Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa
File:                     3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa (raw, json)
Hash identifier:          fmSNgessKuH/iE1TL3pMy2NYA/Bl39PFsIHuGLjKjpo=
Subject key identifier:   DE:0B:7F:49:B5:5C:6D:53:F8:52:47:47:27:21:59:76:A8:94:21:0D
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       018BF6B77A5A2E328B02D7AB2D1EA85F4938
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa
Signing time:             Wed 22 Nov 2023 11:08:21 +0000
ROA not before:           Wed 22 Nov 2023 11:08:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.107.46.0/24 maxlen: 24
                          2a13:7f00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f6:b7:7a:5a:2e:32:8b:02:d7:ab:2d:1e:a8:5f:49:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: Nov 22 11:08:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de0b7f49b55c6d53f852474727215976a894210d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bb:de:99:4c:4d:a8:d8:bb:ba:f9:52:7d:4f:
                    98:11:c5:39:d5:a7:78:62:e4:67:14:c3:0b:77:0a:
                    f7:f1:e9:a3:71:eb:dc:2c:6a:ab:38:ce:b9:a5:b3:
                    be:e1:be:e0:c3:73:5d:aa:5c:8a:9e:b7:bf:b0:8a:
                    ef:9a:35:a8:03:0e:87:46:5e:7f:2a:d5:2e:75:0a:
                    93:3b:c0:89:dd:f2:83:dd:03:7d:f1:91:97:5a:f6:
                    94:24:23:2b:af:3e:31:6b:ec:db:d7:3b:e0:76:f3:
                    e4:4d:03:7f:72:60:09:0b:8e:65:44:dc:61:25:dd:
                    cb:59:a6:59:bf:52:9f:6e:91:4c:00:35:98:e4:88:
                    b9:58:7c:f2:86:7f:4c:04:74:48:19:ab:ba:bc:2e:
                    34:63:f3:09:0a:f1:f9:a2:b5:8f:ad:4d:ca:ff:35:
                    ef:95:64:e8:f9:67:d5:6c:d3:a1:2c:1d:78:ba:4a:
                    89:39:57:cf:75:32:a7:fd:b8:a0:59:ca:74:80:a6:
                    d7:d4:ce:19:f6:9d:f8:77:2c:fd:1c:a3:d3:ec:7c:
                    4d:fc:ce:e3:5b:c5:17:fa:67:c3:87:84:64:7b:67:
                    72:7f:1c:3e:f6:58:3d:ab:c2:23:5d:d2:21:6f:14:
                    b5:2a:c8:b7:1b:16:06:a6:72:95:f1:2e:33:9b:20:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:7F:49:B5:5C:6D:53:F8:52:47:47:27:21:59:76:A8:94:21:0D
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.46.0/24
                IPv6:
                  2a13:7f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:2e:f9:f2:dd:99:8b:fe:00:80:8e:70:8c:73:10:d9:a5:
         e3:a9:02:34:eb:ca:c9:6a:c0:6d:76:ab:c4:e9:3d:99:1f:bb:
         9d:09:22:20:94:a2:ca:5e:9b:a5:e9:8b:78:7a:a4:65:e7:07:
         90:e5:38:db:d7:b1:25:63:f6:02:e5:fb:1a:c6:be:15:a9:ed:
         38:c3:a6:4f:0e:7f:3e:2a:d1:6c:03:57:12:a3:76:1e:6c:35:
         32:3c:c1:9a:35:c6:2f:7d:d3:f3:0d:f7:29:a4:32:6c:c4:14:
         85:15:17:35:f1:32:8f:c5:af:0b:f6:fd:4a:98:d0:79:04:ef:
         ae:ad:b3:51:9a:d0:53:54:17:86:8c:ec:8f:73:b5:38:9d:43:
         5b:e3:b1:20:46:9a:6d:54:00:11:e9:e8:c2:95:3b:dd:c6:60:
         84:48:61:83:02:f3:ca:82:ab:01:96:68:9b:85:3d:3d:05:26:
         4a:4b:27:91:69:76:5f:6d:2a:a9:de:ec:e1:a4:d2:bf:8c:19:
         04:38:be:aa:40:09:36:bb:d2:36:bd:4d:9e:13:31:48:de:43:
         40:76:8a:86:fe:f6:52:2e:c2:af:d1:42:62:92:a7:5d:68:38:
         90:98:b3:38:e1:97:3a:3e:bc:28:c6:90:19:39:47:d6:e1:e3:
         d5:2e:0e:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYv2t3paLjKLAterLR6oX0k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjMxMTIyMTEwODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTBiN2Y0OWI1NWM2ZDUzZjg1MjQ3NDcyNzIxNTk3NmE4OTQyMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrvemUxNqNi7uvlSfU+YEcU51ad4
YuRnFMMLdwr38emjcevcLGqrOM65pbO+4b7gw3NdqlyKnre/sIrvmjWoAw6HRl5/
KtUudQqTO8CJ3fKD3QN98ZGXWvaUJCMrrz4xa+zb1zvgdvPkTQN/cmAJC45lRNxh
Jd3LWaZZv1KfbpFMADWY5Ii5WHzyhn9MBHRIGau6vC40Y/MJCvH5orWPrU3K/zXv
lWTo+WfVbNOhLB14ukqJOVfPdTKn/bigWcp0gKbX1M4Z9p34dyz9HKPT7HxN/M7j
W8UX+mfDh4Rke2dyfxw+9lg9q8IjXdIhbxS1Ksi3GxYGpnKV8S4zmyCD8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN4Lf0m1XG1T+FJHRychWXaolCENMB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvM2d0X1NiVmNiVlA0VWtkSEp5RlpkcWlVSVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWsuMA0E
AgACMAcDBQAqE38AMA0GCSqGSIb3DQEBCwUAA4IBAQAA4i758t2Zi/4AgI5wjHMQ
2aXjqQI068rJasBtdqvE6T2ZH7udCSIglKLKXpul6Yt4eqRl5weQ5Tjb17ElY/YC
5fsaxr4Vqe04w6ZPDn8+KtFsA1cSo3YebDUyPMGaNcYvfdPzDfcppDJsxBSFFRc1
8TKPxa8L9v1KmNB5BO+urbNRmtBTVBeGjOyPc7U4nUNb47EgRpptVAAR6ejClTvd
xmCESGGDAvPKgqsBlmibhT09BSZKSyeRaXZfbSqp3uzhpNK/jBkEOL6qQAk2u9I2
vU2eEzFI3kNAdoqG/vZSLsKv0UJikqddaDiQmLM44Zc6PrwoxpAZOUfW4ePVLg5w
-----END CERTIFICATE-----