Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zsKwRb_1y-lXmdmXr9yAp3rSnic.roa
File:                     zsKwRb_1y-lXmdmXr9yAp3rSnic.roa (raw, json)
Hash identifier:          qRjv9+F+BCYfobE4/caajeXEdTPrD7wucWhdNEnZOxU=
Subject key identifier:   CE:C2:B0:45:BF:F5:CB:E9:57:99:D9:97:AF:DC:80:A7:7A:D2:9E:27
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       018CA73550BEFDA981819681923A1416D3F7
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zsKwRb_1y-lXmdmXr9yAp3rSnic.roa
Signing time:             Tue 26 Dec 2023 17:38:58 +0000
ROA not before:           Tue 26 Dec 2023 17:38:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58044
IP address blocks:        2a10:d182::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a7:35:50:be:fd:a9:81:81:96:81:92:3a:14:16:d3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Dec 26 17:38:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cec2b045bff5cbe95799d997afdc80a77ad29e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:0a:ae:70:2d:92:16:f7:e2:3f:a6:f2:76:
                    6a:0c:8d:d2:a2:6b:33:cb:c0:7a:41:66:07:7f:1b:
                    cf:6d:b0:d8:8b:6a:a8:e9:04:1f:23:20:ce:04:7c:
                    c5:4f:9f:2c:37:07:68:04:c9:b4:3e:36:22:2e:50:
                    74:79:72:5a:6a:f6:b5:f6:18:18:0d:8c:20:4d:da:
                    4f:93:71:23:d8:91:08:5d:a5:9f:ea:fa:21:32:fc:
                    13:8c:c9:5c:b3:fc:22:5b:32:c1:4b:e1:6d:f9:b6:
                    4d:78:f3:19:bd:d6:0b:45:46:de:02:64:29:50:30:
                    a1:47:9a:c2:06:00:c4:5e:fa:51:d7:88:b5:67:0e:
                    45:35:d3:75:12:09:0e:6a:45:32:c4:4f:28:a4:6b:
                    dd:58:84:aa:bc:99:9c:58:6c:2f:ba:22:b4:71:b1:
                    48:d8:ef:04:38:32:3d:e4:53:42:a5:ce:b7:d8:e2:
                    9e:ea:48:49:99:e8:8b:1a:f5:99:99:e7:9e:19:e0:
                    68:8b:92:02:28:62:c7:2c:b9:a5:8c:6e:77:7c:8e:
                    8f:54:db:bf:7a:13:83:7e:d0:6b:82:02:e3:36:b7:
                    91:a2:b5:54:b3:5e:ca:66:5c:94:d7:8c:e3:1d:99:
                    69:9f:09:fa:28:1b:eb:6b:47:c6:a7:2d:46:4e:84:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:B0:45:BF:F5:CB:E9:57:99:D9:97:AF:DC:80:A7:7A:D2:9E:27
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/zsKwRb_1y-lXmdmXr9yAp3rSnic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:d182::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:57:06:9f:90:ac:4b:94:61:01:d1:93:93:c9:84:77:7f:
         84:e9:a9:99:cf:cf:69:77:c2:11:07:38:96:5d:e6:02:7f:44:
         fc:fb:d3:22:03:d4:98:96:b9:4a:d2:a8:98:4b:6e:42:71:cf:
         5a:7b:fc:cb:dc:00:85:ed:b9:29:a7:61:fd:79:1c:71:a8:f5:
         55:f5:f3:ab:38:ec:fd:64:9a:72:d6:20:1f:2f:93:5f:e0:d4:
         d7:31:72:94:9a:6f:12:6d:eb:76:8c:a9:75:ef:4d:15:99:49:
         4b:58:3a:d0:43:42:a0:20:7c:8c:b6:ee:e3:04:26:af:39:0f:
         39:f7:bd:3f:7a:76:d9:0d:28:7d:c6:b2:70:93:83:06:bb:0d:
         05:58:31:38:aa:e9:fb:a4:b6:ae:4d:6d:28:3d:3d:3e:23:a7:
         62:04:1a:40:09:de:69:75:81:57:82:31:89:2d:3c:d3:8f:a1:
         71:a7:03:f3:e4:f0:d2:5e:e7:9e:0a:6c:6c:4b:9b:b2:7c:24:
         67:52:c5:af:47:05:16:50:bc:a4:40:0e:0b:1d:77:54:16:0e:
         70:af:24:13:79:30:81:63:8a:41:b1:47:1b:b2:c2:9b:3f:f9:
         40:1e:e2:59:f8:b4:75:fe:49:5b:e2:d5:ad:6c:ab:51:d8:6e:
         3d:9d:b1:06
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYynNVC+/amBgZaBkjoUFtP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjMxMjI2MTczODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWMyYjA0NWJmZjVjYmU5NTc5OWQ5OTdhZmRjODBhNzdhZDI5ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkKrnAtkhb34j+m8nZqDI3Somsz
y8B6QWYHfxvPbbDYi2qo6QQfIyDOBHzFT58sNwdoBMm0PjYiLlB0eXJaava19hgY
DYwgTdpPk3Ej2JEIXaWf6vohMvwTjMlcs/wiWzLBS+Ft+bZNePMZvdYLRUbeAmQp
UDChR5rCBgDEXvpR14i1Zw5FNdN1EgkOakUyxE8opGvdWISqvJmcWGwvuiK0cbFI
2O8EODI95FNCpc632OKe6khJmeiLGvWZmeeeGeBoi5ICKGLHLLmljG53fI6PVNu/
ehODftBrggLjNreRorVUs17KZlyU14zjHZlpnwn6KBvra0fGpy1GToTtFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM7CsEW/9cvpV5nZl6/cgKd60p4nMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvenNLd1JiXzF5LWxYbWRtWHI5eUFwM3JTbmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhDRgjAN
BgkqhkiG9w0BAQsFAAOCAQEAXvJXBp+QrEuUYQHRk5PJhHd/hOmpmc/PaXfCEQc4
ll3mAn9E/PvTIgPUmJa5StKomEtuQnHPWnv8y9wAhe25Kadh/Xkccaj1VfXzqzjs
/WSactYgHy+TX+DU1zFylJpvEm3rdoypde9NFZlJS1g60ENCoCB8jLbu4wQmrzkP
Ofe9P3p22Q0ofcaycJODBrsNBVgxOKrp+6S2rk1tKD09PiOnYgQaQAneaXWBV4Ix
iS0804+hcacD8+Tw0l7nngpsbEubsnwkZ1LFr0cFFlC8pEAOCx13VBYOcK8kE3kw
gWOKQbFHG7LCmz/5QB7iWfi0df5JW+LVrWyrUdhuPZ2xBg==
-----END CERTIFICATE-----