Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/m6NhsAKT5xgWVIca3cIWibbjKBw.roa
File:                     m6NhsAKT5xgWVIca3cIWibbjKBw.roa (raw, json)
Hash identifier:          nJaGtOrQCp0gMrLzQp1nX6oissg3BYhw9IzimgRgV78=
Subject key identifier:   9B:A3:61:B0:02:93:E7:18:16:54:87:1A:DD:C2:16:89:B6:E3:28:1C
Certificate issuer:       /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial:       018F95CE1EB6EA4EBABEC60ABC269C1B7F7F
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/m6NhsAKT5xgWVIca3cIWibbjKBw.roa
Signing time:             Mon 20 May 2024 11:41:04 +0000
ROA not before:           Mon 20 May 2024 11:41:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47346
IP address blocks:        94.139.33.0/24 maxlen: 24
                          2a14:1380::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 10:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:ce:1e:b6:ea:4e:ba:be:c6:0a:bc:26:9c:1b:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
        Validity
            Not Before: May 20 11:41:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ba361b00293e7181654871addc21689b6e3281c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:17:e0:9f:f5:40:13:cf:f7:dc:13:10:0b:
                    e5:3a:f8:e4:a6:94:5e:47:fa:7f:ea:91:4b:24:a3:
                    9e:e6:d1:33:0f:f0:f1:9a:d1:94:86:1c:a6:b8:b7:
                    bf:b3:53:86:18:67:4a:7c:c1:ec:11:7d:ea:97:cd:
                    15:09:30:06:67:5d:da:a8:29:57:92:12:00:4c:f1:
                    73:d8:1f:bc:bd:8d:23:a7:ac:ac:6a:5c:3f:36:4d:
                    e9:44:7e:47:c1:ac:ce:10:b7:82:b8:ea:6c:41:16:
                    ff:6a:14:39:67:ea:5a:13:ed:78:d7:2a:c9:33:9b:
                    76:48:10:78:64:7a:52:1f:97:ea:7e:a3:f4:87:fa:
                    91:f9:d8:83:39:84:a6:5e:d9:c0:76:85:29:27:0c:
                    af:a4:fa:de:d8:0d:3c:16:bd:05:06:09:33:7a:2d:
                    3c:8a:cc:36:71:8a:05:94:b0:d9:fc:e5:e2:62:28:
                    3d:8a:bc:ae:f9:95:c7:c1:c1:bf:bc:9a:39:14:ac:
                    bc:4d:70:a0:2c:05:0c:04:d6:26:21:22:7e:c8:01:
                    b7:05:68:e4:be:8d:1c:e3:2a:8a:39:65:89:3f:77:
                    c3:51:87:42:ef:46:94:78:38:97:a4:7c:0c:70:76:
                    26:58:63:f8:0c:cf:9c:07:8a:0a:a3:3c:4f:98:a6:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:61:B0:02:93:E7:18:16:54:87:1A:DD:C2:16:89:B6:E3:28:1C
            X509v3 Authority Key Identifier:
                keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/m6NhsAKT5xgWVIca3cIWibbjKBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.139.33.0/24
                IPv6:
                  2a14:1380::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:f2:e6:e5:3f:4c:13:8a:e2:1e:b8:de:08:81:32:68:98:
         9e:72:76:80:0b:05:63:c6:c1:ad:f3:bd:e5:bf:61:2e:a1:f5:
         b3:bb:d0:c3:e5:e2:4d:af:0f:2c:40:f4:41:bd:d9:0b:3f:bb:
         aa:63:04:31:13:a6:79:ef:fd:e3:a9:1a:8d:ce:81:bb:df:2f:
         42:e9:38:05:e8:7f:75:fa:93:dd:6d:00:3b:f3:37:d6:04:5b:
         70:0f:e5:77:5e:bd:15:6f:ea:e2:5b:ca:8d:bf:aa:71:35:c1:
         aa:e6:65:c5:09:76:cb:83:fa:35:02:47:fb:10:73:fa:09:51:
         c5:ec:d2:29:00:4b:be:5b:7e:9f:1c:ca:ab:cc:b5:6b:b8:58:
         69:53:85:8f:2b:d7:be:80:82:ce:df:d5:34:25:d2:db:6e:8a:
         e0:b7:56:f1:92:ee:b5:06:79:07:a5:6b:c8:42:4b:21:f9:67:
         27:48:65:9b:0a:d6:c3:b0:63:6b:42:ec:97:c5:98:0f:6c:7e:
         87:2c:c0:e4:21:e4:5c:71:cc:5a:85:e2:37:c3:26:46:83:a6:
         47:ad:a9:88:2d:46:1f:4d:2f:87:0a:fc:76:d9:f5:c8:de:92:
         c5:4a:0c:2d:56:77:db:dd:e4:4e:35:56:06:e8:7a:9d:ed:29:
         69:d3:0c:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY+Vzh626k66vsYKvCacG39/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmVkMTFiYjZkNWUyZDZhNmVhYmExOWRhZjYzN2I1M2Y3
NjdlZDUwHhcNMjQwNTIwMTE0MTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmEzNjFiMDAyOTNlNzE4MTY1NDg3MWFkZGMyMTY4OWI2ZTMyODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkgX4J/1QBPP99wTEAvlOvjkppRe
R/p/6pFLJKOe5tEzD/DxmtGUhhymuLe/s1OGGGdKfMHsEX3ql80VCTAGZ13aqClX
khIATPFz2B+8vY0jp6ysalw/Nk3pRH5HwazOELeCuOpsQRb/ahQ5Z+paE+141yrJ
M5t2SBB4ZHpSH5fqfqP0h/qR+diDOYSmXtnAdoUpJwyvpPre2A08Fr0FBgkzei08
isw2cYoFlLDZ/OXiYig9iryu+ZXHwcG/vJo5FKy8TXCgLAUMBNYmISJ+yAG3BWjk
vo0c4yqKOWWJP3fDUYdC70aUeDiXpHwMcHYmWGP4DM+cB4oKozxPmKbU5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJujYbACk+cYFlSHGt3CFom24ygcMB8GA1UdIwQY
MBaAFFVu0Ru21eLWpuq6Gdr2N7U/dn7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYt
MTk5ODY2NWJkNzkzLzEvbTZOaHNBS1Q1eGdXVkljYTNjSVdpYmJqS0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYtMTk5ODY2NWJkNzkz
LzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXoshMA0E
AgACMAcDBQAqFBOAMA0GCSqGSIb3DQEBCwUAA4IBAQA+ZfLm5T9ME4riHrjeCIEy
aJiecnaACwVjxsGt873lv2EuofWzu9DD5eJNrw8sQPRBvdkLP7uqYwQxE6Z57/3j
qRqNzoG73y9C6TgF6H91+pPdbQA78zfWBFtwD+V3Xr0Vb+riW8qNv6pxNcGq5mXF
CXbLg/o1Akf7EHP6CVHF7NIpAEu+W36fHMqrzLVruFhpU4WPK9e+gILO39U0JdLb
borgt1bxku61BnkHpWvIQksh+WcnSGWbCtbDsGNrQuyXxZgPbH6HLMDkIeRcccxa
heI3wyZGg6ZHramILUYfTS+HCvx22fXI3pLFSgwtVnfb3eRONVYG6Hqd7Slp0wxt
-----END CERTIFICATE-----