Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa
File:                     gioXrWprxR_YCyAU178V-eRqRLs.roa (raw, json)
Hash identifier:          t6Wv1LX3BlPwR6Zas5QTjk1Ypkna1NGYbk/KXyGFl3E=
Subject key identifier:   82:2A:17:AD:6A:6B:C5:1F:D8:0B:20:14:D7:BF:15:F9:E4:6A:44:BB
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       0185821833C07123991B5AEA03A188F41E17
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa
Signing time:             Thu 05 Jan 2023 13:21:42 +0000
ROA not before:           Thu 05 Jan 2023 13:21:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57782
IP address blocks:        185.202.104.0/24 maxlen: 24
                          79.110.168.0/23 maxlen: 24
                          139.28.206.0/24 maxlen: 24
                          2a0d:9cc0::/29 maxlen: 48
                          2a0d:1a45::/32 maxlen: 48
                          2a06:1e83:caff::/48 maxlen: 48
                          2a0d:1a40::/29 maxlen: 48
                          2a06:1e85::/32 maxlen: 48
                          2a06:1e83:cafe::/48 maxlen: 48
                          2a0d:1a40:5500::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:18:33:c0:71:23:99:1b:5a:ea:03:a1:88:f4:1e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan  5 13:21:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=822a17ad6a6bc51fd80b2014d7bf15f9e46a44bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:a9:1c:0e:ce:13:fe:d2:c0:7f:a0:4c:88:
                    f4:53:66:19:49:81:02:33:29:63:3d:0c:c8:e6:78:
                    b7:5f:f9:1f:95:ac:c9:f0:f5:c2:3c:ea:bf:c2:d7:
                    72:46:e8:7d:62:f5:69:ae:52:90:77:69:e4:e0:6d:
                    74:ba:7b:15:7f:0d:a3:85:57:90:96:60:e1:4a:6c:
                    63:d2:65:03:00:81:5c:9c:7f:3e:32:9c:c6:e6:18:
                    06:d5:67:ad:95:bc:2f:03:32:6b:b2:af:18:6b:b7:
                    ed:7e:5e:9a:b9:8c:d1:7d:8a:47:fd:86:fa:55:3e:
                    13:0a:45:83:9b:e4:82:40:f8:ed:58:8b:e9:ae:03:
                    dd:cb:29:d5:fe:b6:38:e6:ec:0b:db:58:c9:08:a2:
                    57:37:58:a4:02:bc:b9:52:7b:e4:c8:56:e2:ef:2d:
                    78:48:d3:b7:9c:c5:09:4f:43:61:95:7c:ad:e2:b5:
                    7a:a9:3b:af:9a:5f:76:8c:d8:84:1c:e9:5b:d8:5d:
                    b7:27:c5:5e:4d:b0:43:0f:c6:1d:11:78:ae:bd:ef:
                    d1:fe:e3:b0:2b:21:9f:5f:cb:71:5f:ea:e5:6f:16:
                    3a:e5:f4:b2:57:9e:52:82:f9:0e:50:97:9e:3e:6a:
                    bd:88:f2:da:e3:4e:a8:bb:e9:53:93:76:68:35:fe:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:17:AD:6A:6B:C5:1F:D8:0B:20:14:D7:BF:15:F9:E4:6A:44:BB
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.168.0/23
                  139.28.206.0/24
                  185.202.104.0/24
                IPv6:
                  2a06:1e83:cafe::/47
                  2a06:1e85::/32
                  2a0d:1a40::/29
                  2a0d:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:78:19:91:45:c8:51:90:7b:63:db:02:ff:eb:1b:78:8e:68:
         cd:d5:d4:c6:75:e7:82:72:df:a8:4d:c5:05:d2:74:8f:1c:26:
         ff:20:ea:4d:64:f2:de:ff:7d:11:fd:57:43:25:5c:10:52:52:
         c1:9b:17:9c:ec:a9:6f:59:25:2f:f0:af:fe:7b:c1:d0:11:21:
         27:de:3c:30:78:20:c7:56:aa:48:12:fe:3a:ca:24:d7:2b:fb:
         ce:bb:6a:71:f3:3c:fd:52:bf:87:2e:b0:f4:2d:4d:bd:9d:7b:
         22:3d:4f:68:58:18:12:d3:17:26:0f:4f:c7:55:de:a8:7a:4e:
         ad:6e:84:09:b4:b7:ab:a9:0d:b7:15:61:39:b2:36:c3:f8:2f:
         04:a9:a7:12:8e:e3:d8:48:ce:d0:50:d2:0e:e2:8c:0f:6e:39:
         f0:54:06:1c:7a:0e:15:fe:18:01:8e:30:63:dc:48:03:10:ea:
         81:ce:b4:b1:7c:c6:2d:f1:48:78:82:6d:39:16:6b:00:f2:47:
         da:68:2f:4e:f4:f2:68:e9:b3:ea:c0:3c:d8:56:34:b8:67:17:
         5b:2c:1e:20:fe:46:43:5e:91:97:8f:12:6e:22:fa:fd:98:8d:
         a9:86:cd:2a:f4:fd:26:18:61:e2:f3:62:8d:ce:38:84:e1:a8:
         9d:38:a3:ba
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYWCGDPAcSOZG1rqA6GI9B4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm
YTYyZDIwHhcNMjMwMTA1MTMyMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjJhMTdhZDZhNmJjNTFmZDgwYjIwMTRkN2JmMTVmOWU0NmE0NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/upHA7OE/7SwH+gTIj0U2YZSYEC
MyljPQzI5ni3X/kflazJ8PXCPOq/wtdyRuh9YvVprlKQd2nk4G10unsVfw2jhVeQ
lmDhSmxj0mUDAIFcnH8+MpzG5hgG1WetlbwvAzJrsq8Ya7ftfl6auYzRfYpH/Yb6
VT4TCkWDm+SCQPjtWIvprgPdyynV/rY45uwL21jJCKJXN1ikAry5UnvkyFbi7y14
SNO3nMUJT0NhlXyt4rV6qTuvml92jNiEHOlb2F23J8VeTbBDD8YdEXiuve/R/uOw
KyGfX8txX+rlbxY65fSyV55SgvkOUJeePmq9iPLa406ou+lTk3ZoNf5U2QIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFIIqF61qa8Uf2AsgFNe/FfnkakS7MB8GA1UdIwQY
MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvZ2lvWHJXcHJ4Ul9ZQ3lBVTE3OFYtZVJxUkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAYBAIAATASAwQBT26oAwQA
ixzOAwQAucpoMCQEAgACMB4DBwEqBh6Dyv4DBQAqBh6FAwUDKg0aQAMFAyoNnMAw
DQYJKoZIhvcNAQELBQADggEBAFd4GZFFyFGQe2PbAv/rG3iOaM3V1MZ154Jy36hN
xQXSdI8cJv8g6k1k8t7/fRH9V0MlXBBSUsGbF5zsqW9ZJS/wr/57wdARISfePDB4
IMdWqkgS/jrKJNcr+867anHzPP1Sv4cusPQtTb2deyI9T2hYGBLTFyYPT8dV3qh6
Tq1uhAm0t6upDbcVYTmyNsP4LwSppxKO49hIztBQ0g7ijA9uOfBUBhx6DhX+GAGO
MGPcSAMQ6oHOtLF8xi3xSHiCbTkWawDyR9poL0708mjps+rAPNhWNLhnF1ssHiD+
RkNekZePEm4i+v2YjamGzSr0/SYYYeLzYo3OOIThqJ04o7o=
-----END CERTIFICATE-----