Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/PUdEOsM_J62wnKglvK-LPKHXPvU.roa
File:                     PUdEOsM_J62wnKglvK-LPKHXPvU.roa (raw, json)
Hash identifier:          HWHxsaF/pJ9YDCRihQZv/fZNVHjlCFGYWyM9vRnP7LU=
Subject key identifier:   3D:47:44:3A:C3:3F:27:AD:B0:9C:A8:25:BC:AF:8B:3C:A1:D7:3E:F5
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       018857558F1D89855821F6D532ED529B02F1
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/PUdEOsM_J62wnKglvK-LPKHXPvU.roa
Signing time:             Fri 26 May 2023 09:13:24 +0000
ROA not before:           Fri 26 May 2023 09:13:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        2a0c:4144:200::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:55:8f:1d:89:85:58:21:f6:d5:32:ed:52:9b:02:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: May 26 09:13:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d47443ac33f27adb09ca825bcaf8b3ca1d73ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:02:b5:95:57:5d:f5:11:96:1a:c4:85:97:
                    9c:fa:0f:80:08:78:a2:47:5b:e6:9c:f9:50:a3:ec:
                    0f:28:6f:36:66:d9:ba:fd:cd:63:0e:63:3c:fc:a3:
                    d8:ac:9e:44:04:64:87:b6:b8:65:93:1b:1b:8c:79:
                    04:b0:b0:33:64:1c:dc:be:7a:77:d6:84:ea:18:e5:
                    a2:51:99:c2:f0:cf:07:d1:0c:98:77:61:58:02:40:
                    6f:11:1f:5b:18:94:c2:d4:1d:34:77:d0:22:4e:ba:
                    66:7b:a8:9a:9e:3d:f2:e1:8c:2b:26:53:e8:69:1d:
                    b9:33:9f:cc:32:22:3c:7c:58:ac:bb:18:31:6b:94:
                    15:04:92:40:66:c0:a5:a5:96:89:59:67:25:84:9e:
                    e4:5d:65:dd:8d:5e:7c:0b:f7:a4:02:6a:39:39:62:
                    a0:c7:87:57:e2:15:ea:6f:5c:3f:b9:f8:2d:f8:9c:
                    ec:be:cb:9c:39:7d:9d:fc:e8:99:e9:dd:8a:09:5e:
                    a0:7c:7c:bd:81:e3:14:ab:f1:ed:0c:30:32:1b:df:
                    a4:b2:f7:48:75:5b:fc:dc:1b:41:a5:c9:7f:35:97:
                    0c:b1:60:18:d5:ce:59:a4:b3:ec:e2:c3:35:2f:b4:
                    6f:e9:c7:13:7b:0a:67:62:4f:b9:1a:ce:74:8e:b5:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:47:44:3A:C3:3F:27:AD:B0:9C:A8:25:BC:AF:8B:3C:A1:D7:3E:F5
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/PUdEOsM_J62wnKglvK-LPKHXPvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:4144:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:b9:41:a8:74:bf:78:91:07:c9:29:77:27:30:3b:45:9e:
         60:6e:c2:3c:61:7b:9a:59:58:a2:fc:0a:5c:8d:d5:d1:4a:61:
         6a:30:57:4c:1a:0b:09:38:85:6b:b7:dd:b4:2d:33:66:94:f7:
         1d:49:ec:3d:4e:fa:92:c1:f8:33:48:c7:63:df:9c:d3:4c:da:
         99:34:d2:03:65:da:11:e1:be:69:da:13:4b:0f:cb:b2:08:b6:
         42:2a:db:89:dd:07:d9:29:9b:06:a5:6d:58:0f:6d:61:63:d6:
         6f:8b:a1:bf:f4:d2:c2:59:30:e2:79:66:27:80:d0:f0:01:2a:
         99:b0:4b:7e:cf:ce:b8:a0:a6:b1:de:0c:5c:73:24:b5:40:d5:
         c6:94:d0:e6:fe:c8:f1:c9:5e:85:4b:79:6f:b4:36:d2:a5:bb:
         58:55:bc:84:ae:d9:d7:f7:6b:eb:bd:26:71:1c:c5:b4:78:ba:
         01:49:b7:6e:8a:3b:42:8b:0f:5c:98:bb:6c:23:d3:7c:82:42:
         2b:c7:f6:29:99:b4:ee:50:95:f7:94:d8:b3:12:f6:89:11:7a:
         d0:7b:ce:50:78:b2:d8:29:62:de:2e:72:47:49:b5:d1:7f:16:
         b8:f6:3b:9b:a8:74:df:c9:23:0b:5b:33:f4:37:25:1e:ee:1c:
         50:85:01:52
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYhXVY8diYVYIfbVMu1SmwLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1
ODEzOTAwHhcNMjMwNTI2MDkxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDQ3NDQzYWMzM2YyN2FkYjA5Y2E4MjViY2FmOGIzY2ExZDczZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMCtZVXXfURlhrEhZec+g+ACHii
R1vmnPlQo+wPKG82Ztm6/c1jDmM8/KPYrJ5EBGSHtrhlkxsbjHkEsLAzZBzcvnp3
1oTqGOWiUZnC8M8H0QyYd2FYAkBvER9bGJTC1B00d9AiTrpme6ianj3y4YwrJlPo
aR25M5/MMiI8fFisuxgxa5QVBJJAZsClpZaJWWclhJ7kXWXdjV58C/ekAmo5OWKg
x4dX4hXqb1w/ufgt+JzsvsucOX2d/OiZ6d2KCV6gfHy9geMUq/HtDDAyG9+ksvdI
dVv83BtBpcl/NZcMsWAY1c5ZpLPs4sM1L7Rv6ccTewpnYk+5Gs50jrXaIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD1HRDrDPyetsJyoJbyvizyh1z71MB8GA1UdIwQY
MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt
YTIyZmZlZTRhNTE1LzEvUFVkRU9zTV9KNjJ3bktnbHZLLUxQS0hYUHZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1
LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxBRAIA
MA0GCSqGSIb3DQEBCwUAA4IBAQB/6blBqHS/eJEHySl3JzA7RZ5gbsI8YXuaWVii
/ApcjdXRSmFqMFdMGgsJOIVrt920LTNmlPcdSew9TvqSwfgzSMdj35zTTNqZNNID
ZdoR4b5p2hNLD8uyCLZCKtuJ3QfZKZsGpW1YD21hY9Zvi6G/9NLCWTDieWYngNDw
ASqZsEt+z864oKax3gxccyS1QNXGlNDm/sjxyV6FS3lvtDbSpbtYVbyErtnX92vr
vSZxHMW0eLoBSbduijtCiw9cmLtsI9N8gkIrx/YpmbTuUJX3lNizEvaJEXrQe85Q
eLLYKWLeLnJHSbXRfxa49jubqHTfySMLWzP0NyUe7hxQhQFS
-----END CERTIFICATE-----