Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Vy-kQqmvTLyJQyoGoaxcUhsP60U.roa
File:                     Vy-kQqmvTLyJQyoGoaxcUhsP60U.roa (raw, json)
Hash identifier:          76rgMLctFNS8Iggpt+Xb8iowP4uM+zqVbddubTFaNAw=
Subject key identifier:   57:2F:A4:42:A9:AF:4C:BC:89:43:2A:06:A1:AC:5C:52:1B:0F:EB:45
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       0189D5B8FF7BEE32F068C05CAAA5E1AD2AF9
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Vy-kQqmvTLyJQyoGoaxcUhsP60U.roa
Signing time:             Tue 08 Aug 2023 15:16:58 +0000
ROA not before:           Tue 08 Aug 2023 15:16:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8683
IP address blocks:        149.20.108.0/22 maxlen: 22
                          213.248.198.0/23 maxlen: 23
                          213.248.196.0/23 maxlen: 23
                          149.20.96.0/22 maxlen: 22
                          149.20.100.0/22 maxlen: 22
                          149.20.104.0/22 maxlen: 22
                          2a01:61c:2f00::/40 maxlen: 40
                          2a01:61c:2100::/40 maxlen: 40
                          2a01:61c:2000::/40 maxlen: 40
                          2a01:61c:1f00::/40 maxlen: 40
                          2a01:61c:1d00::/40 maxlen: 40
                          2a01:61c:1900::/40 maxlen: 40
                          2a01:61c:1100::/40 maxlen: 40
                          2a01:61c:1000::/40 maxlen: 40
                          2a01:61c:ffff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d5:b8:ff:7b:ee:32:f0:68:c0:5c:aa:a5:e1:ad:2a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Aug  8 15:16:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=572fa442a9af4cbc89432a06a1ac5c521b0feb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:8e:74:48:99:c8:f6:8b:90:28:d7:db:b3:
                    e0:bc:7d:91:b8:1c:b7:27:69:d7:91:6d:fe:85:bc:
                    0e:3e:33:4e:91:f4:a2:8a:44:fa:cf:2a:81:d7:b5:
                    e9:56:30:93:fa:9c:db:25:21:51:7b:41:38:1e:c7:
                    04:45:1b:f9:fb:bb:19:1a:dc:cf:5b:04:fc:cf:98:
                    7d:1f:18:68:28:54:50:7f:dd:4c:39:de:ba:f0:de:
                    7d:be:d6:25:a8:29:b8:a7:53:3e:d8:8e:b7:0f:f7:
                    91:8a:4b:1a:e3:ce:9a:53:51:35:90:ec:96:3c:54:
                    22:5e:59:72:b5:6d:c0:cd:d8:8b:01:bd:56:9a:1e:
                    ac:5f:e3:c1:0a:7e:52:3d:ae:de:7a:7d:bd:fa:59:
                    22:7e:e6:7a:67:84:e3:8f:53:11:de:35:61:77:30:
                    a2:39:37:12:da:6d:fb:d8:35:4b:aa:be:e5:4c:94:
                    68:f2:30:1b:4a:bf:4e:c0:93:7f:80:b3:fe:b8:c2:
                    20:7c:c8:9d:60:6f:d5:d1:e1:8c:e6:28:08:f7:eb:
                    cd:eb:75:50:c4:cb:8a:c1:bd:32:0a:b5:7a:4a:2e:
                    e5:9b:8c:fb:1d:31:a4:c2:3e:6f:3f:88:77:40:e6:
