPFNJi75XWld9Gf3UwwUbkSEQ35I62Pt9/sT+3edROaO
3LqSu8bH48/gvSUlx2hWxRhYCXKxpRQYVGKoEMxrTVXqfpGFMTUBjPe4I4Qgndov
yU2v8aFlza3Zu95r8IW6+II+UhxsgWq7z206qM/oTO/Y6t2tlaJIexjt9CNWn2Rx
HGnQwjGHTqNrEQfM7ehvexNG
-----END CERTIFICATE-----