Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/j_io5sDJT8WW6Yc_c00Tdm4WMGU.roa
File:                     j_io5sDJT8WW6Yc_c00Tdm4WMGU.roa (raw, json)
Hash identifier:          HjisPpzakN9VLbp2HVdhkvjQAQ63/n29H9qSjweayf4=
Subject key identifier:   8F:F8:A8:E6:C0:C9:4F:C5:96:E9:87:3F:73:4D:13:76:6E:16:30:65
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       018C5A225A079091DD5857543692DA797CA7
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/j_io5sDJT8WW6Yc_c00Tdm4WMGU.roa
Signing time:             Mon 11 Dec 2023 18:27:29 +0000
ROA not before:           Mon 11 Dec 2023 18:27:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0e:fd80:a03::/48 maxlen: 48
                          2a0e:fd80:a04::/48 maxlen: 48
                          2a0e:fd80:a05::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5a:22:5a:07:90:91:dd:58:57:54:36:92:da:79:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Dec 11 18:27:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ff8a8e6c0c94fc596e9873f734d13766e163065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:84:be:6e:0c:3a:44:cf:eb:3f:0a:ab:4c:
                    a6:33:a5:79:e1:d7:dc:37:95:39:08:d6:19:97:fa:
                    15:b4:57:b2:eb:89:9b:49:a6:9f:fb:4d:e9:40:c9:
                    0b:a4:e8:66:42:c5:f3:1a:40:b1:28:67:39:47:3a:
                    ab:e7:70:a6:9b:f0:a7:a1:20:4f:d6:04:f2:11:8b:
                    10:6c:ba:6f:3c:da:c9:5f:1a:f3:1c:b2:a2:af:a3:
                    25:88:d6:b5:d3:af:6f:99:90:e4:9a:9b:8c:18:da:
                    20:50:5c:03:d5:d9:37:cc:cd:c9:cc:b0:3b:d4:0e:
                    0b:11:75:27:6a:0d:54:7c:f8:b7:6e:50:10:18:2c:
                    f4:2a:c8:b0:84:2b:dc:2c:e1:43:ff:3f:3b:3b:1c:
                    98:db:aa:ad:64:4e:ae:0c:4d:a1:f3:f6:26:3d:43:
                    39:48:1e:38:c5:0a:80:93:dc:01:fe:32:fe:9f:3f:
                    0a:7a:e3:81:df:ea:bf:85:06:a6:75:68:02:72:4c:
                    63:88:b2:01:5b:d4:24:d5:8f:34:f6:cf:0a:78:89:
                    ec:da:c5:6e:bc:e1:44:d8:3e:40:44:05:f5:5b:db:
                    e2:8c:0b:37:50:c8:6c:b6:64:8f:44:39:3f:d2:d9:
                    33:19:04:b3:92:bb:8d:05:4c:14:f1:8e:dd:17:11:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F8:A8:E6:C0:C9:4F:C5:96:E9:87:3F:73:4D:13:76:6E:16:30:65
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/j_io5sDJT8WW6Yc_c00Tdm4WMGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:fd80:a03::-2a0e:fd80:a05:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:f7:a8:c9:5e:c9:c6:31:98:40:80:25:e1:b6:ec:2c:c4:
         9e:b1:b7:91:8a:36:f7:77:f3:4c:de:70:61:09:ee:c4:e9:67:
         fe:55:c1:82:6c:3d:c0:c7:f3:cc:14:e4:dd:aa:0a:c5:02:3d:
         7f:1c:98:53:ff:49:a1:da:88:9d:63:41:d6:bd:de:af:6c:4f:
         10:4e:bc:f5:af:8f:fa:ad:40:cb:55:92:01:63:3a:2e:68:63:
         f1:10:ae:c0:86:3e:b6:90:95:12:13:e4:96:b4:80:98:14:33:
         62:57:f8:b7:03:10:cb:6c:66:fb:81:78:ac:73:fc:57:91:32:
         b6:6f:ab:29:25:87:34:b0:d5:e3:a8:53:d7:51:bf:37:9d:e6:
         88:34:b3:11:b1:3b:d2:08:7a:92:17:c3:5d:09:2a:b0:c1:25:
         63:e4:0b:97:e9:35:a7:f3:23:45:2c:53:ae:b0:71:e0:87:07:
         67:53:9f:d7:b1:cf:0f:28:67:70:f9:cf:0b:53:fa:6d:86:15:
         ef:4f:78:e9:4a:ce:3b:c6:9c:db:fe:0c:8d:ea:57:e2:4b:16:
         48:21:27:fa:61:08:c1:a0:7d:ad:98:9e:0a:d3:64:06:81:3d:
         3b:cc:95:f1:a2:a0:e0:b7:b8:c9:b0:5b:04:b0:6b:1d:90:67:
         35:83:87:e5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYxaIloHkJHdWFdUNpLaeXynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2
NGRlMTAwHhcNMjMxMjExMTgyNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY4YThlNmMwYzk0ZmM1OTZlOTg3M2Y3MzRkMTM3NjZlMTYzMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl36Evm4MOkTP6z8Kq0ymM6V54dfc
N5U5CNYZl/oVtFey64mbSaaf+03pQMkLpOhmQsXzGkCxKGc5Rzqr53Cmm/CnoSBP
1gTyEYsQbLpvPNrJXxrzHLKir6MliNa1069vmZDkmpuMGNogUFwD1dk3zM3JzLA7
1A4LEXUnag1UfPi3blAQGCz0KsiwhCvcLOFD/z87OxyY26qtZE6uDE2h8/YmPUM5
SB44xQqAk9wB/jL+nz8KeuOB3+q/hQamdWgCckxjiLIBW9Qk1Y809s8KeIns2sVu
vOFE2D5ARAX1W9vijAs3UMhstmSPRDk/0tkzGQSzkruNBUwU8Y7dFxEWXQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFI/4qObAyU/FlumHP3NNE3ZuFjBlMB8GA1UdIwQY
MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt
MjY3MDFiMTYyZmMzLzEval9pbzVzREpUOFdXNlljX2MwMFRkbTRXTUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz
LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDv2A
CgMDBwEqDv2ACgQwDQYJKoZIhvcNAQELBQADggEBAFfW96jJXsnGMZhAgCXhtuws
xJ6xt5GKNvd380zecGEJ7sTpZ/5VwYJsPcDH88wU5N2qCsUCPX8cmFP/SaHaiJ1j
Qda93q9sTxBOvPWvj/qtQMtVkgFjOi5oY/EQrsCGPraQlRIT5Ja0gJgUM2JX+LcD
EMtsZvuBeKxz/FeRMrZvqyklhzSw1eOoU9dRvzed5og0sxGxO9IIepIXw10JKrDB
JWPkC5fpNafzI0UsU66wceCHB2dTn9exzw8oZ3D5zwtT+m2GFe9PeOlKzjvGnNv+
DI3qV+JLFkghJ/phCMGgfa2YngrTZAaBPTvMlfGioOC3uMmwWwSwax2QZzWDh+U=
-----END CERTIFICATE-----