Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa
File:                     mbv53S4rEfLmYRoBaK2uLzXWbEE.roa (raw, json)
Hash identifier:          J20x5z02N4EF9T37gQ3M7t8hCjuoYluq7K2qNxMSkz8=
Subject key identifier:   99:BB:F9:DD:2E:2B:11:F2:E6:61:1A:01:68:AD:AE:2F:35:D6:6C:41
Certificate issuer:       /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial:       018584781A5A8AD7A57059E172AC27F5F55A
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa
Signing time:             Fri 06 Jan 2023 00:25:41 +0000
ROA not before:           Fri 06 Jan 2023 00:25:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39378
IP address blocks:        194.76.226.0/24 maxlen: 24
                          79.132.130.0/24 maxlen: 24
                          79.132.131.0/24 maxlen: 24
                          185.219.220.0/23 maxlen: 23
                          185.219.222.0/24 maxlen: 24
                          185.219.223.0/24 maxlen: 24
                          185.158.251.0/24 maxlen: 24
                          185.212.44.0/24 maxlen: 24
                          185.212.45.0/24 maxlen: 24
                          185.212.46.0/24 maxlen: 24
                          185.212.47.0/24 maxlen: 24
                          91.241.93.0/24 maxlen: 24
                          2a0b:7140::/48 maxlen: 48
                          2a07:fc00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:84:78:1a:5a:8a:d7:a5:70:59:e1:72:ac:27:f5:f5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
        Validity
            Not Before: Jan  6 00:25:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99bbf9dd2e2b11f2e6611a0168adae2f35d66c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:50:9a:f0:55:af:28:c6:96:ac:5e:ee:e8:
                    fa:8e:06:ba:97:cc:87:e5:f7:50:0b:88:95:2b:8f:
                    d1:09:76:d2:ad:cd:31:fd:c3:52:a8:3a:7f:3e:4a:
                    e3:51:28:c1:67:64:ff:9b:42:6e:c3:92:de:db:73:
                    e3:05:2b:de:59:98:92:77:3f:97:58:93:a0:9e:93:
                    99:d2:05:1c:40:eb:42:dd:27:a8:da:f3:ee:13:0d:
                    ca:d9:42:38:2c:6a:25:14:5f:0e:03:a9:ba:12:fc:
                    e4:11:18:60:ef:79:f7:d4:56:7e:04:2f:31:45:39:
                    10:6c:3e:c5:39:d0:4d:b9:23:8a:cf:1a:75:f3:8d:
                    7a:76:f1:96:3b:fc:11:4b:a7:9f:25:c2:41:33:18:
                    51:3b:98:4d:2f:d4:35:53:56:40:21:3a:5d:5b:6f:
                    57:0d:cc:92:13:64:ef:d5:4e:83:a9:31:24:de:68:
                    5a:22:74:48:13:21:c1:61:78:aa:04:07:20:31:fd:
                    29:36:64:b3:88:d8:da:13:fa:fa:57:d0:42:53:d6:
                    40:c1:e3:c6:90:8a:6e:41:b3:74:bb:99:d1:eb:c9:
                    2e:11:75:69:b3:c9:6b:0d:8f:7a:60:3c:f0:07:cf:
                    db:d5:d3:43:2c:6a:23:0a:44:bd:ec:40:58:64:ef:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BB:F9:DD:2E:2B:11:F2:E6:61:1A:01:68:AD:AE:2F:35:D6:6C:41
