Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/jIneh-2zJuEoh85Vv1pfJN-3ZPE.roa
File:                     jIneh-2zJuEoh85Vv1pfJN-3ZPE.roa (raw, json)
Hash identifier:          Vf55hw+NHDU8Xo70fjBczxSyBwGW1Rzq9x/VsyZOa8k=
Subject key identifier:   8C:89:DE:87:ED:B3:26:E1:28:87:CE:55:BF:5A:5F:24:DF:B7:64:F1
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01856F1D80AD202D5B3A9138E258446AD7C9
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/jIneh-2zJuEoh85Vv1pfJN-3ZPE.roa
Signing time:             Sun 01 Jan 2023 20:54:42 +0000
ROA not before:           Sun 01 Jan 2023 20:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        195.210.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:80:ad:20:2d:5b:3a:91:38:e2:58:44:6a:d7:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Jan  1 20:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c89de87edb326e12887ce55bf5a5f24dfb764f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:25:72:e6:f2:53:13:03:4f:25:76:15:09:
                    8a:80:fa:13:9e:42:14:af:0a:00:9d:8c:c5:75:01:
                    1b:3e:ad:b4:de:c8:13:70:3e:62:04:c7:29:e3:a5:
                    c5:67:12:92:5e:6e:88:61:17:03:4f:6c:27:c7:6c:
                    71:d0:56:ae:ae:c1:63:26:ca:12:00:72:18:d8:1b:
                    17:d2:0a:cb:e3:61:e4:44:0b:a7:30:80:a4:b9:b7:
                    35:ee:3e:a6:ef:75:47:45:e7:3e:7e:f5:88:ae:82:
                    e0:d2:6e:24:d9:70:f5:7b:c0:e2:9f:d2:ea:05:70:
                    5b:e0:1d:91:e5:e5:20:8f:19:80:09:f1:e2:70:a1:
                    c2:cb:31:ea:72:61:93:69:89:a1:fa:6a:b3:7d:49:
                    47:ab:57:b9:3b:dc:88:f6:b8:20:09:85:32:a7:69:
                    99:4e:92:22:a6:ce:04:f4:bf:1f:46:41:e3:0c:9f:
                    58:c9:0b:1b:46:17:2c:50:2b:6f:fa:b7:47:0f:db:
                    8f:5c:e3:27:96:8e:15:f9:cc:d2:4e:5f:18:bd:ee:
                    b5:54:62:0a:9c:68:bf:d6:e1:c4:ff:39:59:d3:a8:
                    a3:fa:16:ee:0d:ff:01:dd:bf:cc:4a:0f:18:0d:27:
                    90:6e:0d:69:0e:25:df:cf:c8:b7:b2:0d:78:23:5b:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:DE:87:ED:B3:26:E1:28:87:CE:55:BF:5A:5F:24:DF:B7:64:F1
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/jIneh-2zJuEoh85Vv1pfJN-3ZPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.210.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:36:16:5d:90:51:eb:47:6f:f0:25:4c:25:f8:46:83:65:
         0b:e4:70:1d:5c:c9:4e:f5:f5:b2:2a:49:57:7f:cc:c6:db:24:
         23:b8:63:de:41:56:da:c9:24:ed:7d:99:45:61:e6:44:b7:ec:
         91:ab:a7:cd:b0:ea:58:cb:04:12:1a:5e:11:0b:17:77:63:37:
         9d:1b:bf:6b:86:7f:ac:70:3b:4a:c3:0f:6e:81:95:00:4b:9d:
         9c:f3:2e:2a:1b:c1:b4:97:cd:b2:a0:b0:6d:11:9e:86:5d:09:
         a7:3a:c9:2e:3e:7d:d9:60:59:72:3f:e8:3a:dd:6b:d7:1e:94:
         44:01:84:9a:73:6d:d9:2c:cd:66:f2:fc:97:d6:9f:fb:f8:2a:
         4b:71:88:8d:83:b8:7c:96:9f:43:43:a8:a6:e1:60:d0:f0:7c:
         62:50:78:d1:45:d2:11:81:60:8c:2e:e1:d1:7c:4d:5d:c5:63:
         01:7e:e2:38:5e:4f:70:80:0c:03:c1:51:cf:77:7c:16:af:7d:
         5a:a8:b5:29:46:b4:ef:ed:71:ec:85:aa:72:bf:3f:5b:2e:65:
         7f:6a:d2:71:5c:d5:7b:91:2b:f8:4b:bd:4d:db:84:90:ee:4c:
         d4:69:c8:c1:01:d6:e3:1d:d9:4e:90:8c:02:64:1a:2e:9b:52:
         58:1c:8a:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHYCtIC1bOpE44lhEatfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5
ZTBhNTEwHhcNMjMwMTAxMjA1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzg5ZGU4N2VkYjMyNmUxMjg4N2NlNTViZjVhNWYyNGRmYjc2NGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn0lcubyUxMDTyV2FQmKgPoTnkIU
rwoAnYzFdQEbPq203sgTcD5iBMcp46XFZxKSXm6IYRcDT2wnx2xx0FaursFjJsoS
AHIY2BsX0grL42HkRAunMICkubc17j6m73VHRec+fvWIroLg0m4k2XD1e8Din9Lq
BXBb4B2R5eUgjxmACfHicKHCyzHqcmGTaYmh+mqzfUlHq1e5O9yI9rggCYUyp2mZ
TpIips4E9L8fRkHjDJ9YyQsbRhcsUCtv+rdHD9uPXOMnlo4V+czSTl8Yve61VGIK
nGi/1uHE/zlZ06ij+hbuDf8B3b/MSg8YDSeQbg1pDiXfz8i3sg14I1vDNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyJ3oftsybhKIfOVb9aXyTft2TxMB8GA1UdIwQY
MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt
YWYxY2MyMzE3ZTM5LzEvakluZWgtMnpKdUVvaDg1VnYxcGZKTi0zWlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5
LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9JwMA0G
CSqGSIb3DQEBCwUAA4IBAQBaVzYWXZBR60dv8CVMJfhGg2UL5HAdXMlO9fWyKklX
f8zG2yQjuGPeQVbaySTtfZlFYeZEt+yRq6fNsOpYywQSGl4RCxd3YzedG79rhn+s
cDtKww9ugZUAS52c8y4qG8G0l82yoLBtEZ6GXQmnOskuPn3ZYFlyP+g63WvXHpRE
AYSac23ZLM1m8vyX1p/7+CpLcYiNg7h8lp9DQ6im4WDQ8HxiUHjRRdIRgWCMLuHR
fE1dxWMBfuI4Xk9wgAwDwVHPd3wWr31aqLUpRrTv7XHshapyvz9bLmV/atJxXNV7
kSv4S71N24SQ7kzUacjBAdbjHdlOkIwCZBoum1JYHIp8
-----END CERTIFICATE-----