Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-p6EJ9UOfS96-2Q4RBsHDFpxeOA.roa
File:                     1-p6EJ9UOfS96-2Q4RBsHDFpxeOA.roa (raw, json)
Hash identifier:          vw1wc6PIiINDqa5AvS17koiMJAnK/2SeuuVqijfS/dA=
Subject key identifier:   FA:9E:84:27:D5:0E:7D:2F:7A:FB:64:38:44:1B:07:0C:5A:71:78:E0
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01856F42CA92AFDF40842C8C9DA0661CE90C
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-p6EJ9UOfS96-2Q4RBsHDFpxeOA.roa
Signing time:             Sun 01 Jan 2023 21:35:26 +0000
ROA not before:           Sun 01 Jan 2023 21:35:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137409
IP address blocks:        45.8.24.0/24 maxlen: 24
                          45.8.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:ca:92:af:df:40:84:2c:8c:9d:a0:66:1c:e9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Jan  1 21:35:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa9e8427d50e7d2f7afb6438441b070c5a7178e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:4a:11:92:e1:69:30:d6:d8:4c:9f:e2:fa:
                    ea:09:e2:64:ab:e9:27:37:46:37:1c:59:e7:56:bc:
                    27:b1:52:9d:e3:ab:0a:9f:f2:b7:69:93:f1:58:02:
                    60:f2:09:a1:f2:eb:27:c1:49:93:62:15:6d:c8:2a:
                    f4:72:cc:e8:03:1f:59:b8:63:81:24:cd:ef:99:13:
                    33:0c:6b:65:ec:5e:23:f7:c7:24:60:92:ce:f9:67:
                    53:f7:91:e4:32:a6:6b:aa:da:67:49:39:1d:64:10:
                    38:02:36:b6:2c:ce:b0:bd:22:b6:78:74:5b:ea:2f:
                    bc:ca:f0:5c:a0:39:fc:1a:4a:c2:03:d7:c6:c3:be:
                    30:14:a4:8f:08:d0:91:93:49:b5:cb:4b:68:1d:b9:
                    e1:8a:58:c4:18:13:be:d6:a6:00:57:44:d6:1e:86:
                    94:35:49:01:eb:20:35:48:ad:c6:f9:c1:0f:fb:a5:
                    d1:ee:80:c6:60:51:d3:8d:58:51:f9:ec:90:c3:d5:
                    5f:ca:55:68:81:cc:b4:e8:7b:b4:40:df:62:a9:9e:
                    de:e8:9f:91:3a:ca:73:df:ad:58:74:3e:45:1b:f7:
                    a3:b8:76:b3:52:d8:6e:df:cc:ba:e4:5b:6a:3f:23:
                    b3:4d:54:ef:f2:94:09:9d:51:b8:ac:d4:8f:42:4f:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:84:27:D5:0E:7D:2F:7A:FB:64:38:44:1B:07:0C:5A:71:78:E0
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/1-p6EJ9UOfS96-2Q4RBsHDFpxeOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:fb:a7:60:a3:d5:a4:cd:a0:89:be:cc:1b:4d:44:b6:55:
         7e:c7:d3:1a:d1:65:f9:e1:60:49:3a:0b:03:ec:ad:8c:85:72:
         f5:4a:2a:6b:eb:74:ce:06:b5:f1:48:ed:13:a3:bb:a8:68:a7:
         8b:12:d7:ed:bc:a2:5c:be:85:bf:91:0e:41:19:ce:84:fa:9b:
         ef:c3:03:b1:e8:77:c6:c1:19:d1:65:40:34:14:a2:f0:cf:3d:
         27:0a:be:1c:c9:34:4b:58:4f:f8:f4:44:9f:df:99:13:d5:47:
         9c:45:73:2f:9d:1d:a4:7c:d6:03:12:a0:2d:96:fe:3d:cc:b6:
         a4:e0:54:0a:94:a4:2a:5b:3b:81:e4:1a:ae:37:92:96:0f:a6:
         40:e7:83:5b:fd:00:e7:9b:51:7d:1b:36:0a:7f:44:80:fc:ab:
         2b:b6:6d:b5:b5:90:36:fd:21:b4:99:42:e5:e8:3c:98:32:44:
         16:b7:0a:a4:d5:51:98:d9:67:28:79:35:0f:cc:4b:84:f6:e7:
         91:d1:44:03:eb:ea:1f:cb:b4:4b:fc:46:63:be:91:8e:4e:0e:
         fb:cb:bf:5d:54:4c:47:f5:6a:c9:67:85:9b:aa:49:42:06:07:
         38:4f:fe:59:ec:09:0e:22:a6:5a:71:2a:d8:39:f2:09:8f:68:
         f8:cc:88:00
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvQsqSr99AhCyMnaBmHOkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjMwMTAxMjEzNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTllODQyN2Q1MGU3ZDJmN2FmYjY0Mzg0NDFiMDcwYzVhNzE3OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdBKEZLhaTDW2Eyf4vrqCeJkq+kn
N0Y3HFnnVrwnsVKd46sKn/K3aZPxWAJg8gmh8usnwUmTYhVtyCr0cszoAx9ZuGOB
JM3vmRMzDGtl7F4j98ckYJLO+WdT95HkMqZrqtpnSTkdZBA4Aja2LM6wvSK2eHRb
6i+8yvBcoDn8GkrCA9fGw74wFKSPCNCRk0m1y0toHbnhiljEGBO+1qYAV0TWHoaU
NUkB6yA1SK3G+cEP+6XR7oDGYFHTjVhR+eyQw9VfylVogcy06Hu0QN9iqZ7e6J+R
Ospz361YdD5FG/ejuHazUthu38y65FtqPyOzTVTv8pQJnVG4rNSPQk9BqwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqehCfVDn0vevtkOEQbBwxacXjgMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvMS1wNkVKOVVPZlM5Ni0yUTRSQnNIREZweGVPQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvNzBiZjhiLWQ4YzQtNDBjMy05MDIyLTYzMzQ4Y2RiZjAy
NC8xL2pod1JaWTBnUWVyeVVDX2xRSTdVazd2VTh4Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0IGDAN
BgkqhkiG9w0BAQsFAAOCAQEAHQr7p2Cj1aTNoIm+zBtNRLZVfsfTGtFl+eFgSToL
A+ytjIVy9Uoqa+t0zga18UjtE6O7qGinixLX7byiXL6Fv5EOQRnOhPqb78MDseh3
xsEZ0WVANBSi8M89Jwq+HMk0S1hP+PREn9+ZE9VHnEVzL50dpHzWAxKgLZb+Pcy2
pOBUCpSkKls7geQarjeSlg+mQOeDW/0A55tRfRs2Cn9EgPyrK7ZttbWQNv0htJlC
5eg8mDJEFrcKpNVRmNlnKHk1D8xLhPbnkdFEA+vqH8u0S/xGY76Rjk4O+8u/XVRM
R/VqyWeFm6pJQgYHOE/+WewJDiKmWnEq2DnyCY9o+MyIAA==
-----END CERTIFICATE-----