Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa
File:                     JaVF4ETOXRikbpdBCHqTzGBFEoY.roa (raw, json)
Hash identifier:          YTgdHbKoj/V1callinNKhXZ5bdHot0jAiS/9VTiB5Hg=
Subject key identifier:   25:A5:45:E0:44:CE:5D:18:A4:6E:97:41:08:7A:93:CC:60:45:12:86
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       01867E7897B9D5E92397044AC3B181F35481
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa
Signing time:             Thu 23 Feb 2023 13:31:17 +0000
ROA not before:           Thu 23 Feb 2023 13:31:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39521
IP address blocks:        188.253.8.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:78:97:b9:d5:e9:23:97:04:4a:c3:b1:81:f3:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb 23 13:31:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25a545e044ce5d18a46e9741087a93cc60451286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:e3:75:c8:5f:ec:82:84:e9:67:4d:ec:9e:
                    01:66:9f:66:d6:b3:ca:61:af:ae:92:c4:b1:8c:a7:
                    1b:d7:4a:78:30:93:19:a0:1c:1b:ca:b8:24:20:5a:
                    aa:58:e0:13:d6:69:66:2d:61:c8:6f:43:de:e1:a5:
                    98:4d:17:1b:63:86:4d:66:4f:fb:cd:2b:ac:be:3c:
                    bc:fe:9c:68:ce:6b:6a:3a:7f:10:93:d9:f5:9e:3b:
                    57:91:a2:43:d0:07:78:9d:18:65:dd:74:91:9f:f4:
                    72:b6:55:8f:25:9e:a5:30:3b:53:9b:11:a6:2b:69:
                    fb:08:45:27:87:c2:13:eb:dc:fe:2e:d2:08:30:c5:
                    36:08:63:6b:3a:d3:19:e7:9b:20:6f:f5:e9:d4:7f:
                    b8:ef:8a:b6:1c:ec:97:50:a9:8e:f9:d3:30:dd:d2:
                    5f:ef:d6:ed:d8:8c:3a:53:19:7b:42:93:69:02:1a:
                    a3:fd:1a:22:33:35:db:af:0f:6b:36:8c:7f:ea:f8:
                    86:07:d2:9e:0b:19:05:2f:67:4d:94:9b:4c:79:2d:
                    e4:2b:02:ae:8d:26:5e:c2:b5:8a:37:07:a8:73:12:
                    4d:72:bd:13:e4:bd:d3:54:1d:cc:e8:dc:4d:fb:fb:
                    e9:ba:a0:02:9c:bc:31:05:86:73:81:f0:5a:c4:69:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A5:45:E0:44:CE:5D:18:A4:6E:97:41:08:7A:93:CC:60:45:12:86
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/JaVF4ETOXRikbpdBCHqTzGBFEoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.253.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:03:59:fb:c7:ce:1a:0f:d8:11:34:86:b8:49:d7:e4:2d:
         55:c8:27:c9:31:a9:69:26:61:6c:05:02:8c:9b:fd:a0:81:1f:
         45:b9:b5:e4:08:66:1c:13:f0:3d:fc:50:d5:45:f2:40:aa:f9:
         e8:98:c0:fc:18:8e:f0:70:be:ab:f4:f3:7a:a2:94:47:6d:cd:
         91:0f:1c:53:38:65:3c:c1:65:c0:5f:1a:df:8c:be:02:c8:f8:
         a6:e3:82:d8:e2:ed:36:8a:01:8e:be:c2:50:0f:fb:33:a9:24:
         dc:c1:25:5b:d7:4a:4d:4d:50:40:79:5a:77:e3:65:ce:d3:6a:
         b2:88:54:e1:39:59:52:d5:21:9d:57:5d:b6:d9:ee:0d:3e:06:
         0b:f3:aa:20:54:e7:3e:77:ef:e7:a1:3c:45:cb:99:5d:76:4e:
         17:0b:4c:30:87:73:44:1e:d0:b8:2f:7d:46:8f:12:4b:52:6b:
         c2:c2:5c:e7:12:2d:e2:f3:39:93:97:72:27:25:10:9c:3e:75:
         0a:6a:75:e6:09:26:6b:f2:db:85:6e:37:5e:9b:02:74:88:bb:
         c1:8a:1d:11:3e:3f:2d:20:4c:2e:90:91:1e:2a:63:90:9e:70:
         80:51:85:72:18:1e:2b:c4:51:f6:34:56:4e:57:01:79:2c:c9:
         17:3a:b6:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ+eJe51ekjlwRKw7GB81SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMjIzMTMzMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWE1NDVlMDQ0Y2U1ZDE4YTQ2ZTk3NDEwODdhOTNjYzYwNDUxMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu/jdchf7IKE6WdN7J4BZp9m1rPK
Ya+uksSxjKcb10p4MJMZoBwbyrgkIFqqWOAT1mlmLWHIb0Pe4aWYTRcbY4ZNZk/7
zSusvjy8/pxozmtqOn8Qk9n1njtXkaJD0Ad4nRhl3XSRn/RytlWPJZ6lMDtTmxGm
K2n7CEUnh8IT69z+LtIIMMU2CGNrOtMZ55sgb/Xp1H+474q2HOyXUKmO+dMw3dJf
79bt2Iw6Uxl7QpNpAhqj/RoiMzXbrw9rNox/6viGB9KeCxkFL2dNlJtMeS3kKwKu
jSZewrWKNweocxJNcr0T5L3TVB3M6NxN+/vpuqACnLwxBYZzgfBaxGl68QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWlReBEzl0YpG6XQQh6k8xgRRKGMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvSmFWRjRFVE9YUmlrYnBkQkNIcVR6R0JGRW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvP0IMA0G
CSqGSIb3DQEBCwUAA4IBAQAS4wNZ+8fOGg/YETSGuEnX5C1VyCfJMalpJmFsBQKM
m/2ggR9FubXkCGYcE/A9/FDVRfJAqvnomMD8GI7wcL6r9PN6opRHbc2RDxxTOGU8
wWXAXxrfjL4CyPim44LY4u02igGOvsJQD/szqSTcwSVb10pNTVBAeVp342XO02qy
iFThOVlS1SGdV1222e4NPgYL86ogVOc+d+/noTxFy5lddk4XC0wwh3NEHtC4L31G
jxJLUmvCwlznEi3i8zmTl3InJRCcPnUKanXmCSZr8tuFbjdemwJ0iLvBih0RPj8t
IEwukJEeKmOQnnCAUYVyGB4rxFH2NFZOVwF5LMkXOrY/
-----END CERTIFICATE-----