Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa
File:                     tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa (raw, json)
Hash identifier:          LNKhqCFpfxh4yLCE6flHF7nS1iuYQ5HYGHmanz4NOuU=
Subject key identifier:   B5:7A:A0:64:6D:64:56:06:E4:00:8F:B6:8E:16:30:56:B8:B9:65:1B
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       018571C30D16C004E0136C6FD50C805618E8
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa
Signing time:             Mon 02 Jan 2023 09:14:46 +0000
ROA not before:           Mon 02 Jan 2023 09:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203729
IP address blocks:        185.186.8.0/24 maxlen: 24
                          2a0b:6b81:210::/48 maxlen: 48
                          2a0b:6b81:208::/48 maxlen: 48
                          2a0b:6b81:1::/48 maxlen: 48
                          2a0b:6b81:205::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:c3:0d:16:c0:04:e0:13:6c:6f:d5:0c:80:56:18:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jan  2 09:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b57aa0646d645606e4008fb68e163056b8b9651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:ff:93:4b:68:b9:a5:b3:c2:b5:b6:c2:13:
                    b8:8e:b3:dc:e2:38:de:ca:91:88:df:48:e6:75:75:
                    ce:39:bf:27:b9:72:3d:82:e2:90:9b:11:21:c8:0e:
                    e5:9c:25:5d:fe:a1:41:3d:fe:1d:ac:c0:86:21:df:
                    f2:57:de:46:75:0d:5d:27:90:b5:98:cf:f5:c1:52:
                    ff:8f:ee:d4:62:56:66:1b:ef:82:49:45:1d:d9:c6:
                    d6:ba:48:17:75:21:ff:c4:84:4a:2e:e2:62:28:e4:
                    83:15:6d:28:a8:48:67:ca:72:d1:78:fe:c7:5a:03:
                    30:af:68:11:5b:88:77:46:ce:0f:03:22:bb:28:bc:
                    23:22:3d:53:56:55:2e:75:eb:ad:8e:52:5e:9a:db:
                    12:ef:a5:3f:a2:94:41:d9:d7:cd:55:e9:05:cf:b6:
                    24:2c:79:b3:76:9f:8e:7f:3c:b8:ed:4b:0f:06:c1:
                    24:7c:63:6a:b7:9f:dd:33:f9:eb:4c:6f:c4:df:a7:
                    80:6a:b5:17:33:e7:3d:b8:1e:91:08:9b:79:94:d8:
                    e4:2d:28:6a:17:81:79:ea:61:7a:22:01:ec:ed:2e:
                    23:2e:21:e9:21:ce:c7:73:4b:8c:2c:c5:24:1d:dd:
                    0e:5f:0b:b5:af:02:83:0b:5b:16:2a:7f:4f:9f:27:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7A:A0:64:6D:64:56:06:E4:00:8F:B6:8E:16:30:56:B8:B9:65:1B
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/tXqgZG1kVgbkAI-2jhYwVri5ZRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.8.0/24
                IPv6:
                  2a0b:6b81:1::/48
                  2a0b:6b81:205::/48
                  2a0b:6b81:208::/48
                  2a0b:6b81:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:7e:f9:b5:9c:b2:9b:5f:a7:ef:4f:84:0b:6d:b7:31:dc:
         3a:72:ac:79:bc:3d:55:cc:c2:18:2c:31:9f:5a:f9:ff:06:f2:
         a5:3d:4e:fd:2d:d6:51:a8:41:b4:38:3f:d8:10:c1:f0:75:b5:
         2b:53:c3:9d:9f:db:e3:26:fa:3c:84:43:e5:b8:f4:2e:1a:db:
         de:68:00:ca:ab:1b:af:2d:cf:65:b8:6b:f6:de:73:b5:35:06:
         35:ad:7f:d0:31:9a:ac:d4:6b:2e:41:15:85:2b:cf:d3:40:01:
         15:c0:4c:4a:f4:84:1d:da:b9:66:47:15:1e:d3:34:c0:2a:69:
         1a:42:04:9a:98:bd:15:3a:52:59:79:13:35:5b:a9:6f:8a:64:
         13:1b:b3:48:33:c9:7d:69:59:d0:ed:f7:2a:eb:ce:ca:ca:8a:
         01:74:eb:b4:ff:d7:75:09:c3:f4:5b:ed:77:5d:28:49:6f:7a:
         49:40:08:0b:67:76:dd:36:50:8f:84:1e:9a:80:56:12:73:1b:
         0f:1e:fc:3a:76:63:23:cd:ac:14:5b:62:a9:63:ed:3e:2a:dd:
         8b:98:fc:87:4f:a7:4c:7a:31:b6:b8:4c:eb:ef:29:f1:0a:20:
         b1:93:bd:10:31:62:36:1e:47:75:0e:32:1f:1e:a6:38:b4:1b:
         ff:8c:25:a6
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYVxww0WwATgE2xv1QyAVhjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjMwMTAyMDkxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTdhYTA2NDZkNjQ1NjA2ZTQwMDhmYjY4ZTE2MzA1NmI4Yjk2NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3H/k0touaWzwrW2whO4jrPc4jje
ypGI30jmdXXOOb8nuXI9guKQmxEhyA7lnCVd/qFBPf4drMCGId/yV95GdQ1dJ5C1
mM/1wVL/j+7UYlZmG++CSUUd2cbWukgXdSH/xIRKLuJiKOSDFW0oqEhnynLReP7H
WgMwr2gRW4h3Rs4PAyK7KLwjIj1TVlUudeutjlJemtsS76U/opRB2dfNVekFz7Yk
LHmzdp+Ofzy47UsPBsEkfGNqt5/dM/nrTG/E36eAarUXM+c9uB6RCJt5lNjkLShq
F4F56mF6IgHs7S4jLiHpIc7Hc0uMLMUkHd0OXwu1rwKDC1sWKn9PnydYRwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFLV6oGRtZFYG5ACPto4WMFa4uWUbMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvdFhxZ1pHMWtWZ2JrQUktMmpoWXdWcmk1WlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAuboIMCoE
AgACMCQDBwAqC2uBAAEDBwAqC2uBAgUDBwAqC2uBAggDBwAqC2uBAhAwDQYJKoZI
hvcNAQELBQADggEBAHTLfvm1nLKbX6fvT4QLbbcx3DpyrHm8PVXMwhgsMZ9a+f8G
8qU9Tv0t1lGoQbQ4P9gQwfB1tStTw52f2+Mm+jyEQ+W49C4a295oAMqrG68tz2W4
a/bec7U1BjWtf9AxmqzUay5BFYUrz9NAARXATEr0hB3auWZHFR7TNMAqaRpCBJqY
vRU6Ull5EzVbqW+KZBMbs0gzyX1pWdDt9yrrzsrKigF067T/13UJw/Rb7XddKElv
eklACAtndt02UI+EHpqAVhJzGw8e/Dp2YyPNrBRbYqlj7T4q3YuY/IdPp0x6Mba4
TOvvKfEKILGTvRAxYjYeR3UOMh8epji0G/+MJaY=
-----END CERTIFICATE-----