Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa
File:                     DUFb1rhiTr9wcpZefSqemcyyVVg.roa (raw, json)
Hash identifier:          6XnEDuLrMs1hw+SJAmj1vG71fEuPORtl76jOnF/GwkI=
Subject key identifier:   0D:41:5B:D6:B8:62:4E:BF:70:72:96:5E:7D:2A:9E:99:CC:B2:55:58
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       018A6ABEF716C84CA7C56FA67BE3E1315FC0
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa
Signing time:             Wed 06 Sep 2023 13:46:54 +0000
ROA not before:           Wed 06 Sep 2023 13:46:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202661
IP address blocks:        185.197.40.0/22 maxlen: 22
                          2a0e:d1c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6a:be:f7:16:c8:4c:a7:c5:6f:a6:7b:e3:e1:31:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: Sep  6 13:46:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d415bd6b8624ebf7072965e7d2a9e99ccb25558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:44:66:5f:60:4b:0c:83:43:36:e4:02:da:
                    c9:d8:37:2e:fb:c4:d3:d0:03:be:d2:ed:bf:09:e6:
                    a6:81:08:62:b1:91:b9:f3:a2:5a:24:95:83:7c:32:
                    f7:87:d2:f5:ff:14:84:b3:cc:33:8c:c6:84:1a:58:
                    23:97:8e:a9:ac:73:5e:e6:4f:30:ed:bd:f5:de:fd:
                    a3:62:b3:3a:e7:58:53:16:0b:ff:3a:f2:1c:94:69:
                    c5:59:85:18:5a:6d:24:4e:4f:47:68:66:54:5a:db:
                    a7:70:9b:4e:c4:2e:87:7b:95:c0:f4:bb:5c:92:cb:
                    2d:46:1b:86:5a:58:d6:5d:fe:db:a7:ec:46:35:5c:
                    39:cd:59:03:c8:c8:7e:32:79:e6:36:f9:63:79:65:
                    aa:38:4d:ba:3d:45:7f:d6:37:30:a7:da:de:7c:7c:
                    2c:8b:b4:0b:5f:57:93:45:67:8b:e8:de:19:55:14:
                    a8:8e:2f:37:89:b8:5e:71:53:5a:54:28:e5:e6:5a:
                    9e:01:b1:9c:4a:f5:b8:8d:2e:5f:d7:8f:a7:27:65:
                    04:ee:e5:cc:6c:ff:29:b8:fd:60:0c:8a:b3:1d:3f:
                    16:ee:08:59:9b:7a:f1:45:5d:68:5a:de:96:43:ba:
                    ff:f4:50:3d:e2:88:5d:33:7d:ff:f5:8b:c0:b5:6c:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:41:5B:D6:B8:62:4E:BF:70:72:96:5E:7D:2A:9E:99:CC:B2:55:58
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.40.0/22
                IPv6:
                  2a0e:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:d1:66:d6:e4:c6:06:5c:11:59:2d:3f:23:c8:cb:2a:91:
         1f:e7:e9:de:cd:5e:06:a5:78:a7:82:f7:45:e8:d8:3e:37:bf:
         28:33:e8:e6:a1:86:bb:de:fc:58:d8:21:3d:cc:14:1a:cd:50:
         77:82:91:76:91:63:59:ff:a2:f9:91:e7:6c:98:66:25:44:4f:
         86:95:7d:f3:79:2f:21:39:55:b7:cd:73:2b:d7:a5:7e:19:0c:
         b5:c2:8b:e1:d0:5e:bb:9e:c4:54:b0:21:1d:b9:20:e6:63:97:
         f3:15:72:06:f0:65:d8:72:99:31:86:be:a8:92:f5:de:19:88:
         2a:5f:dc:4d:be:b2:09:28:74:f5:58:e5:ab:75:5e:21:a4:a7:
         ba:fd:15:41:fb:1c:1a:34:78:55:8f:7a:6c:d0:4b:e9:2f:e5:
         bf:c4:a7:8e:55:1a:8f:e1:c9:56:3f:4e:4e:86:7f:74:03:49:
         e9:23:2b:3c:22:eb:fe:ee:b8:26:5d:76:d9:43:63:e8:15:f8:
         4e:0d:9d:7b:e7:4a:cc:58:27:49:fc:a0:d9:2d:11:99:da:87:
         77:58:1b:7e:99:14:86:d3:9b:0f:5b:23:0f:7e:d0:38:2e:ae:
         d7:aa:a3:76:3c:b4:9f:ee:aa:36:23:0e:f4:23:23:18:39:32:
         81:2d:7e:2d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYpqvvcWyEynxW+me+PhMV/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3
ZTE5ZWQwHhcNMjMwOTA2MTM0NjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDQxNWJkNmI4NjI0ZWJmNzA3Mjk2NWU3ZDJhOWU5OWNjYjI1NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL9EZl9gSwyDQzbkAtrJ2Dcu+8TT
0AO+0u2/CeamgQhisZG586JaJJWDfDL3h9L1/xSEs8wzjMaEGlgjl46prHNe5k8w
7b313v2jYrM651hTFgv/OvIclGnFWYUYWm0kTk9HaGZUWtuncJtOxC6He5XA9Ltc
ksstRhuGWljWXf7bp+xGNVw5zVkDyMh+MnnmNvljeWWqOE26PUV/1jcwp9refHws
i7QLX1eTRWeL6N4ZVRSoji83ibhecVNaVCjl5lqeAbGcSvW4jS5f14+nJ2UE7uXM
bP8puP1gDIqzHT8W7ghZm3rxRV1oWt6WQ7r/9FA94ohdM33/9YvAtWzqUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA1BW9a4Yk6/cHKWXn0qnpnMslVYMB8GA1UdIwQY
MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt
OTJkNDE4ZThkOWE1LzEvRFVGYjFyaGlUcjl3Y3BaZWZTcWVtY3l5VlZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1
LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucUoMA0E
AgACMAcDBQAqDtHAMA0GCSqGSIb3DQEBCwUAA4IBAQCB7dFm1uTGBlwRWS0/I8jL
KpEf5+nezV4GpXingvdF6Ng+N78oM+jmoYa73vxY2CE9zBQazVB3gpF2kWNZ/6L5
kedsmGYlRE+GlX3zeS8hOVW3zXMr16V+GQy1wovh0F67nsRUsCEduSDmY5fzFXIG
8GXYcpkxhr6okvXeGYgqX9xNvrIJKHT1WOWrdV4hpKe6/RVB+xwaNHhVj3ps0Evp
L+W/xKeOVRqP4clWP05Ohn90A0npIys8Iuv+7rgmXXbZQ2PoFfhODZ1750rMWCdJ
/KDZLRGZ2od3WBt+mRSG05sPWyMPftA4Lq7XqqN2PLSf7qo2Iw70IyMYOTKBLX4t
-----END CERTIFICATE-----