Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R1Nt-FZfNWvQIb1m6KOV8d7a89g.roa
File:                     R1Nt-FZfNWvQIb1m6KOV8d7a89g.roa (raw, json)
Hash identifier:          Lvi9j7GsAIS22h3RWxiQRHowPJGLUVQA+0w20UznZGw=
Subject key identifier:   47:53:6D:F8:56:5F:35:6B:D0:21:BD:66:E8:A3:95:F1:DE:DA:F3:D8
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       01857079BE251A06BE754D3006B40B57980F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R1Nt-FZfNWvQIb1m6KOV8d7a89g.roa
Signing time:             Mon 02 Jan 2023 03:15:04 +0000
ROA not before:           Mon 02 Jan 2023 03:15:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42440
IP address blocks:        94.183.58.1/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:be:25:1a:06:be:75:4d:30:06:b4:0b:57:98:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jan  2 03:15:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47536df8565f356bd021bd66e8a395f1dedaf3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:38:b0:48:1b:4d:e9:07:21:10:d0:83:08:
                    5c:5b:2c:5e:6d:59:b6:2a:35:89:04:8e:69:4e:26:
                    4a:71:cc:04:b4:73:53:fc:eb:dc:2c:00:16:a5:b9:
                    40:2d:b2:93:52:1a:f7:df:c3:ef:ff:7d:2f:11:c4:
                    ec:3a:7e:ae:11:62:35:ab:0d:c4:b9:1c:e2:15:fa:
                    1d:20:f8:d4:86:b0:ff:97:32:6b:0f:0f:9e:21:e1:
                    ea:9a:d3:b7:c8:ff:a2:d9:8f:cc:8f:ea:15:13:3f:
                    12:86:22:ac:e7:6a:d5:0d:33:0b:e7:77:ae:4e:83:
                    02:1e:10:f6:cf:79:ee:16:90:08:19:a6:1c:2c:7b:
                    15:51:f9:f3:94:40:a2:18:74:3a:4c:e7:d6:38:a6:
                    7c:d9:f1:8d:0f:69:22:d5:07:4d:2f:7b:d2:de:6f:
                    55:97:91:50:72:ab:f5:92:3e:c3:4e:44:69:ab:dd:
                    a5:73:a3:53:72:2b:f7:93:ed:66:46:45:56:cd:47:
                    21:2b:9e:a1:f5:d5:ab:ae:2f:02:d7:cb:9d:75:2f:
                    98:c0:70:11:82:a6:5e:30:07:95:69:7e:f6:75:dc:
                    27:6f:13:91:ca:77:18:36:24:ac:51:d6:a2:0f:51:
                    d2:e2:fe:cc:a9:e4:cc:16:06:30:82:67:72:a5:3e:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:6D:F8:56:5F:35:6B:D0:21:BD:66:E8:A3:95:F1:DE:DA:F3:D8
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/R1Nt-FZfNWvQIb1m6KOV8d7a89g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.58.1/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:f4:fb:c3:8d:57:ec:6d:76:27:a7:22:e8:9f:3f:59:1a:
         e4:cd:73:7a:a1:43:53:23:09:c6:0a:aa:8e:5b:70:cb:8d:b0:
         e2:73:3c:ad:44:18:d2:ae:60:98:ca:45:21:75:01:7a:ff:1a:
         af:96:5e:19:16:bd:85:fc:c3:a8:7e:54:01:3a:c1:e0:0e:9a:
         58:23:84:84:b4:01:2e:af:0a:5e:33:f6:f1:01:ec:3f:73:74:
         21:b7:38:4c:2f:84:2d:84:ac:ac:00:de:1a:c8:68:4c:26:2e:
         d0:de:f2:83:aa:0b:ea:dd:b7:e5:33:16:67:b0:5c:82:33:08:
         e8:78:90:fc:dd:65:9c:43:2d:30:2d:96:79:78:2c:b9:ac:74:
         d1:4d:78:78:b0:d3:13:ec:28:83:b0:d3:37:e6:46:4d:88:dc:
         a6:b5:bf:cf:81:ef:ba:a2:53:3e:53:38:2a:dc:cb:d0:9a:8f:
         1b:eb:d1:42:45:bc:47:e0:f6:a7:81:5f:f6:14:74:01:04:04:
         e5:e6:3f:3d:32:f9:73:6f:a3:0c:68:6b:e6:cb:5c:1e:13:eb:
         7a:46:6f:0e:1a:9a:2b:74:4c:0d:c1:a0:4f:4a:10:d2:42:5d:
         48:dd:92:4d:bf:eb:10:c7:06:df:fe:4c:4d:3f:aa:84:a7:c6:
         e1:3f:bf:f6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVweb4lGga+dU0wBrQLV5gPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjMwMTAyMDMxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzUzNmRmODU2NWYzNTZiZDAyMWJkNjZlOGEzOTVmMWRlZGFmM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2g4sEgbTekHIRDQgwhcWyxebVm2
KjWJBI5pTiZKccwEtHNT/OvcLAAWpblALbKTUhr338Pv/30vEcTsOn6uEWI1qw3E
uRziFfodIPjUhrD/lzJrDw+eIeHqmtO3yP+i2Y/Mj+oVEz8ShiKs52rVDTML53eu
ToMCHhD2z3nuFpAIGaYcLHsVUfnzlECiGHQ6TOfWOKZ82fGND2ki1QdNL3vS3m9V
l5FQcqv1kj7DTkRpq92lc6NTciv3k+1mRkVWzUchK56h9dWrri8C18uddS+YwHAR
gqZeMAeVaX72ddwnbxORyncYNiSsUdaiD1HS4v7MqeTMFgYwgmdypT7p7QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEdTbfhWXzVr0CG9ZuijlfHe2vPYMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvUjFOdC1GWmZOV3ZRSWIxbTZLT1Y4ZDdhODlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAXrc6ATAN
BgkqhkiG9w0BAQsFAAOCAQEADZv0+8ONV+xtdienIuifP1ka5M1zeqFDUyMJxgqq
jltwy42w4nM8rUQY0q5gmMpFIXUBev8ar5ZeGRa9hfzDqH5UATrB4A6aWCOEhLQB
Lq8KXjP28QHsP3N0Ibc4TC+ELYSsrADeGshoTCYu0N7yg6oL6t235TMWZ7BcgjMI
6HiQ/N1lnEMtMC2WeXgsuax00U14eLDTE+wog7DTN+ZGTYjcprW/z4HvuqJTPlM4
KtzL0JqPG+vRQkW8R+D2p4Ff9hR0AQQE5eY/PTL5c2+jDGhr5stcHhPrekZvDhqa
K3RMDcGgT0oQ0kJdSN2STb/rEMcG3/5MTT+qhKfG4T+/9g==
-----END CERTIFICATE-----