Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/X_syhl4PzV9xaEkCT3wx9sK37_Y.roa
File:                     X_syhl4PzV9xaEkCT3wx9sK37_Y.roa (raw, json)
Hash identifier:          9lKsexGj8utxutfBdxZeDs6p9VLzJgTXprNBlbc6aMg=
Subject key identifier:   5F:FB:32:86:5E:0F:CD:5F:71:68:49:02:4F:7C:31:F6:C2:B7:EF:F6
Certificate issuer:       /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial:       018571A79FA8AA41446E2B2CEA042CDCD028
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/X_syhl4PzV9xaEkCT3wx9sK37_Y.roa
Signing time:             Mon 02 Jan 2023 08:44:48 +0000
ROA not before:           Mon 02 Jan 2023 08:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44329
IP address blocks:        194.50.28.0/24 maxlen: 24
                          2001:67c:ac::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:9f:a8:aa:41:44:6e:2b:2c:ea:04:2c:dc:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
        Validity
            Not Before: Jan  2 08:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ffb32865e0fcd5f716849024f7c31f6c2b7eff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:97:05:11:fe:f1:80:c7:a2:3c:ad:6a:3d:
                    27:61:84:d3:e4:7e:ef:9b:73:0b:e5:b5:9a:9b:d5:
                    6e:ee:9f:84:d0:fe:cd:dd:f2:90:3d:4e:8f:de:4c:
                    af:87:01:e4:af:26:bc:76:2d:82:9c:ac:67:cc:d4:
                    fe:96:c6:a6:d9:38:c4:f8:a7:89:07:6b:95:4b:9b:
                    fc:6b:ad:ad:97:11:f7:dd:ea:72:a2:d5:10:87:28:
                    72:b9:a7:41:e5:b6:81:85:6d:f5:c7:b5:a8:11:be:
                    ea:60:51:a8:d5:47:85:ef:0c:8c:16:de:57:36:9b:
                    f7:ca:cf:41:c4:31:f0:b8:79:7b:a8:82:6a:35:ba:
                    59:62:d4:9f:71:ac:c2:5e:b1:5c:e1:8c:a7:7b:86:
                    b8:94:29:6c:33:08:37:4c:5b:63:a9:fc:0c:71:a7:
                    48:66:8c:10:07:97:4d:9f:6c:fd:e1:60:a4:40:a5:
                    88:9d:11:5f:b2:ef:ea:ac:fb:5e:ea:cb:52:44:1a:
                    25:60:9d:a6:c8:27:8b:22:f9:f6:c9:66:e4:b8:b7:
                    8e:62:a3:5e:99:60:46:ac:6a:f5:19:c8:7f:21:6a:
                    e6:37:9d:e3:ec:c4:73:2e:2e:99:26:a0:f9:d3:42:
                    ce:f5:87:cd:db:ab:72:8d:c4:b3:d3:e4:56:8f:d1:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FB:32:86:5E:0F:CD:5F:71:68:49:02:4F:7C:31:F6:C2:B7:EF:F6
            X509v3 Authority Key Identifier:
                keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/X_syhl4PzV9xaEkCT3wx9sK37_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.28.0/24
                IPv6:
                  2001:67c:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:55:57:60:9a:06:58:42:ee:be:d0:2b:06:28:53:22:bd:
         ee:07:b3:c9:8f:f6:37:38:4d:a7:c6:e6:74:67:b7:4e:08:98:
         07:c3:70:0e:ce:7a:af:aa:c5:f7:af:c1:b5:21:d0:ad:dd:de:
         18:b5:87:d6:a1:f0:eb:28:9f:bb:11:68:20:80:66:60:10:92:
         42:4b:48:ff:4f:21:7c:62:7d:ef:70:7b:56:f6:38:bd:c1:70:
         64:fb:e9:c3:3e:6c:ad:6a:5a:9a:a7:0f:aa:16:2a:f1:38:d8:
         22:1e:2a:de:3a:44:db:5d:a8:0a:4f:ec:ce:11:65:10:a5:e9:
         5b:c2:de:df:b1:e9:51:7d:f1:f3:82:37:2e:2e:bb:e1:cb:13:
         22:e2:4d:37:5e:8c:e7:76:d1:13:e0:34:28:28:2d:78:40:f5:
         e4:92:04:17:2c:7f:69:9b:b5:0e:66:1c:e9:dc:60:3b:d0:24:
         9b:c7:a8:ee:9f:ae:d7:a9:19:35:91:93:4b:2c:bc:3f:5e:33:
         86:ef:0d:f5:ff:80:1a:8b:34:52:6d:7e:57:e7:d9:55:ed:9b:
         9c:51:f8:90:7d:98:af:80:71:42:78:41:83:a9:f7:44:d0:d0:
         7c:d4:16:c3:bd:0c:c8:b1:9e:1b:4e:f9:f1:dd:ce:70:fd:16:
         d4:f9:8a:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxp5+oqkFEbiss6gQs3NAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy
ZTA5MjEwHhcNMjMwMTAyMDg0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmZiMzI4NjVlMGZjZDVmNzE2ODQ5MDI0ZjdjMzFmNmMyYjdlZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfmXBRH+8YDHojytaj0nYYTT5H7v
m3ML5bWam9Vu7p+E0P7N3fKQPU6P3kyvhwHkrya8di2CnKxnzNT+lsam2TjE+KeJ
B2uVS5v8a62tlxH33epyotUQhyhyuadB5baBhW31x7WoEb7qYFGo1UeF7wyMFt5X
Npv3ys9BxDHwuHl7qIJqNbpZYtSfcazCXrFc4Yyne4a4lClsMwg3TFtjqfwMcadI
ZowQB5dNn2z94WCkQKWInRFfsu/qrPte6stSRBolYJ2myCeLIvn2yWbkuLeOYqNe
mWBGrGr1Gch/IWrmN53j7MRzLi6ZJqD500LO9YfN26tyjcSz0+RWj9F95QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF/7MoZeD81fcWhJAk98MfbCt+/2MB8GA1UdIwQY
MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt
NzIwOGNkOThkODgxLzEvWF9zeWhsNFB6Vjl4YUVrQ1Qzd3g5c0szN19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx
LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjIcMA8E
AgACMAkDBwAgAQZ8AKwwDQYJKoZIhvcNAQELBQADggEBAKhBVVdgmgZYQu6+0CsG
KFMive4Hs8mP9jc4TafG5nRnt04ImAfDcA7Oeq+qxfevwbUh0K3d3hi1h9ah8Oso
n7sRaCCAZmAQkkJLSP9PIXxife9we1b2OL3BcGT76cM+bK1qWpqnD6oWKvE42CIe
Kt46RNtdqApP7M4RZRCl6VvC3t+x6VF98fOCNy4uu+HLEyLiTTdejOd20RPgNCgo
LXhA9eSSBBcsf2mbtQ5mHOncYDvQJJvHqO6frtepGTWRk0ssvD9eM4bvDfX/gBqL
NFJtflfn2VXtm5xR+JB9mK+AcUJ4QYOp90TQ0HzUFsO9DMixnhtO+fHdznD9FtT5
iqU=
-----END CERTIFICATE-----