Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/m-SOzqOxGBIG8gzTp1GLv4_uX6U.roa
File:                     m-SOzqOxGBIG8gzTp1GLv4_uX6U.roa (raw, json)
Hash identifier:          3zIUy0C0TgP2n9Tfho2As7/JeRD7L+De8kbFeNAZn2I=
Subject key identifier:   9B:E4:8E:CE:A3:B1:18:12:06:F2:0C:D3:A7:51:8B:BF:8F:EE:5F:A5
Certificate issuer:       /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial:       0189DEA8E6487B9FDD95977619F54239CC78
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/m-SOzqOxGBIG8gzTp1GLv4_uX6U.roa
Signing time:             Thu 10 Aug 2023 08:55:58 +0000
ROA not before:           Thu 10 Aug 2023 08:55:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199334
IP address blocks:        159.255.146.0/24 maxlen: 24
                          2a13:c680::/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:de:a8:e6:48:7b:9f:dd:95:97:76:19:f5:42:39:cc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
        Validity
            Not Before: Aug 10 08:55:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9be48ecea3b1181206f20cd3a7518bbf8fee5fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:ae:b8:fe:07:b8:22:c2:16:d0:94:21:89:
                    25:b6:c8:a4:5a:15:c9:a7:37:8c:a8:e1:0e:1d:e6:
                    2f:89:5b:30:d9:50:a0:83:03:4b:55:f3:b9:46:0d:
                    3d:d9:31:97:19:69:60:47:48:c0:d2:d4:3f:58:57:
                    8b:7f:8e:d7:43:90:9a:3d:34:42:0b:98:81:78:c4:
                    4f:e7:d3:5d:b6:ee:78:81:a5:e4:f9:3e:60:bb:25:
                    af:6b:35:e9:04:b6:fb:fd:43:e4:bf:55:8e:e5:60:
                    4e:51:ec:5e:fd:1c:0f:34:52:35:a7:74:2a:91:28:
                    a4:e1:25:db:e9:19:38:44:be:5e:bc:6f:f7:76:ec:
                    a8:19:da:85:96:fb:52:f5:fb:f2:8e:de:5d:7e:a6:
                    93:81:e3:bb:28:4b:0b:14:95:fe:af:9a:cf:b0:fa:
                    7d:87:0d:aa:26:57:19:04:9e:0c:23:61:da:23:f3:
                    0f:90:ba:cc:a4:a6:d2:d7:08:2e:5f:d1:ae:b6:ef:
                    64:c7:cb:ae:2d:74:8d:0e:0c:95:c6:d4:cd:da:24:
                    6b:65:7a:8c:63:96:fc:df:f0:51:b6:d4:46:75:9f:
                    9b:46:8e:1b:b2:13:89:3a:32:c2:6f:a8:52:d9:e0:
                    e4:e3:8f:fb:14:d9:71:1d:d7:85:2c:fa:4e:1e:6b:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E4:8E:CE:A3:B1:18:12:06:F2:0C:D3:A7:51:8B:BF:8F:EE:5F:A5
            X509v3 Authority Key Identifier:
                keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/m-SOzqOxGBIG8gzTp1GLv4_uX6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.255.146.0/24
                IPv6:
                  2a13:c680::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:24:bc:d5:80:ab:f6:12:18:0e:52:42:ad:65:cc:25:4c:
         6d:e9:6c:ca:3c:bc:d0:de:3d:31:3e:e9:af:53:1c:c4:69:0f:
         d6:75:20:c0:16:00:b4:49:94:dc:79:d4:ed:e0:43:b0:ba:c3:
         aa:d9:26:c7:e4:f2:04:d4:64:a9:88:f0:8e:9d:90:e6:82:92:
         19:8e:20:97:2e:a2:6d:3f:5b:f9:83:84:af:03:9d:0e:e4:16:
         f6:0f:08:6b:36:ed:88:93:cc:8f:ef:2a:e3:7d:50:e1:f8:a5:
         32:f4:88:5a:d4:ee:b6:bb:d7:4e:28:cf:47:ad:17:c7:ac:a8:
         a6:09:a3:d1:b7:07:da:3c:41:9c:40:94:9b:49:69:f4:a1:2d:
         61:a5:1e:d3:94:5f:c8:aa:e8:96:05:c0:49:48:bb:a5:48:8f:
         03:1f:dc:62:16:85:5f:df:9f:c9:95:86:25:24:40:78:cf:ef:
         f7:1d:40:c2:54:3c:91:80:d6:97:04:d8:92:4e:90:bb:46:c8:
         fe:52:be:c4:b5:6b:28:92:1a:38:da:27:8e:66:83:73:90:eb:
         2a:6e:d0:66:cb:fe:fd:3f:3d:55:51:c9:08:1b:bf:51:19:8c:
         4e:0e:af:fe:94:40:c2:78:a0:40:e8:53:58:fb:0e:6d:79:6e:
         b6:ae:26:8c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYneqOZIe5/dlZd2GfVCOcx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWJhMjlhNzVhZTEzMjVjMDM4MmZiNDg0YjMyMWQ2OGQx
NTQzODQwHhcNMjMwODEwMDg1NTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU0OGVjZWEzYjExODEyMDZmMjBjZDNhNzUxOGJiZjhmZWU1ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMmuuP4HuCLCFtCUIYkltsikWhXJ
pzeMqOEOHeYviVsw2VCggwNLVfO5Rg092TGXGWlgR0jA0tQ/WFeLf47XQ5CaPTRC
C5iBeMRP59Ndtu54gaXk+T5guyWvazXpBLb7/UPkv1WO5WBOUexe/RwPNFI1p3Qq
kSik4SXb6Rk4RL5evG/3duyoGdqFlvtS9fvyjt5dfqaTgeO7KEsLFJX+r5rPsPp9
hw2qJlcZBJ4MI2HaI/MPkLrMpKbS1wguX9Gutu9kx8uuLXSNDgyVxtTN2iRrZXqM
Y5b83/BRttRGdZ+bRo4bshOJOjLCb6hS2eDk44/7FNlxHdeFLPpOHmsdWwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJvkjs6jsRgSBvIM06dRi7+P7l+lMB8GA1UdIwQY
MBaAFBWbopp1rhMlwDgvtISzIdaNFUOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQt
Y2FmNGZhMDcyNjgyLzEvbS1TT3pxT3hHQklHOGd6VHAxR0x2NF91WDZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDAxOTUtN2U3Yi00ZTk5LWE1MmQtY2FmNGZhMDcyNjgy
LzEvRlp1aW1uV3VFeVhBT0MtMGhMTWgxbzBWUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAn/+SMA0E
AgACMAcDBQMqE8aAMA0GCSqGSIb3DQEBCwUAA4IBAQBtlSS81YCr9hIYDlJCrWXM
JUxt6WzKPLzQ3j0xPumvUxzEaQ/WdSDAFgC0SZTcedTt4EOwusOq2SbH5PIE1GSp
iPCOnZDmgpIZjiCXLqJtP1v5g4SvA50O5Bb2DwhrNu2Ik8yP7yrjfVDh+KUy9Iha
1O62u9dOKM9HrRfHrKimCaPRtwfaPEGcQJSbSWn0oS1hpR7TlF/IquiWBcBJSLul
SI8DH9xiFoVf35/JlYYlJEB4z+/3HUDCVDyRgNaXBNiSTpC7Rsj+Ur7EtWsokho4
2ieOZoNzkOsqbtBmy/79Pz1VUckIG79RGYxODq/+lEDCeKBA6FNY+w5teW62riaM
-----END CERTIFICATE-----