Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/MDLNBRA0YOEiTass2HjTsdc6XAk.roa
File:                     MDLNBRA0YOEiTass2HjTsdc6XAk.roa (raw, json)
Hash identifier:          IAjGSUKrW8DyawppEoGMd+P9+cXxRhjYQmsOoNVX0sU=
Subject key identifier:   30:32:CD:05:10:34:60:E1:22:4D:AB:2C:D8:78:D3:B1:D7:3A:5C:09
Certificate issuer:       /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial:       018570CC0ADC7E84D2342A19EEA7EAD7BCB2
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/MDLNBRA0YOEiTass2HjTsdc6XAk.roa
Signing time:             Mon 02 Jan 2023 04:44:58 +0000
ROA not before:           Mon 02 Jan 2023 04:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201470
IP address blocks:        155.133.24.0/23 maxlen: 23
                          2a02:28e9::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:cc:0a:dc:7e:84:d2:34:2a:19:ee:a7:ea:d7:bc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
        Validity
            Not Before: Jan  2 04:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3032cd05103460e1224dab2cd878d3b1d73a5c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:e8:6e:89:9c:f9:24:48:5f:22:99:c5:90:
                    16:d9:e0:47:34:a6:a0:8f:4f:8a:b6:9a:42:19:85:
                    ed:76:9a:02:39:b0:ec:d0:9e:74:df:ff:c4:57:70:
                    fb:57:ca:09:f9:66:d3:0e:3a:05:23:36:91:5a:41:
                    a3:5f:8b:4d:b2:db:c4:66:6f:d0:73:0c:cd:f5:92:
                    8d:60:b2:f9:8f:ae:70:36:e8:8f:55:0d:94:c0:2a:
                    fc:41:11:8c:2f:b0:5f:6f:7e:2c:38:23:a1:9b:07:
                    18:59:66:17:06:e4:a9:47:bf:f4:69:c1:07:bd:37:
                    bf:af:a1:22:a7:5f:d2:13:bd:d6:f0:80:9c:92:8b:
                    e6:b6:52:f3:6d:75:e0:a0:49:55:24:14:37:71:98:
                    a2:1d:92:e1:d2:5d:60:8c:45:eb:0b:30:1d:0e:e0:
                    bd:21:0d:1d:f1:17:97:c7:a4:db:d3:8e:90:60:95:
                    88:c1:b2:db:de:a5:f8:ad:a7:2a:9b:1d:e3:5d:4c:
                    50:71:5a:bf:1d:9e:3e:60:db:bd:57:e5:64:cb:8d:
                    f8:f9:d1:11:aa:db:95:8b:1d:de:f4:66:c1:c6:15:
                    4a:fc:c1:4f:6e:30:92:e5:ed:45:26:07:64:e6:bd:
                    e9:f6:84:32:94:d4:60:2a:a4:29:36:27:ea:0d:d8:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:CD:05:10:34:60:E1:22:4D:AB:2C:D8:78:D3:B1:D7:3A:5C:09
            X509v3 Authority Key Identifier:
                keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/MDLNBRA0YOEiTass2HjTsdc6XAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.24.0/23
                IPv6:
                  2a02:28e9::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:2b:0e:3c:29:35:94:37:1a:e0:0a:07:f6:b5:46:ff:2b:
         3b:a3:eb:8e:a7:35:2c:d3:8e:5b:4f:8f:90:75:b4:cf:ef:09:
         fa:e9:bc:71:1c:5e:70:2c:94:cc:59:df:07:4b:b7:a3:95:05:
         ae:5f:bc:e9:10:50:39:4c:13:74:ef:f6:f8:73:b1:6e:99:6a:
         e2:7a:63:e6:f1:e7:85:ca:b7:55:72:28:9f:79:18:97:dc:bc:
         8f:2b:b0:78:2d:16:d7:16:2d:77:02:5d:de:49:c0:52:ac:d0:
         21:6a:16:18:cb:b0:f1:3a:3f:ed:bd:58:55:b5:03:06:3c:81:
         ee:57:f9:e3:64:b2:6e:45:e5:ca:07:95:6a:f0:18:68:60:a6:
         45:e9:5e:0f:30:b2:5e:de:45:9b:46:57:11:5a:0d:37:bd:9e:
         12:94:53:91:24:0e:a3:bf:f1:1b:bd:bf:87:c9:f2:51:1a:91:
         04:f8:72:77:ab:05:1a:9d:88:d0:fc:9a:6e:da:0d:5f:44:f9:
         bf:95:45:19:a4:46:fd:35:6f:b8:97:7f:d2:18:37:1e:1b:86:
         f0:2c:ee:57:c8:e9:84:2f:2e:75:32:39:55:f0:27:65:8a:2b:
         4b:3a:69:26:7a:e9:b6:f3:e9:61:b9:bc:c5:21:b9:29:eb:44:
         5c:d5:3f:a0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwzArcfoTSNCoZ7qfq17yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx
NDlhZmQwHhcNMjMwMTAyMDQ0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDMyY2QwNTEwMzQ2MGUxMjI0ZGFiMmNkODc4ZDNiMWQ3M2E1YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXTobomc+SRIXyKZxZAW2eBHNKag
j0+KtppCGYXtdpoCObDs0J503//EV3D7V8oJ+WbTDjoFIzaRWkGjX4tNstvEZm/Q
cwzN9ZKNYLL5j65wNuiPVQ2UwCr8QRGML7Bfb34sOCOhmwcYWWYXBuSpR7/0acEH
vTe/r6Eip1/SE73W8ICckovmtlLzbXXgoElVJBQ3cZiiHZLh0l1gjEXrCzAdDuC9
IQ0d8ReXx6Tb046QYJWIwbLb3qX4racqmx3jXUxQcVq/HZ4+YNu9V+Vky434+dER
qtuVix3e9GbBxhVK/MFPbjCS5e1FJgdk5r3p9oQylNRgKqQpNifqDdiwwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDAyzQUQNGDhIk2rLNh407HXOlwJMB8GA1UdIwQY
MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt
MzRkNzE0ODVjNTQ3LzEvTURMTkJSQTBZT0VpVGFzczJIalRzZGM2WEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3
LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBm4UYMA0E
AgACMAcDBQAqAijpMA0GCSqGSIb3DQEBCwUAA4IBAQBRuSsOPCk1lDca4AoH9rVG
/ys7o+uOpzUs045bT4+QdbTP7wn66bxxHF5wLJTMWd8HS7ejlQWuX7zpEFA5TBN0
7/b4c7FumWriemPm8eeFyrdVciifeRiX3LyPK7B4LRbXFi13Al3eScBSrNAhahYY
y7DxOj/tvVhVtQMGPIHuV/njZLJuReXKB5Vq8BhoYKZF6V4PMLJe3kWbRlcRWg03
vZ4SlFORJA6jv/Ebvb+HyfJRGpEE+HJ3qwUanYjQ/Jpu2g1fRPm/lUUZpEb9NW+4
l3/SGDceG4bwLO5XyOmELy51MjlV8CdliitLOmkmeum28+lhubzFIbkp60Rc1T+g
-----END CERTIFICATE-----