Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PQfjvvmebkOOr2bxJhUyBXZa8sM.roa
File:                     PQfjvvmebkOOr2bxJhUyBXZa8sM.roa (raw, json)
Hash identifier:          BhDUqL0z3TkJY1NyyPEcCSF75UXMHvACyr0a61ZEQ3k=
Subject key identifier:   3D:07:E3:BE:F9:9E:6E:43:8E:AF:66:F1:26:15:32:05:76:5A:F2:C3
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       01880649A45B21FAB0B15801E6EF523F9C96
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PQfjvvmebkOOr2bxJhUyBXZa8sM.roa
Signing time:             Wed 10 May 2023 15:31:09 +0000
ROA not before:           Wed 10 May 2023 15:31:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209408
IP address blocks:        45.66.224.0/22 maxlen: 22
                          2a09:6c40::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:06:49:a4:5b:21:fa:b0:b1:58:01:e6:ef:52:3f:9c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: May 10 15:31:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d07e3bef99e6e438eaf66f126153205765af2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:05:be:93:54:a1:9b:34:99:77:15:9d:43:
                    b7:41:40:3e:a9:e5:02:3d:bc:55:9d:0c:0e:cc:9c:
                    ac:e2:f7:6a:94:05:5f:fc:24:ee:1a:06:30:c7:10:
                    89:f3:4b:35:a8:f9:28:b0:c5:85:21:4f:84:4b:ff:
                    e2:19:b1:73:08:5c:31:8d:be:5e:c0:42:20:ce:10:
                    b5:f9:a5:0e:ac:52:f7:4c:2e:c8:07:de:66:b0:52:
                    c7:e8:5a:06:f0:b8:f3:da:0b:e6:2b:bb:66:42:80:
                    72:45:36:aa:c8:2e:7a:a5:e9:3a:b9:0a:96:8c:70:
                    9a:f0:4c:d7:5f:90:1b:7a:64:75:0a:e7:a7:2c:a5:
                    73:d6:4e:8f:b3:8a:3b:ab:4b:e9:4d:83:e3:10:36:
                    04:df:94:b0:87:21:92:e7:96:d6:81:eb:ff:36:92:
                    d9:ea:7b:65:25:12:10:44:29:86:a9:98:b2:b3:1e:
                    e4:8e:59:dc:8b:ee:83:31:93:84:d2:fd:1a:11:b9:
                    d5:ee:69:62:9f:3d:6d:08:98:4f:f8:c1:e3:0f:f5:
                    e6:ef:f5:08:dd:96:08:86:0e:1c:9d:2e:7f:ad:1a:
                    a7:53:e5:5e:9e:fe:c0:cd:b8:35:db:fd:73:f6:07:
                    5d:22:50:1c:02:3d:d2:96:29:92:55:0a:84:29:d6:
                    8c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:E3:BE:F9:9E:6E:43:8E:AF:66:F1:26:15:32:05:76:5A:F2:C3
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PQfjvvmebkOOr2bxJhUyBXZa8sM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.224.0/22
                IPv6:
                  2a09:6c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:87:0a:86:fe:31:40:30:e6:43:5a:50:26:e5:e1:cc:9a:
         67:4c:d7:61:c8:8e:34:24:10:fb:95:b2:52:9f:1d:15:45:aa:
         1b:54:03:51:00:49:29:a2:4a:1c:ca:1d:56:2c:5e:80:06:4f:
         9e:0f:b7:c2:2e:3a:15:87:5a:f9:85:3c:91:b7:d9:53:08:27:
         79:53:28:32:00:06:05:5e:84:aa:b1:7c:68:73:16:b4:d9:a0:
         5f:4f:84:15:68:8a:43:6f:14:12:c2:5e:0e:a9:20:da:75:f7:
         1f:97:3c:89:79:dd:74:dc:f1:0a:c2:11:31:2b:17:d3:96:ec:
         0b:35:70:b5:c0:48:59:a6:e7:07:7a:8f:dc:5b:a3:18:f0:cd:
         92:0d:2b:2f:c0:58:63:8f:1c:41:a4:f7:6b:d6:bf:dd:1c:5e:
         1b:f2:4b:3f:d3:50:5a:76:b0:41:d2:4b:cc:1d:88:c6:a0:79:
         30:9d:34:0b:e0:07:6a:7c:c8:e7:f1:cd:20:a1:56:e5:25:e6:
         3a:6b:a4:9f:cd:5c:8a:c6:56:29:88:bb:1b:f8:37:f4:b7:71:
         38:7d:bf:56:b5:51:68:21:bc:74:f0:87:da:ee:b3:29:ce:67:
         51:77:2a:43:33:0a:98:ec:07:fd:51:92:8e:1b:4c:40:ed:9e:
         f4:57:67:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYgGSaRbIfqwsVgB5u9SP5yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwNTEwMTUzMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDA3ZTNiZWY5OWU2ZTQzOGVhZjY2ZjEyNjE1MzIwNTc2NWFmMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMFvpNUoZs0mXcVnUO3QUA+qeUC
PbxVnQwOzJys4vdqlAVf/CTuGgYwxxCJ80s1qPkosMWFIU+ES//iGbFzCFwxjb5e
wEIgzhC1+aUOrFL3TC7IB95msFLH6FoG8Ljz2gvmK7tmQoByRTaqyC56pek6uQqW
jHCa8EzXX5AbemR1CuenLKVz1k6Ps4o7q0vpTYPjEDYE35SwhyGS55bWgev/NpLZ
6ntlJRIQRCmGqZiysx7kjlnci+6DMZOE0v0aEbnV7mlinz1tCJhP+MHjD/Xm7/UI
3ZYIhg4cnS5/rRqnU+Venv7Azbg12/1z9gddIlAcAj3SlimSVQqEKdaMfwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD0H4775nm5Djq9m8SYVMgV2WvLDMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvUFFmanZ2bWVia09PcjJieEpoVXlCWFphOHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLULgMA0E
AgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IBAQA/dYcKhv4xQDDmQ1pQJuXh
zJpnTNdhyI40JBD7lbJSnx0VRaobVANRAEkpokocyh1WLF6ABk+eD7fCLjoVh1r5
hTyRt9lTCCd5UygyAAYFXoSqsXxocxa02aBfT4QVaIpDbxQSwl4OqSDadfcflzyJ
ed103PEKwhExKxfTluwLNXC1wEhZpucHeo/cW6MY8M2SDSsvwFhjjxxBpPdr1r/d
HF4b8ks/01BadrBB0kvMHYjGoHkwnTQL4AdqfMjn8c0goVblJeY6a6SfzVyKxlYp
iLsb+Df0t3E4fb9WtVFoIbx08Ifa7rMpzmdRdypDMwqY7Af9UZKOG0xA7Z70V2fC
-----END CERTIFICATE-----