Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hys3D6pTkVSaAZIYAW5YeJ_At64.roa
File:                     Hys3D6pTkVSaAZIYAW5YeJ_At64.roa (raw, json)
Hash identifier:          WKDZWfbgpWHkEMN0CMfbOECpwjoxcOg9elgxC/N1mAo=
Subject key identifier:   1F:2B:37:0F:AA:53:91:54:9A:01:92:18:01:6E:58:78:9F:C0:B7:AE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186A2DF05AD2D09A911AF42393D717814E7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hys3D6pTkVSaAZIYAW5YeJ_At64.roa
Signing time:             Thu 02 Mar 2023 15:09:30 +0000
ROA not before:           Thu 02 Mar 2023 15:09:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        45.148.117.0/24 maxlen: 24
                          2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a2:df:05:ad:2d:09:a9:11:af:42:39:3d:71:78:14:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  2 15:09:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f2b370faa5391549a019218016e58789fc0b7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a7:d9:b8:6c:c4:32:be:bd:31:c2:3a:d4:af:
                    ff:b7:80:d9:a5:0b:f2:d1:74:34:9f:8d:d7:ba:58:
                    c1:d3:bf:00:03:06:01:cb:f1:01:c2:45:73:f8:e6:
                    42:3a:0b:85:9b:65:63:99:4f:6b:7f:14:e2:38:a2:
                    8e:86:6a:16:fc:e1:2e:4d:dc:b2:3a:a9:81:e3:59:
                    a6:cc:05:31:69:62:1e:26:c3:54:ba:27:8c:df:5c:
                    5a:e2:90:4e:c1:4b:c0:d6:af:f7:2a:44:ea:bb:fb:
                    c8:43:33:bf:30:14:e9:b6:89:2b:d1:a9:06:7a:76:
                    cd:de:20:ef:90:46:76:c8:8c:62:f5:00:ee:f0:07:
                    65:0b:cc:be:81:84:1d:e6:0a:38:98:6d:11:f6:2f:
                    c4:cd:7b:02:8b:2d:7a:e2:63:32:8d:ed:82:38:05:
                    a6:37:88:ba:ad:5f:39:06:35:1f:06:ae:dc:f9:2b:
                    50:9b:9c:d3:30:a0:44:e6:41:50:67:48:68:33:6d:
                    04:96:48:ef:61:ce:43:c7:4b:f9:44:08:f5:81:bf:
                    a2:e1:9b:a3:a7:16:23:dc:f0:5a:20:23:38:5a:7b:
                    f8:21:59:a0:92:d2:16:fd:79:6b:93:38:4b:d6:9d:
                    a9:3b:22:bb:ce:01:13:a7:8e:fa:e7:83:62:cb:9f:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:37:0F:AA:53:91:54:9A:01:92:18:01:6E:58:78:9F:C0:B7:AE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hys3D6pTkVSaAZIYAW5YeJ_At64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.117.0/24
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:90:4d:4d:ce:60:de:eb:0f:b3:09:d5:31:ca:e2:67:a4:
         cb:a6:04:23:69:c2:b7:d5:24:75:ad:45:d2:8a:44:63:b6:e9:
         2b:85:a1:18:c6:8d:ef:b1:50:83:b3:fe:ed:27:a0:c6:d9:41:
         a0:cc:7a:3f:32:b1:a5:ac:18:34:a4:c4:5d:7e:8a:60:47:44:
         f4:5a:ba:95:04:06:71:97:10:2f:ef:14:80:8f:b8:c2:35:c7:
         65:4e:81:59:49:80:4d:6a:3b:73:51:e6:5e:40:12:30:8c:c9:
         4a:9b:33:0f:bb:3c:82:4b:61:39:d2:6b:75:1b:bf:6b:81:c1:
         74:62:1d:bc:94:93:3b:99:51:7f:61:3d:71:58:8e:e4:41:d6:
         38:c4:9b:01:f5:ba:c6:f7:ef:64:b1:af:7f:ac:9b:9f:48:ae:
         3e:32:71:df:a5:71:a1:57:b2:f0:7f:f8:ce:e6:4b:62:f2:3d:
         56:a8:47:eb:15:1f:e7:6f:bc:00:f3:ae:7c:72:c2:b8:cb:ce:
         0e:0d:7e:2a:4e:33:ff:ca:8d:26:25:b9:63:ff:7e:68:43:7f:
         da:e0:15:57:43:8c:0c:99:99:5d:fa:33:35:f7:22:37:d5:ee:
         2a:d0:6a:ac:07:87:75:ee:fe:54:24:0f:b6:40:04:d0:47:a3:
         f5:29:1e:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYai3wWtLQmpEa9COT1xeBTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAyMTUwOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjJiMzcwZmFhNTM5MTU0OWEwMTkyMTgwMTZlNTg3ODlmYzBiN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KfZuGzEMr69McI61K//t4DZpQvy
0XQ0n43XuljB078AAwYBy/EBwkVz+OZCOguFm2VjmU9rfxTiOKKOhmoW/OEuTdyy
OqmB41mmzAUxaWIeJsNUuieM31xa4pBOwUvA1q/3KkTqu/vIQzO/MBTptokr0akG
enbN3iDvkEZ2yIxi9QDu8AdlC8y+gYQd5go4mG0R9i/EzXsCiy164mMyje2COAWm
N4i6rV85BjUfBq7c+StQm5zTMKBE5kFQZ0hoM20ElkjvYc5Dx0v5RAj1gb+i4Zuj
pxYj3PBaICM4Wnv4IVmgktIW/XlrkzhL1p2pOyK7zgETp47654Niy5/eewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB8rNw+qU5FUmgGSGAFuWHifwLeuMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSHlzM0Q2cFRrVlNhQVpJWUFXNVllSl9BdDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZR1MA8E
AgACMAkDBwAqDrEHHOEwDQYJKoZIhvcNAQELBQADggEBALMVkE1NzmDe6w+zCdUx
yuJnpMumBCNpwrfVJHWtRdKKRGO26SuFoRjGje+xUIOz/u0noMbZQaDMej8ysaWs
GDSkxF1+imBHRPRaupUEBnGXEC/vFICPuMI1x2VOgVlJgE1qO3NR5l5AEjCMyUqb
Mw+7PIJLYTnSa3Ubv2uBwXRiHbyUkzuZUX9hPXFYjuRB1jjEmwH1usb372Sxr3+s
m59Irj4ycd+lcaFXsvB/+M7mS2LyPVaoR+sVH+dvvADzrnxywrjLzg4NfipOM//K
jSYluWP/fmhDf9rgFVdDjAyZmV36MzX3IjfV7irQaqwHh3Xu/lQkD7ZABNBHo/Up
Hgk=
-----END CERTIFICATE-----