Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/WqtqivmJBI2BK82dmY56RcPAFfA.roa
File:                     WqtqivmJBI2BK82dmY56RcPAFfA.roa (raw, json)
Hash identifier:          ik+aUid0F7ofk4bZyQLL5XeN2F6GFdnOQI4X1Fz55RM=
Subject key identifier:   5A:AB:6A:8A:F9:89:04:8D:81:2B:CD:9D:99:8E:7A:45:C3:C0:15:F0
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       0185704BB5063AF3745B536997310E13F01F
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/WqtqivmJBI2BK82dmY56RcPAFfA.roa
Signing time:             Mon 02 Jan 2023 02:24:47 +0000
ROA not before:           Mon 02 Jan 2023 02:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208154
IP address blocks:        185.75.192.0/22 maxlen: 22
                          2a03:4ca0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:4b:b5:06:3a:f3:74:5b:53:69:97:31:0e:13:f0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: Jan  2 02:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5aab6a8af989048d812bcd9d998e7a45c3c015f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:ee:96:e4:e6:1e:14:52:c3:27:68:48:e5:
                    9a:e2:a1:d9:e6:54:24:22:77:2b:1c:30:bc:40:77:
                    db:43:c4:b2:c1:fe:59:85:7c:41:cc:23:74:cf:29:
                    72:e4:64:85:e7:1a:f3:21:e8:1d:69:fc:64:2e:af:
                    15:8a:87:cf:8e:fb:48:0b:cd:83:04:58:7f:ef:7d:
                    18:c2:6f:cd:cc:8e:95:3b:35:48:d4:10:47:7c:99:
                    f4:8c:0b:6d:fa:6a:5e:7f:59:a8:17:b1:29:f6:f0:
                    0c:de:62:02:de:f4:8c:43:09:94:91:ac:54:41:07:
                    ec:31:b4:13:a4:f4:50:1c:cf:96:eb:31:1e:b4:2a:
                    76:82:1f:bb:74:d0:b8:9f:65:96:1d:92:a2:d0:4b:
                    ff:ef:60:cc:0a:63:16:fc:91:57:cb:b0:ee:cf:38:
                    a3:20:26:99:10:97:9b:ac:d1:6a:6c:6b:52:95:33:
                    ea:35:0f:13:7e:00:a5:0d:ee:e8:53:9b:da:ca:69:
                    76:f7:5d:62:f3:93:38:f4:26:f4:0b:9a:45:65:a7:
                    60:12:fb:12:c4:61:ea:34:dc:4b:54:af:29:8d:d5:
                    48:ec:5d:81:8e:22:07:6c:73:bb:a4:17:40:ec:ea:
                    8b:5a:a1:ae:d3:8c:ab:58:df:2c:37:33:c3:17:a6:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AB:6A:8A:F9:89:04:8D:81:2B:CD:9D:99:8E:7A:45:C3:C0:15:F0
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/WqtqivmJBI2BK82dmY56RcPAFfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.192.0/22
                IPv6:
                  2a03:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:70:b9:f7:7f:7d:99:07:73:be:7f:df:fa:5f:b9:9d:15:
         91:de:21:9b:8c:f3:3c:b2:1a:d3:8b:11:04:8c:bc:6b:d1:96:
         0b:b9:a4:0b:b0:f9:ce:2b:95:9e:8c:d8:b0:de:33:75:16:a9:
         36:6b:44:4a:3d:6d:88:e7:ef:06:6f:3c:79:64:f0:60:41:86:
         f0:01:da:4d:92:43:69:3d:b2:35:86:68:03:1f:57:cf:3e:27:
         5a:99:4e:e0:f1:d6:2c:f4:75:b2:eb:1c:d5:b2:8c:c0:ac:62:
         55:e7:6d:0c:e6:9d:3f:ba:66:13:40:5d:33:b8:ad:2c:78:0c:
         e9:91:8c:20:9f:a0:e8:96:86:fa:d1:50:90:9d:7e:78:6c:f0:
         ad:84:6b:4c:64:cd:8f:da:06:98:fc:e6:ed:9a:6b:65:36:a8:
         d1:b5:89:0e:85:fc:0c:9e:14:8f:2d:7d:8d:f9:28:f5:54:62:
         94:33:76:33:10:ff:ff:3a:bb:30:a1:36:96:bb:d2:20:e5:af:
         a9:c9:2c:6c:15:a5:95:e3:8e:1f:da:d4:fc:bd:3f:e3:75:53:
         dd:4a:43:83:8b:18:4e:eb:21:58:0b:00:0a:e0:61:21:cc:5a:
         98:49:43:d1:f1:74:93:03:20:ba:2f:e6:ce:57:9d:64:6d:a3:
         c6:b2:17:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwS7UGOvN0W1NplzEOE/AfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjMwMTAyMDIyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWFiNmE4YWY5ODkwNDhkODEyYmNkOWQ5OThlN2E0NWMzYzAxNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+buluTmHhRSwydoSOWa4qHZ5lQk
IncrHDC8QHfbQ8Sywf5ZhXxBzCN0zyly5GSF5xrzIegdafxkLq8ViofPjvtIC82D
BFh/730Ywm/NzI6VOzVI1BBHfJn0jAtt+mpef1moF7Ep9vAM3mIC3vSMQwmUkaxU
QQfsMbQTpPRQHM+W6zEetCp2gh+7dNC4n2WWHZKi0Ev/72DMCmMW/JFXy7Duzzij
ICaZEJebrNFqbGtSlTPqNQ8TfgClDe7oU5vayml2911i85M49Cb0C5pFZadgEvsS
xGHqNNxLVK8pjdVI7F2BjiIHbHO7pBdA7OqLWqGu04yrWN8sNzPDF6Y44wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFqraor5iQSNgSvNnZmOekXDwBXwMB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvV3F0cWl2bUpCSTJCSzgyZG1ZNTZSY1BBRmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUvAMA0E
AgACMAcDBQAqA0ygMA0GCSqGSIb3DQEBCwUAA4IBAQCJ3HC59399mQdzvn/f+l+5
nRWR3iGbjPM8shrTixEEjLxr0ZYLuaQLsPnOK5WejNiw3jN1Fqk2a0RKPW2I5+8G
bzx5ZPBgQYbwAdpNkkNpPbI1hmgDH1fPPidamU7g8dYs9HWy6xzVsozArGJV520M
5p0/umYTQF0zuK0seAzpkYwgn6Dolob60VCQnX54bPCthGtMZM2P2gaY/Obtmmtl
NqjRtYkOhfwMnhSPLX2N+Sj1VGKUM3YzEP//OrswoTaWu9Ig5a+pySxsFaWV444f
2tT8vT/jdVPdSkODixhO6yFYCwAK4GEhzFqYSUPR8XSTAyC6L+bOV51kbaPGshdg
-----END CERTIFICATE-----