Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QDTBEvtIM_2OGFAzQmjfnPpX9_U.roa
File:                     QDTBEvtIM_2OGFAzQmjfnPpX9_U.roa (raw, json)
Hash identifier:          ZFFoM6eZpUn6DNFclAwGMjM6nokCSr1q35aO4rVsDj4=
Subject key identifier:   40:34:C1:12:FB:48:33:FD:8E:18:50:33:42:68:DF:9C:FA:57:F7:F5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185780D6716716DFC3A7F4294692ABD92AE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QDTBEvtIM_2OGFAzQmjfnPpX9_U.roa
Signing time:             Tue 03 Jan 2023 14:33:42 +0000
ROA not before:           Tue 03 Jan 2023 14:33:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203442
IP address blocks:        45.148.118.0/24 maxlen: 24
                          2a0e:97c0:bc0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:78:0d:67:16:71:6d:fc:3a:7f:42:94:69:2a:bd:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  3 14:33:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4034c112fb4833fd8e1850334268df9cfa57f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:8f:0a:2f:b8:f4:11:0c:3b:e5:67:0d:bc:
                    39:d0:54:a3:93:17:00:c7:82:ac:3a:36:df:6a:16:
                    45:11:56:aa:4a:77:01:db:b0:eb:08:ef:21:2d:27:
                    6b:57:51:7c:5b:98:d7:7f:97:42:4c:2e:18:ed:46:
                    a6:15:16:aa:a2:4b:a6:fd:f4:22:da:3c:fa:19:9e:
                    8c:70:ce:36:a1:ef:a5:8f:d1:58:76:dc:0f:5e:7c:
                    f5:e2:31:44:8d:a3:cb:67:35:f2:ec:07:ab:5f:a6:
                    6b:de:fd:4e:88:92:56:41:c6:07:05:8b:52:cd:13:
                    a6:1b:db:28:9d:cd:ec:79:81:c1:55:fe:b9:aa:8e:
                    c6:f8:78:05:4b:21:50:79:1f:f9:0a:dc:23:c3:a6:
                    bf:5e:cf:0c:59:40:d3:ad:23:de:75:04:8b:5d:e5:
                    50:16:2c:c9:3e:b0:e2:99:78:2b:85:d3:1f:c3:07:
                    b8:b5:80:d1:bb:e7:58:fb:9c:b7:4e:c7:a2:ba:b7:
                    d3:70:69:84:d6:d9:20:a6:7a:3c:b2:69:0d:4b:0c:
                    92:3b:63:a4:a7:d1:dd:b2:07:28:82:4a:8b:96:34:
                    08:bb:21:65:15:c3:81:ff:9a:4a:82:84:63:f6:12:
                    44:8a:a2:b5:e9:b2:f3:27:15:e2:da:6d:f3:4e:33:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:C1:12:FB:48:33:FD:8E:18:50:33:42:68:DF:9C:FA:57:F7:F5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QDTBEvtIM_2OGFAzQmjfnPpX9_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.118.0/24
                IPv6:
                  2a0e:97c0:bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c6:81:e5:f9:ec:d6:1c:5c:58:53:27:c1:50:13:ed:37:5e:04:
         84:b7:2b:d3:e4:7b:4c:c5:7f:27:5b:07:87:8e:b2:8d:e5:43:
         31:a8:90:9a:37:2a:6a:34:53:88:a3:43:ed:ca:08:bb:c2:15:
         ff:73:65:51:47:f7:50:55:6f:7e:0d:fe:80:a6:12:24:7b:e0:
         17:83:51:34:c7:67:39:bb:6c:8c:b8:f8:18:c2:37:f2:f5:91:
         45:b9:8c:f8:e4:1d:e4:62:42:1d:af:54:4c:2d:fa:13:8a:69:
         58:89:fa:a3:00:f7:1a:9d:52:32:a3:a7:2d:9f:8c:44:8b:4c:
         5c:2e:bf:4e:ce:8a:95:48:41:39:7e:22:23:74:6c:e8:ff:9b:
         5b:50:a5:af:ae:b2:7d:18:ef:36:ea:a3:03:67:56:81:d3:5c:
         c8:4b:5a:7e:89:b0:6e:b7:17:18:50:36:58:9b:55:cf:de:4a:
         75:3a:80:6d:6a:6e:18:1b:d3:03:02:17:45:51:d9:c0:51:19:
         b9:93:13:2b:6d:fb:c6:39:99:7a:d8:ad:19:02:a6:b6:a6:1a:
         e6:be:55:79:89:96:3d:c6:b5:3a:0e:3f:ec:a3:6a:0b:2b:71:
         c7:11:f4:f0:71:a2:e0:6c:4e:94:5a:bc:d7:28:f9:f3:83:c5:
         8f:be:e7:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV4DWcWcW38On9ClGkqvZKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAzMTQzMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM0YzExMmZiNDgzM2ZkOGUxODUwMzM0MjY4ZGY5Y2ZhNTdmN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2GPCi+49BEMO+VnDbw50FSjkxcA
x4KsOjbfahZFEVaqSncB27DrCO8hLSdrV1F8W5jXf5dCTC4Y7UamFRaqokum/fQi
2jz6GZ6McM42oe+lj9FYdtwPXnz14jFEjaPLZzXy7AerX6Zr3v1OiJJWQcYHBYtS
zROmG9sonc3seYHBVf65qo7G+HgFSyFQeR/5Ctwjw6a/Xs8MWUDTrSPedQSLXeVQ
FizJPrDimXgrhdMfwwe4tYDRu+dY+5y3TseiurfTcGmE1tkgpno8smkNSwySO2Ok
p9HdsgcogkqLljQIuyFlFcOB/5pKgoRj9hJEiqK16bLzJxXi2m3zTjMhLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEA0wRL7SDP9jhhQM0Jo35z6V/f1MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUURUQkV2dElNXzJPR0ZBelFtamZuUHBYOV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZR2MA8E
AgACMAkDBwQqDpfAC8AwDQYJKoZIhvcNAQELBQADggEBAMaB5fns1hxcWFMnwVAT
7TdeBIS3K9Pke0zFfydbB4eOso3lQzGokJo3Kmo0U4ijQ+3KCLvCFf9zZVFH91BV
b34N/oCmEiR74BeDUTTHZzm7bIy4+BjCN/L1kUW5jPjkHeRiQh2vVEwt+hOKaViJ
+qMA9xqdUjKjpy2fjESLTFwuv07OipVIQTl+IiN0bOj/m1tQpa+usn0Y7zbqowNn
VoHTXMhLWn6JsG63FxhQNlibVc/eSnU6gG1qbhgb0wMCF0VR2cBRGbmTEytt+8Y5
mXrYrRkCpramGua+VXmJlj3GtToOP+yjagsrcccR9PBxouBsTpRavNco+fODxY++
57U=
-----END CERTIFICATE-----