Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kuO8eqeellYCqpfEfKYUH1jyR_0.roa
File:                     kuO8eqeellYCqpfEfKYUH1jyR_0.roa (raw, json)
Hash identifier:          C5ngZVqIgquck/kGlOv1E2yVL/R7Xb4IlC6N8wQGj0c=
Subject key identifier:   92:E3:BC:7A:A7:9E:96:56:02:AA:97:C4:7C:A6:14:1F:58:F2:47:FD
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       018A1D2E528E64A05D6FFFF971A2F9192B31
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kuO8eqeellYCqpfEfKYUH1jyR_0.roa
Signing time:             Tue 22 Aug 2023 12:18:09 +0000
ROA not before:           Tue 22 Aug 2023 12:18:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        193.108.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1d:2e:52:8e:64:a0:5d:6f:ff:f9:71:a2:f9:19:2b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Aug 22 12:18:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92e3bc7aa79e965602aa97c47ca6141f58f247fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:78:0f:d8:f9:ea:e8:8e:3d:d1:33:36:c0:
                    84:2d:a8:78:00:a4:18:94:c6:39:e5:3c:b6:03:28:
                    40:3e:60:35:a7:b4:cc:57:b7:8a:9c:8d:61:be:27:
                    f3:e7:f4:ab:09:64:5f:d0:b6:fc:aa:21:5b:4a:5e:
                    e6:74:d3:76:30:6d:f4:94:47:80:f2:d5:95:ff:18:
                    3d:dd:f4:a4:4f:d8:76:27:49:ae:72:58:9d:63:6f:
                    c5:d4:68:e0:72:3b:16:e7:5a:91:e3:2a:37:2f:fd:
                    75:e3:e3:11:ed:46:83:77:d7:e5:df:9e:92:4c:6d:
                    9f:4e:19:86:f2:11:84:31:7c:64:3f:9a:7d:80:8f:
                    0f:d4:f0:09:9b:a5:7e:a1:4c:30:62:ff:b6:b2:7b:
                    10:c6:6a:91:1b:91:87:cf:c1:27:df:06:1e:41:db:
                    7e:68:3c:74:85:d8:76:65:75:e5:f1:ff:06:2e:e0:
                    5f:1d:ac:21:49:01:cb:da:76:08:57:83:7d:da:0d:
                    0f:41:23:45:08:1e:b7:94:19:bf:a3:c7:c8:d9:8a:
                    e6:05:fd:8e:7f:18:a0:6b:fc:13:34:f7:64:23:2a:
                    65:ac:bb:1a:52:d3:3d:8d:32:86:6d:74:9a:31:47:
                    c0:60:c1:71:87:54:d6:a0:b5:15:72:21:c1:bf:f7:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E3:BC:7A:A7:9E:96:56:02:AA:97:C4:7C:A6:14:1F:58:F2:47:FD
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kuO8eqeellYCqpfEfKYUH1jyR_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:28:f8:d5:7a:63:57:2f:e1:cd:63:78:6c:dc:85:c9:c1:
         ff:1a:5a:e2:fc:4b:26:2f:19:75:ad:b7:53:48:86:f3:37:ae:
         3f:0f:55:cf:c9:15:f9:4e:52:1c:e7:93:bc:36:0f:82:cc:e4:
         13:5a:e1:f8:89:b8:3d:61:b3:64:a5:e0:94:4d:b3:40:d0:f9:
         f1:e5:4c:23:37:8e:dc:d8:66:f8:e7:7e:17:f7:72:8e:de:7d:
         3e:d1:8d:9d:49:e0:b6:dc:d2:db:de:f5:f9:64:2b:d2:0d:10:
         fb:08:e9:09:f0:2e:2f:0a:ef:de:c1:1a:90:c0:a9:6d:f8:2f:
         79:b4:03:7c:11:b9:d5:65:9a:1d:03:ac:1f:5d:d2:93:ee:bf:
         a6:46:7f:62:b0:75:2f:a0:71:5c:ae:ff:c8:93:76:ef:76:20:
         ec:34:9e:91:1e:4a:f9:c1:3b:40:a4:8b:c0:8a:5a:4a:62:4e:
         99:1d:8d:99:ea:47:0b:8d:ae:66:9b:01:82:42:b9:1f:90:f0:
         09:40:f1:3d:60:7f:06:10:a5:36:40:b3:cb:af:36:da:88:3b:
         bb:f4:9d:50:e4:1d:88:6b:a2:86:b0:93:10:92:6a:5f:2a:9e:
         80:72:1c:4b:73:76:0f:3d:9e:63:fb:8c:a9:ae:57:a9:36:1d:
         a9:8c:1b:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYodLlKOZKBdb//5caL5GSsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjMwODIyMTIxODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmUzYmM3YWE3OWU5NjU2MDJhYTk3YzQ3Y2E2MTQxZjU4ZjI0N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHt4D9j56uiOPdEzNsCELah4AKQY
lMY55Ty2AyhAPmA1p7TMV7eKnI1hvifz5/SrCWRf0Lb8qiFbSl7mdNN2MG30lEeA
8tWV/xg93fSkT9h2J0muclidY2/F1GjgcjsW51qR4yo3L/114+MR7UaDd9fl356S
TG2fThmG8hGEMXxkP5p9gI8P1PAJm6V+oUwwYv+2snsQxmqRG5GHz8En3wYeQdt+
aDx0hdh2ZXXl8f8GLuBfHawhSQHL2nYIV4N92g0PQSNFCB63lBm/o8fI2YrmBf2O
fxiga/wTNPdkIyplrLsaUtM9jTKGbXSaMUfAYMFxh1TWoLUVciHBv/e0tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLjvHqnnpZWAqqXxHymFB9Y8kf9MB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEva3VPOGVxZWVsbFlDcXBmRWZLWVVIMWp5Ul8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWxmMA0G
CSqGSIb3DQEBCwUAA4IBAQBinCj41XpjVy/hzWN4bNyFycH/Glri/EsmLxl1rbdT
SIbzN64/D1XPyRX5TlIc55O8Ng+CzOQTWuH4ibg9YbNkpeCUTbNA0Pnx5UwjN47c
2Gb4534X93KO3n0+0Y2dSeC23NLb3vX5ZCvSDRD7COkJ8C4vCu/ewRqQwKlt+C95
tAN8EbnVZZodA6wfXdKT7r+mRn9isHUvoHFcrv/Ik3bvdiDsNJ6RHkr5wTtApIvA
ilpKYk6ZHY2Z6kcLja5mmwGCQrkfkPAJQPE9YH8GEKU2QLPLrzbaiDu79J1Q5B2I
a6KGsJMQkmpfKp6AchxLc3YPPZ5j+4yprlepNh2pjBv4
-----END CERTIFICATE-----