Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa
File:                     lwlEWpylCaqoBCerwjTIGBgALeI.roa (raw, json)
Hash identifier:          6ajv1EEYIlbm8gc8/VFgLwtB5KRKZjnPzTSoNS1GDJo=
Subject key identifier:   97:09:44:5A:9C:A5:09:AA:A8:04:27:AB:C2:34:C8:18:18:00:2D:E2
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       018AD2227216B92D0A648F8E968C5989A095
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa
Signing time:             Tue 26 Sep 2023 15:36:27 +0000
ROA not before:           Tue 26 Sep 2023 15:36:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137502
IP address blocks:        213.248.219.0/24 maxlen: 24
                          213.248.218.0/24 maxlen: 24
                          213.248.254.0/24 maxlen: 24
                          213.248.255.0/24 maxlen: 24
                          2a01:618:407::/48 maxlen: 48
                          2a01:618:402::/48 maxlen: 48
                          2a01:618:405::/48 maxlen: 48
                          2a01:618:400::/48 maxlen: 48
                          2a01:618:403::/48 maxlen: 48
                          2a01:618:406::/48 maxlen: 48
                          2a01:618:401::/48 maxlen: 48
                          2a01:618:404::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d2:22:72:16:b9:2d:0a:64:8f:8e:96:8c:59:89:a0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep 26 15:36:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9709445a9ca509aaa80427abc234c81818002de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:69:95:f9:a9:1e:b6:db:bc:57:76:1d:4c:
                    bb:7e:15:6e:d9:41:18:0f:a7:35:6b:5b:b1:2b:25:
                    e7:25:8f:63:73:9a:cb:69:86:48:68:17:0f:52:bd:
                    ee:a5:13:4f:48:55:25:15:60:0b:59:45:14:1f:77:
                    bc:25:a0:49:7c:10:98:4c:e9:f7:3d:e5:ce:7f:7a:
                    de:23:d0:e1:b2:3a:7b:9a:78:40:fd:74:2e:f8:04:
                    1c:9e:8e:41:fc:87:35:3f:32:e5:25:f3:dc:50:83:
                    53:ba:38:de:32:5f:9f:c3:9b:16:df:3d:8e:2b:0e:
                    7a:ee:94:25:03:14:59:f2:d6:cc:73:2e:c6:67:7e:
                    4c:1b:f2:4b:22:9c:ad:95:8a:c3:15:15:ba:e3:93:
                    00:b1:fc:0a:fa:f0:9f:4f:95:b2:c9:a5:25:28:9c:
                    63:4d:3b:f9:50:38:95:53:27:2d:a1:dc:89:86:7d:
                    5f:50:8a:e7:62:53:01:e4:d7:95:76:5d:98:b9:52:
                    db:ba:47:d1:95:9d:b3:48:f0:79:7b:03:e6:82:ae:
                    5e:92:2d:1f:5a:77:89:3a:19:aa:ab:04:fb:e1:38:
                    49:3a:67:07:78:cb:16:ad:c5:7d:37:f8:92:0f:f6:
                    2b:09:72:3b:cc:3a:af:28:24:7e:9b:63:e2:2b:44:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:09:44:5A:9C:A5:09:AA:A8:04:27:AB:C2:34:C8:18:18:00:2D:E2
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.248.218.0/23
                  213.248.254.0/23
                IPv6:
                  2a01:618:400::/45

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:90:0b:73:ef:a0:65:ee:c3:aa:2c:9c:06:fe:40:8c:88:
         9a:b2:ba:29:fc:ba:ad:69:9f:39:6c:a8:cb:48:d8:f6:b9:4a:
         45:d6:29:77:1f:82:0b:3f:58:cf:98:62:27:a7:da:c1:c2:ad:
         22:05:fc:a8:8b:42:ee:ac:5d:87:1d:e6:5d:43:4c:b4:43:38:
         65:84:6e:81:c4:60:4f:19:36:1a:4c:4c:5c:09:d6:ff:43:8d:
         03:c2:1e:93:19:e3:54:44:5f:cb:d4:63:78:6d:ab:97:74:f4:
         17:e9:bb:28:17:52:b7:74:37:a9:5d:d8:ae:76:3f:ee:90:0d:
         63:56:61:a8:98:64:ab:4c:99:6e:5b:1c:b8:1a:8c:4b:8c:dd:
         4e:ca:fe:cb:cb:81:53:18:bf:23:71:f7:11:3f:fd:82:d5:d6:
         a8:70:65:91:ae:90:d5:a3:42:8b:f3:a0:c7:23:16:ba:4d:62:
         53:4f:8e:e9:30:ad:c9:95:c4:f5:2d:87:03:d4:c7:4e:37:17:
         41:de:aa:2b:18:43:ce:ed:3a:ca:e8:04:9f:1e:25:b3:e4:80:
         64:d0:5d:1c:1e:5a:82:6b:39:67:c4:10:26:d7:53:6c:05:12:
         93:fb:f4:4c:2a:05:4c:a4:8d:8b:7a:44:56:3a:8b:38:6a:66:
         d8:24:00:8c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYrSInIWuS0KZI+OloxZiaCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj
ZGQ1NGYwHhcNMjMwOTI2MTUzNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzA5NDQ1YTljYTUwOWFhYTgwNDI3YWJjMjM0YzgxODE4MDAyZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzlplfmpHrbbvFd2HUy7fhVu2UEY
D6c1a1uxKyXnJY9jc5rLaYZIaBcPUr3upRNPSFUlFWALWUUUH3e8JaBJfBCYTOn3
PeXOf3reI9Dhsjp7mnhA/XQu+AQcno5B/Ic1PzLlJfPcUINTujjeMl+fw5sW3z2O
Kw567pQlAxRZ8tbMcy7GZ35MG/JLIpytlYrDFRW645MAsfwK+vCfT5WyyaUlKJxj
TTv5UDiVUyctodyJhn1fUIrnYlMB5NeVdl2YuVLbukfRlZ2zSPB5ewPmgq5eki0f
WneJOhmqqwT74ThJOmcHeMsWrcV9N/iSD/YrCXI7zDqvKCR+m2PiK0RilQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJcJRFqcpQmqqAQnq8I0yBgYAC3iMB8GA1UdIwQY
MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt
MzQ2MzY4ODI3ZTY4LzEvbHdsRVdweWxDYXFvQkNlcndqVElHQmdBTGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4
LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQB1fjaAwQB
1fj+MA8EAgACMAkDBwMqAQYYBAAwDQYJKoZIhvcNAQELBQADggEBAF5+kAtz76Bl
7sOqLJwG/kCMiJqyuin8uq1pnzlsqMtI2Pa5SkXWKXcfggs/WM+YYien2sHCrSIF
/KiLQu6sXYcd5l1DTLRDOGWEboHEYE8ZNhpMTFwJ1v9DjQPCHpMZ41REX8vUY3ht
q5d09BfpuygXUrd0N6ld2K52P+6QDWNWYaiYZKtMmW5bHLgajEuM3U7K/svLgVMY
vyNx9xE//YLV1qhwZZGukNWjQovzoMcjFrpNYlNPjukwrcmVxPUthwPUx043F0He
qisYQ87tOsroBJ8eJbPkgGTQXRweWoJrOWfEECbXU2wFEpP79EwqBUykjYt6RFY6
izhqZtgkAIw=
-----END CERTIFICATE-----