Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/5FlmzGUnLDXNwU8auogT85548tg.roa
File:                     5FlmzGUnLDXNwU8auogT85548tg.roa (raw, json)
Hash identifier:          D0Cgh2cu1PuXvAhzTD2wX0rqCbAOL7X08QlDwaeNSTY=
Subject key identifier:   E4:59:66:CC:65:27:2C:35:CD:C1:4F:1A:BA:88:13:F3:9E:78:F2:D8
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       018B9FA9A2F34F624B694AF9FD90BBE9F7D9
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/5FlmzGUnLDXNwU8auogT85548tg.roa
Signing time:             Sun 05 Nov 2023 13:26:16 +0000
ROA not before:           Sun 05 Nov 2023 13:26:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61295
IP address blocks:        185.241.215.0/24 maxlen: 24
                          2a0c:bf80::/48 maxlen: 48
                          2a0c:bf81::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:9f:a9:a2:f3:4f:62:4b:69:4a:f9:fd:90:bb:e9:f7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Nov  5 13:26:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e45966cc65272c35cdc14f1aba8813f39e78f2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:68:b0:b0:ec:fb:5f:e2:92:ec:a3:da:55:
                    b3:29:09:5c:fc:cc:34:9f:68:a8:00:65:ee:7b:84:
                    02:3c:b4:44:9c:56:3e:22:23:86:c1:76:32:30:4e:
                    8e:d4:6f:2b:37:23:61:29:b2:b5:42:d7:f5:f0:60:
                    6a:d0:c2:af:61:62:4f:0a:14:0f:86:b2:db:ff:4d:
                    b1:54:ef:fb:c7:f5:7c:0d:37:7b:33:ef:d1:b6:67:
                    92:28:4c:48:36:86:42:eb:f7:b7:52:68:13:c1:cd:
                    3c:e9:49:02:67:7c:1e:a5:30:c1:05:5b:c6:b2:39:
                    8b:1a:25:b0:af:77:e4:58:dc:34:50:aa:81:da:43:
                    d1:0c:5d:43:08:a8:c9:01:81:52:05:4b:1b:53:12:
                    1c:d3:43:14:66:be:91:13:86:a1:62:80:6d:7c:24:
                    cd:bf:6e:81:35:e9:5a:fb:da:de:4d:21:97:60:01:
                    ff:f2:49:b5:8c:24:df:ed:5d:72:b9:1b:9d:70:d7:
                    73:97:6e:7e:72:9f:fa:bc:9f:29:46:73:c7:5c:de:
                    c9:ab:68:0d:be:25:f0:e4:70:82:5b:f3:c1:23:d7:
                    1b:73:4f:33:fc:82:3b:e1:18:f8:cd:c7:fb:8c:38:
                    ad:a1:04:b9:20:4f:6f:c5:f0:94:66:35:3e:0b:e6:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:66:CC:65:27:2C:35:CD:C1:4F:1A:BA:88:13:F3:9E:78:F2:D8
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/5FlmzGUnLDXNwU8auogT85548tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.215.0/24
                IPv6:
                  2a0c:bf80::/48
                  2a0c:bf81::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:53:03:35:a1:01:2d:33:18:64:0d:b0:07:39:bc:fb:2d:a5:
         91:90:5a:08:b7:02:f6:3a:80:76:b9:3d:39:88:15:0b:a1:72:
         06:cf:fa:e9:77:44:64:a1:bc:d4:46:c5:e2:86:4b:98:90:11:
         70:35:3b:cc:e6:73:90:6a:a2:11:f4:27:9e:78:a1:49:78:5b:
         a1:e2:10:a3:4a:8d:61:38:08:c1:e0:f9:5b:78:29:ea:25:d3:
         88:8f:b6:bb:c1:dc:2b:02:70:96:8a:6a:2b:cf:07:a1:a4:63:
         76:9c:da:c5:94:f1:d4:ac:c2:7f:c9:ae:c6:66:e0:a2:b5:ee:
         79:1a:78:a6:28:f2:d8:2d:9d:93:7c:ef:b2:27:5c:82:49:46:
         f0:49:5a:71:f0:17:82:75:24:8b:c9:4d:1d:df:de:a3:84:d4:
         9e:74:1b:e7:ed:86:d4:e0:bc:32:13:18:7c:d2:46:89:4a:00:
         2f:66:a3:78:79:ad:52:1a:0a:ee:76:08:cb:c1:18:05:f4:30:
         3a:29:c9:94:be:9b:2b:01:0a:98:7f:a8:65:5b:29:ff:d0:e1:
         77:ee:b9:af:9a:3b:fa:e6:62:b0:f2:7d:f8:67:3b:73:b4:25:
         00:f5:3d:c2:78:79:b1:40:8f:07:01:1e:1c:ac:cc:0f:e6:8b:
         59:d4:7d:14
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYufqaLzT2JLaUr5/ZC76ffZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjMxMTA1MTMyNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDU5NjZjYzY1MjcyYzM1Y2RjMTRmMWFiYTg4MTNmMzllNzhmMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvRosLDs+1/ikuyj2lWzKQlc/Mw0
n2ioAGXue4QCPLREnFY+IiOGwXYyME6O1G8rNyNhKbK1Qtf18GBq0MKvYWJPChQP
hrLb/02xVO/7x/V8DTd7M+/RtmeSKExINoZC6/e3UmgTwc086UkCZ3wepTDBBVvG
sjmLGiWwr3fkWNw0UKqB2kPRDF1DCKjJAYFSBUsbUxIc00MUZr6RE4ahYoBtfCTN
v26BNela+9reTSGXYAH/8km1jCTf7V1yuRudcNdzl25+cp/6vJ8pRnPHXN7Jq2gN
viXw5HCCW/PBI9cbc08z/II74Rj4zcf7jDitoQS5IE9vxfCUZjU+C+ZOiwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFORZZsxlJyw1zcFPGrqIE/OeePLYMB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvNUZsbXpHVW5MRFhOd1U4YXVvZ1Q4NTU0OHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAufHXMBgE
AgACMBIDBwAqDL+AAAADBwAqDL+BAAAwDQYJKoZIhvcNAQELBQADggEBAMVTAzWh
AS0zGGQNsAc5vPstpZGQWgi3AvY6gHa5PTmIFQuhcgbP+ul3RGShvNRGxeKGS5iQ
EXA1O8zmc5BqohH0J554oUl4W6HiEKNKjWE4CMHg+Vt4Keol04iPtrvB3CsCcJaK
aivPB6GkY3ac2sWU8dSswn/JrsZm4KK17nkaeKYo8tgtnZN877InXIJJRvBJWnHw
F4J1JIvJTR3f3qOE1J50G+fthtTgvDITGHzSRolKAC9mo3h5rVIaCu52CMvBGAX0
MDopyZS+mysBCph/qGVbKf/Q4Xfuua+aO/rmYrDyffhnO3O0JQD1PcJ4ebFAjwcB
HhyszA/mi1nUfRQ=
-----END CERTIFICATE-----