Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa
File:                     uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa (raw, json)
Hash identifier:          /4/KwYJ2pFeXu1dCrodgAaVVSNuw6moURtB+gjWmGeQ=
Subject key identifier:   B9:74:0C:01:2D:EC:B3:5B:F7:5A:7B:1A:01:93:30:C0:D8:4E:02:67
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E39EFD4EB18F81D66BE626A373149
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa
Signing time:             Mon 02 Jan 2023 06:14:44 +0000
ROA not before:           Mon 02 Jan 2023 06:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34854
IP address blocks:        45.13.118.0/24 maxlen: 24
                          2a0c:b642:fc0::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:39:ef:d4:eb:18:f8:1d:66:be:62:6a:37:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9740c012decb35bf75a7b1a019330c0d84e0267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:11:60:1d:c0:49:66:80:d5:d9:8d:66:07:
                    85:97:ec:da:1f:b0:58:b5:ee:b8:cb:f7:62:90:91:
                    cf:47:c2:66:75:83:4f:87:70:01:2e:67:83:d1:10:
                    21:f0:34:a8:63:d5:68:69:b2:e1:cc:dc:4c:1d:b9:
                    16:54:8b:97:eb:cc:10:84:92:ba:74:8d:db:b2:47:
                    c2:98:4c:6c:4b:31:ca:42:68:68:61:33:88:31:aa:
                    ee:07:c3:79:8b:e9:b7:72:a7:c8:2e:c6:55:7c:ec:
                    b8:08:0b:08:e1:fb:73:ef:a1:ae:e8:09:4f:40:48:
                    18:14:95:13:28:dc:1b:7f:bf:29:67:22:f0:77:92:
                    c5:0b:77:c1:e8:1e:fd:fd:0d:3c:77:b1:52:d7:61:
                    56:4d:6e:9d:ab:65:99:10:62:61:df:d2:fb:f3:3d:
                    53:43:74:b9:ed:3f:8a:49:08:51:ec:61:71:a1:56:
                    82:d4:3b:70:17:b5:52:75:93:f7:95:57:f0:0d:86:
                    64:00:ca:88:22:fa:3c:92:9d:45:ef:50:d0:32:68:
                    91:f7:63:bb:d4:c6:a5:d3:56:8c:a3:8d:44:87:2d:
                    26:8d:44:24:8b:b1:3b:0d:a1:a6:0f:5e:e3:48:14:
                    33:c9:02:e1:86:d0:31:85:4b:88:5e:66:6c:a3:6d:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:0C:01:2D:EC:B3:5B:F7:5A:7B:1A:01:93:30:C0:D8:4E:02:67
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uXQMAS3ss1v3WnsaAZMwwNhOAmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.118.0/24
                IPv6:
                  2a0c:b642:fc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         40:58:20:d8:3e:38:36:04:31:86:ad:06:e4:66:5d:80:27:91:
         06:51:92:5f:ea:cf:70:8d:5e:d2:ae:97:84:76:c0:86:f9:21:
         52:83:1e:79:aa:0d:f5:ce:53:ce:d3:b8:93:91:95:96:ec:fb:
         0a:b5:fd:b9:fc:b6:c5:55:9f:bb:24:53:50:e2:21:76:90:a5:
         23:e9:1f:bf:b0:14:f5:61:a5:59:90:21:9f:d8:7b:56:a8:f4:
         13:e8:e6:30:da:2b:7a:11:79:76:7d:d8:85:15:67:68:c5:7d:
         80:b4:9f:38:a6:5e:89:56:39:6d:05:5b:7c:49:e7:ef:cf:ce:
         ea:d5:ec:67:ca:2a:39:64:22:10:62:2f:f6:57:97:cc:52:0e:
         fa:8c:a1:8b:94:20:9d:ba:29:06:7f:27:02:cf:25:2b:30:87:
         03:5c:c1:a2:95:e0:3d:99:f1:65:7c:79:e6:74:1b:c6:e6:90:
         ad:cd:6f:76:29:83:7e:a5:b3:9b:d0:67:bb:7a:9b:fd:52:74:
         52:8e:61:43:c4:cc:87:83:96:c8:fd:28:c3:a2:eb:00:85:73:
         97:71:91:23:a8:d9:d9:3d:03:b7:24:ba:b1:ed:6d:4b:56:00:
         18:d3:2c:2d:f1:1d:45:d7:95:67:86:aa:cc:b1:ef:89:bb:ae:
         4e:c9:45:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxHjnv1OsY+B1mvmJqNzFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTc0MGMwMTJkZWNiMzViZjc1YTdiMWEwMTkzMzBjMGQ4NGUwMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSIRYB3ASWaA1dmNZgeFl+zaH7BY
te64y/dikJHPR8JmdYNPh3ABLmeD0RAh8DSoY9VoabLhzNxMHbkWVIuX68wQhJK6
dI3bskfCmExsSzHKQmhoYTOIMaruB8N5i+m3cqfILsZVfOy4CAsI4ftz76Gu6AlP
QEgYFJUTKNwbf78pZyLwd5LFC3fB6B79/Q08d7FS12FWTW6dq2WZEGJh39L78z1T
Q3S57T+KSQhR7GFxoVaC1DtwF7VSdZP3lVfwDYZkAMqIIvo8kp1F71DQMmiR92O7
1Mal01aMo41Ehy0mjUQki7E7DaGmD17jSBQzyQLhhtAxhUuIXmZso21vwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLl0DAEt7LNb91p7GgGTMMDYTgJnMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdVhRTUFTM3NzMXYzV25zYUFaTXd3TmhPQW1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQ12MA8E
AgACMAkDBwUqDLZCD8AwDQYJKoZIhvcNAQELBQADggEBAEBYINg+ODYEMYatBuRm
XYAnkQZRkl/qz3CNXtKul4R2wIb5IVKDHnmqDfXOU87TuJORlZbs+wq1/bn8tsVV
n7skU1DiIXaQpSPpH7+wFPVhpVmQIZ/Ye1ao9BPo5jDaK3oReXZ92IUVZ2jFfYC0
nzimXolWOW0FW3xJ5+/PzurV7GfKKjlkIhBiL/ZXl8xSDvqMoYuUIJ26KQZ/JwLP
JSswhwNcwaKV4D2Z8WV8eeZ0G8bmkK3Nb3Ypg36ls5vQZ7t6m/1SdFKOYUPEzIeD
lsj9KMOi6wCFc5dxkSOo2dk9A7ckurHtbUtWABjTLC3xHUXXlWeGqsyx74m7rk7J
RYU=
-----END CERTIFICATE-----