            X509v3 Authority Key Identifier:
                keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/mbv53S4rEfLmYRoBaK2uLzXWbEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.132.130.0/23
                  91.241.93.0/24
                  185.158.251.0/24
                  185.212.44.0/22
                  185.219.220.0/22
                  194.76.226.0/24
                IPv6:
                  2a07:fc00::/48
                  2a0b:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:87:d4:d8:6d:74:b7:0e:92:46:02:26:1b:84:0d:c1:86:
         36:9f:86:8f:94:6f:90:11:b1:ee:f5:77:c3:b8:5f:9b:98:59:
         34:eb:bb:2c:3f:0f:10:b0:bf:15:66:24:8e:8c:ff:12:e8:09:
         96:82:71:21:c4:b0:67:3c:7e:bd:ef:46:76:fa:fe:07:9a:13:
         f0:4a:cd:cd:86:0b:56:f4:59:d8:82:8e:59:cd:fb:1c:f0:ee:
         9a:16:f2:0a:02:25:ec:2e:ad:d7:cf:61:f9:c5:f0:0c:d0:13:
         b5:29:53:e8:71:1d:27:d9:31:00:01:77:70:f9:77:fd:19:ad:
         e8:80:fb:83:e8:1a:e3:84:a9:c4:92:78:ab:9f:18:2d:c7:05:
         7b:42:ee:63:de:44:79:d3:45:fa:47:8f:d1:22:6c:74:12:5a:
         63:7d:1f:d0:b2:b8:01:07:74:b8:ec:82:78:a7:90:da:b3:6a:
         0d:d4:c2:cf:33:20:63:3a:67:d0:79:b2:e0:ec:58:59:a4:06:
         76:a8:54:cf:a0:10:9a:57:c2:15:b8:d2:31:51:e5:57:29:ce:
         fe:61:3f:b3:9a:d9:ce:36:8c:76:54:03:de:07:79:4e:38:f1:
         bf:47:87:20:32:fb:25:70:bb:23:11:ae:71:b6:8f:ac:9d:d5:
         24:f6:3d:c0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYWEeBpaitelcFnhcqwn9fVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy
MWZjZjIwHhcNMjMwMTA2MDAyNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWJiZjlkZDJlMmIxMWYyZTY2MTFhMDE2OGFkYWUyZjM1ZDY2YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YtQmvBVryjGlqxe7uj6jga6l8yH
5fdQC4iVK4/RCXbSrc0x/cNSqDp/PkrjUSjBZ2T/m0Juw5Le23PjBSveWZiSdz+X
WJOgnpOZ0gUcQOtC3Seo2vPuEw3K2UI4LGolFF8OA6m6EvzkERhg73n31FZ+BC8x
RTkQbD7FOdBNuSOKzxp18416dvGWO/wRS6efJcJBMxhRO5hNL9Q1U1ZAITpdW29X
DcySE2Tv1U6DqTEk3mhaInRIEyHBYXiqBAcgMf0pNmSziNjaE/r6V9BCU9ZAwePG
kIpuQbN0u5nR68kuEXVps8lrDY96YDzwB8/b1dNDLGojCkS97EBYZO9mOwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFJm7+d0uKxHy5mEaAWitri811mxBMB8GA1UdIwQY
MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt
Mzk1NTk1OWVhZjgxLzEvbWJ2NTNTNHJFZkxtWVJvQmFLMnVMelhXYkVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx
LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQBT4SCAwQA
W/FdAwQAuZ77AwQCudQsAwQCudvcAwQAwkziMBgEAgACMBIDBwAqB/wAAAADBwAq
C3FAAAAwDQYJKoZIhvcNAQELBQADggEBAC3xh9TYbXS3DpJGAiYbhA3Bhjafho+U
b5ARse71d8O4X5uYWTTruyw/DxCwvxVmJI6M/xLoCZaCcSHEsGc8fr3vRnb6/gea
E/BKzc2GC1b0WdiCjlnN+xzw7poW8goCJewurdfPYfnF8AzQE7UpU+hxHSfZMQAB
d3D5d/0ZreiA+4PoGuOEqcSSeKufGC3HBXtC7mPeRHnTRfpHj9EibHQSWmN9H9Cy
uAEHdLjsgninkNqzag3Uws8zIGM6Z9B5suDsWFmkBnaoVM+gEJpXwhW40jFR5Vcp
zv5hP7Oa2c42jHZUA94HeU448b9HhyAy+yVwuyMRrnG2j6yd1ST2PcA=
-----END CERTIFICATE-----