                    7f:9b:be:69:22:28:97:d3:85:fc:de:1e:83:41:25:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:A4:42:A9:AF:4C:BC:89:43:2A:06:A1:AC:5C:52:1B:0F:EB:45
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Vy-kQqmvTLyJQyoGoaxcUhsP60U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.96.0/20
                  213.248.196.0/22
                IPv6:
                  2a01:61c:1000::/39
                  2a01:61c:1900::/40
                  2a01:61c:1d00::/40
                  2a01:61c:1f00::-2a01:61c:21ff:ffff:ffff:ffff:ffff:ffff
                  2a01:61c:2f00::/40
                  2a01:61c:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:67:e4:d0:dc:bf:0c:a1:e6:68:53:23:8d:f3:a8:52:ac:ea:
         38:ad:8a:97:01:61:f9:ec:d9:ef:64:19:50:66:e9:cd:1b:8d:
         d1:0b:0d:b0:82:6b:9a:6a:3b:ee:88:af:8e:4f:65:75:3b:d4:
         3e:96:fe:e3:7b:25:8e:21:4c:86:4a:3a:ea:1d:64:d9:45:1d:
         e6:78:7b:f4:cb:9d:06:dd:be:ec:c0:ae:58:9f:d5:6d:b3:92:
         ec:53:1b:24:0a:ea:54:93:4c:df:ca:e2:b7:63:b1:46:ac:b1:
         36:64:13:af:5c:db:e0:55:90:59:8e:c8:bf:0b:55:3c:0d:42:
         58:1d:64:2d:3d:f7:92:bc:50:26:36:bf:14:ef:b7:07:52:2f:
         23:36:80:59:77:82:1e:a1:31:1b:3b:37:62:cd:5d:09:93:49:
         02:20:10:7c:80:c3:ce:bd:4f:d9:c1:a0:a5:4f:73:0a:7d:e7:
         0a:d4:7a:62:3f:a9:69:67:5a:42:30:26:8c:04:24:2a:b5:77:
         89:82:1d:e9:92:f2:fa:7a:09:87:34:ba:fe:0d:ae:f2:fd:c3:
         7a:66:7b:36:7b:97:b5:9c:3c:d9:5b:87:8e:71:9b:8b:61:32:
         e2:79:9a:70:04:58:88:ec:a7:56:fc:ae:36:be:7c:3f:76:a5:
         0c:f3:19:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYnVuP977jLwaMBcqqXhrSr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwODA4MTUxNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzJmYTQ0MmE5YWY0Y2JjODk0MzJhMDZhMWFjNWM1MjFiMGZlYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGmOdEiZyPaLkCjX27PgvH2RuBy3
J2nXkW3+hbwOPjNOkfSiikT6zyqB17XpVjCT+pzbJSFRe0E4HscERRv5+7sZGtzP
WwT8z5h9HxhoKFRQf91MOd668N59vtYlqCm4p1M+2I63D/eRiksa486aU1E1kOyW
PFQiXllytW3AzdiLAb1Wmh6sX+PBCn5SPa7een29+lkifuZ6Z4Tjj1MR3jVhdzCi
OTcS2m372DVLqr7lTJRo8jAbSr9OwJN/gLP+uMIgfMidYG/V0eGM5igI9+vN63VQ
xMuKwb0yCrV6Si7lm4z7HTGkwj5vP4h3QOZ/m75pIiiX04X83h6DQSUalQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFFcvpEKpr0y8iUMqBqGsXFIbD+tFMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvVnkta1FxbXZUTHlKUXlvR29heGNVaHNQNjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzASBAIAATAMAwQElRRgAwQC
1fjEMEEEAgACMDsDBgEqAQYcEAMGACoBBhwZAwYAKgEGHB0wEAMGACoBBhwfAwYB
KgEGHCADBgAqAQYcLwMHACoBBhz//zANBgkqhkiG9w0BAQsFAAOCAQEAQWfk0Ny/
DKHmaFMjjfOoUqzqOK2KlwFh+ezZ72QZUGbpzRuN0QsNsIJrmmo77oivjk9ldTvU
Ppb+43sljiFMhko66h1k2UUd5nh79MudBt2+7MCuWJ/VbbOS7FMbJArqVJNM38ri
t2OxRqyxNmQTr1zb4FWQWY7IvwtVPA1CWB1kLT33krxQJja/FO+3B1IvIzaAWXeC
HqExGzs3Ys1dCZNJAiAQfIDDzr1P2cGgpU9zCn3nCtR6Yj+paWdaQjAmjAQkKrV3
iYId6ZLy+noJhzS6/g2u8v3DemZ7NnuXtZw82VuHjnGbi2Ey4nmacARYiOynVvyu
Nr58P3alDPMZ+g==
-----END CERTIFICATE-----