Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/wDsXTsxB79NvBlu3Egnd5nQgNdk.roa
File:                     wDsXTsxB79NvBlu3Egnd5nQgNdk.roa (raw, json)
Hash identifier:          JCeCYYE9Jiq/+h2GHUCOHIMJT3RswxCmOdgxHZYTyS8=
Subject key identifier:   C0:3B:17:4E:CC:41:EF:D3:6F:06:5B:B7:12:09:DD:E6:74:20:35:D9
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       01856F14E4A704822C14F8784714A8FCBB1C
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/wDsXTsxB79NvBlu3Egnd5nQgNdk.roa
Signing time:             Sun 01 Jan 2023 20:45:18 +0000
ROA not before:           Sun 01 Jan 2023 20:45:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21390
IP address blocks:        80.92.230.0/24 maxlen: 32
                          2a02:2b30::/32 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:e4:a7:04:82:2c:14:f8:78:47:14:a8:fc:bb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan  1 20:45:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c03b174ecc41efd36f065bb71209dde6742035d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:97:51:07:cf:47:2b:ee:4a:d2:ad:a3:32:
                    e3:db:8d:ad:db:4f:7b:20:6c:8a:83:62:7c:a5:e5:
                    39:50:65:92:c0:c4:e8:3b:37:ca:bb:ae:a7:a9:04:
                    52:e6:02:88:af:48:1c:98:e5:c9:4f:1c:ac:2e:88:
                    d2:d7:34:98:95:a6:37:6a:b9:6e:c3:52:93:a4:c4:
                    80:a7:46:6a:4e:f9:92:05:19:6b:d8:fb:28:9a:6b:
                    6c:1f:a8:32:94:9b:d6:25:b2:9b:56:6c:2e:99:03:
                    ba:b6:1c:41:94:74:ad:b2:a4:dc:a3:fc:19:15:cd:
                    a0:a0:de:98:8f:87:47:96:99:b4:64:d7:ae:ee:b9:
                    9e:1d:4d:6e:bf:cc:fc:c0:ac:a8:a0:f4:0f:7e:70:
                    b2:b8:ac:14:cf:fc:78:14:04:96:19:4d:6b:1f:80:
                    0f:61:6d:ce:2d:36:91:6f:c4:d1:1d:10:47:72:06:
                    b6:1b:b1:46:5d:58:f0:31:53:fd:6e:5e:cc:15:e6:
                    28:0e:73:04:14:c2:67:c9:30:00:22:35:7a:44:81:
                    d4:36:5a:5f:13:a2:70:59:4a:8f:eb:0a:8a:9c:b4:
                    02:29:4e:b2:72:2f:64:f0:49:4f:cb:46:52:e4:72:
                    1b:6a:fe:14:82:38:2d:57:c7:46:21:97:75:dd:be:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:17:4E:CC:41:EF:D3:6F:06:5B:B7:12:09:DD:E6:74:20:35:D9
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/wDsXTsxB79NvBlu3Egnd5nQgNdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.230.0/24
                IPv6:
                  2a02:2b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:f9:3b:89:81:40:1a:fd:f9:a8:1f:0a:a4:1e:cf:03:c7:
         67:bd:94:66:d4:bc:42:a0:5e:b4:14:46:25:47:ff:92:e2:c2:
         4c:44:ee:d2:75:30:01:c8:06:48:a4:49:11:e0:66:8b:7f:f8:
         15:78:fb:80:cb:eb:4e:33:b0:72:58:7c:7a:02:b6:b2:33:fb:
         26:3e:0a:b7:52:07:5f:29:c1:03:8f:4e:32:62:c5:5a:19:64:
         94:a8:c7:2b:6c:98:b6:13:2a:19:ed:df:20:6c:94:77:9f:f6:
         31:1d:6e:5b:db:1c:40:22:0f:92:e0:f6:af:63:fb:1e:1b:89:
         bd:db:56:f4:d9:4e:0e:51:b1:a5:c6:1b:f9:33:2c:6e:08:80:
         cc:9e:03:ae:f0:62:18:74:66:3e:8e:89:58:9c:f9:da:c0:83:
         c8:f2:15:a0:17:3a:97:2f:04:f0:9e:32:09:f2:bb:28:2e:a9:
         61:be:41:be:46:fa:ec:47:66:09:99:65:9f:8e:db:2b:66:66:
         fc:d5:f6:e5:28:99:c1:3e:ef:46:33:cd:59:b5:05:f3:90:bf:
         cd:82:fb:97:ea:1c:f6:99:14:a4:d9:01:c0:f2:af:2e:67:77:
         c5:96:fd:14:1c:c3:5f:d5:6b:44:98:12:61:97:6e:76:4a:a3:
         fd:04:2e:58
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvFOSnBIIsFPh4RxSo/LscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjMwMTAxMjA0NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDNiMTc0ZWNjNDFlZmQzNmYwNjViYjcxMjA5ZGRlNjc0MjAzNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbaXUQfPRyvuStKtozLj242t2097
IGyKg2J8peU5UGWSwMToOzfKu66nqQRS5gKIr0gcmOXJTxysLojS1zSYlaY3arlu
w1KTpMSAp0ZqTvmSBRlr2PsommtsH6gylJvWJbKbVmwumQO6thxBlHStsqTco/wZ
Fc2goN6Yj4dHlpm0ZNeu7rmeHU1uv8z8wKyooPQPfnCyuKwUz/x4FASWGU1rH4AP
YW3OLTaRb8TRHRBHcga2G7FGXVjwMVP9bl7MFeYoDnMEFMJnyTAAIjV6RIHUNlpf
E6JwWUqP6wqKnLQCKU6yci9k8ElPy0ZS5HIbav4UgjgtV8dGIZd13b56OQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMA7F07MQe/TbwZbtxIJ3eZ0IDXZMB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvd0RzWFRzeEI3OU52Qmx1M0VnbmQ1blFnTmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUFzmMA0E
AgACMAcDBQAqAiswMA0GCSqGSIb3DQEBCwUAA4IBAQBLl/k7iYFAGv35qB8KpB7P
A8dnvZRm1LxCoF60FEYlR/+S4sJMRO7SdTAByAZIpEkR4GaLf/gVePuAy+tOM7By
WHx6ArayM/smPgq3UgdfKcEDj04yYsVaGWSUqMcrbJi2EyoZ7d8gbJR3n/YxHW5b
2xxAIg+S4PavY/seG4m921b02U4OUbGlxhv5MyxuCIDMngOu8GIYdGY+jolYnPna
wIPI8hWgFzqXLwTwnjIJ8rsoLqlhvkG+RvrsR2YJmWWfjtsrZmb81fblKJnBPu9G
M81ZtQXzkL/NgvuX6hz2mRSk2QHA8q8uZ3fFlv0UHMNf1WtEmBJhl252SqP9BC5Y
-----END CERTIFICATE-----