Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/4AiA_Vzkn64inHEn4fjXNh-7O48.roa
File:                     4AiA_Vzkn64inHEn4fjXNh-7O48.roa (raw, json)
Hash identifier:          LO3aj+n1eggs+orMy5RbxQgQeTyVarlGAD1pp7Rs7Nw=
Subject key identifier:   E0:08:80:FD:5C:E4:9F:AE:22:9C:71:27:E1:F8:D7:36:1F:BB:3B:8F
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018CB65A92931DD5ADF7F1373578685804E1
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/4AiA_Vzkn64inHEn4fjXNh-7O48.roa
Signing time:             Fri 29 Dec 2023 16:13:58 +0000
ROA not before:           Fri 29 Dec 2023 16:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140::/29 maxlen: 48
                          2a05:4143::/32 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4140:32::/48 maxlen: 48
                          2a11:e102::/32 maxlen: 32
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:30::/48 maxlen: 48
                          2a05:4140:10::/48 maxlen: 48
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48
                          2a05:4140:31::/48 maxlen: 48
                          2a05:4140:4::/48 maxlen: 48
                          2a05:4140:34::/48 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:5::/48 maxlen: 48
                          2a05:4140:15::/48 maxlen: 48
                          2a05:4140:35::/48 maxlen: 64
                          2a05:4140:8::/48 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:33::/48 maxlen: 48
                          2a05:4140:29::/48 maxlen: 48
                          2a05:4140:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b6:5a:92:93:1d:d5:ad:f7:f1:37:35:78:68:58:04:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Dec 29 16:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e00880fd5ce49fae229c7127e1f8d7361fbb3b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:3d:a1:72:62:96:48:72:aa:6e:4d:76:5f:
                    cf:7d:5d:ca:11:65:e9:5b:6b:a7:dd:3c:b8:42:26:
                    91:e4:f9:fb:c8:2e:46:19:c8:f9:57:2b:1c:a8:5e:
                    22:3f:d4:67:99:73:8a:00:65:86:a2:9a:5f:69:e9:
                    49:9e:c9:5d:3f:af:13:5f:06:3d:60:85:33:a6:3c:
                    61:d5:b4:39:a7:8e:eb:cb:bd:0c:09:ab:42:a5:3b:
                    6f:d4:07:59:ee:f9:45:77:d1:f6:54:dc:90:b5:d2:
                    cd:cb:0e:d1:6d:0d:1e:26:74:f9:61:79:c7:07:74:
                    b1:b5:93:ac:33:04:e7:ea:b5:62:0f:3b:9f:4d:6a:
                    95:37:49:e0:7f:1b:88:34:d2:8f:d9:26:6a:e1:b0:
                    b0:48:e1:0a:76:d0:d8:0c:ca:88:d8:fa:0a:47:99:
                    57:7a:14:62:69:93:0d:45:a7:68:24:ef:c4:54:ce:
                    3d:e8:fc:ee:60:35:05:10:6f:64:68:44:d6:3e:5a:
                    a9:91:33:a5:8e:36:69:63:84:60:f3:2e:7a:cf:7c:
                    e1:9e:31:35:38:2f:48:32:45:e8:74:51:be:a5:17:
                    61:e4:59:5a:12:17:e1:6a:55:b9:d2:c6:21:73:27:
                    05:6d:30:9e:5d:3f:47:b4:ad:c5:58:eb:33:36:6b:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:08:80:FD:5C:E4:9F:AE:22:9C:71:27:E1:F8:D7:36:1F:BB:3B:8F
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/4AiA_Vzkn64inHEn4fjXNh-7O48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140::/29
                  2a11:e102::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:eb:c8:cb:7a:ea:62:eb:5c:70:a5:44:9d:aa:4f:d1:61:
         57:0c:f4:af:33:e6:22:56:65:e9:4c:7a:38:95:49:b5:da:b1:
         24:2b:c9:87:1d:3a:24:5d:bb:a7:69:07:e0:d4:4e:65:cd:23:
         bb:bc:0a:d1:16:75:6d:fc:97:dd:8f:b0:c7:21:47:77:3e:f8:
         01:39:00:fc:db:2c:27:f1:12:0d:f2:df:25:17:0b:72:20:66:
         51:66:f1:7e:b5:ed:0f:18:e6:21:fa:c0:14:03:d2:bd:f8:79:
         3a:9e:e3:13:7b:0f:45:6f:75:d1:95:fc:16:03:84:f1:e6:cd:
         84:44:7f:d7:30:a1:b2:5a:18:8d:69:ad:48:8c:6f:d8:71:91:
         1b:86:04:23:7f:d3:da:52:86:df:93:89:ac:00:c5:c9:cc:1f:
         0d:95:77:14:62:aa:27:bc:8e:f0:fb:87:4b:a8:e4:40:d4:5f:
         01:96:d0:6f:dd:ba:6c:46:e3:82:4e:ee:4d:fe:0d:b2:05:d8:
         48:bd:f1:a2:7b:6d:8b:e2:94:19:e8:cb:54:17:d2:cd:c8:62:
         da:c1:70:6f:a4:fd:5f:46:65:66:0c:e1:b7:2b:d3:ae:02:d6:
         d9:86:61:df:c4:57:2b:53:85:d9:23:db:98:74:d0:56:ec:47:
         b4:0b:e8:ef
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYy2WpKTHdWt9/E3NXhoWAThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjMxMjI5MTYxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA4ODBmZDVjZTQ5ZmFlMjI5YzcxMjdlMWY4ZDczNjFmYmIzYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHU9oXJilkhyqm5Ndl/PfV3KEWXp
W2un3Ty4QiaR5Pn7yC5GGcj5VyscqF4iP9RnmXOKAGWGoppfaelJnsldP68TXwY9
YIUzpjxh1bQ5p47ry70MCatCpTtv1AdZ7vlFd9H2VNyQtdLNyw7RbQ0eJnT5YXnH
B3SxtZOsMwTn6rViDzufTWqVN0ngfxuINNKP2SZq4bCwSOEKdtDYDMqI2PoKR5lX
ehRiaZMNRadoJO/EVM496PzuYDUFEG9kaETWPlqpkTOljjZpY4Rg8y56z3zhnjE1
OC9IMkXodFG+pRdh5FlaEhfhalW50sYhcycFbTCeXT9HtK3FWOszNmv2YwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOAIgP1c5J+uIpxxJ+H41zYfuzuPMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvNEFpQV9WemtuNjRpbkhFbjRmalhOaC03TzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgVBQAMF
ACoR4QIwDQYJKoZIhvcNAQELBQADggEBAI1O68jLeupi61xwpUSdqk/RYVcM9K8z
5iJWZelMejiVSbXasSQryYcdOiRdu6dpB+DUTmXNI7u8CtEWdW38l92PsMchR3c+
+AE5APzbLCfxEg3y3yUXC3IgZlFm8X617Q8Y5iH6wBQD0r34eTqe4xN7D0VvddGV
/BYDhPHmzYREf9cwobJaGI1prUiMb9hxkRuGBCN/09pSht+TiawAxcnMHw2VdxRi
qie8jvD7h0uo5EDUXwGW0G/dumxG44JO7k3+DbIF2Ei98aJ7bYvilBnoy1QX0s3I
YtrBcG+k/V9GZWYM4bcr064C1tmGYd/EVytThdkj25h00FbsR7QL6O8=
-----END CERTIFICATE-----