Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/NmNpkXj7kw-4kG1IUktZXcUadJc.roa
File:                     NmNpkXj7kw-4kG1IUktZXcUadJc.roa (raw, json)
Hash identifier:          XeatUrScjLGX1RWw+AYq56QlMLOX03tMF5dru4TVgys=
Subject key identifier:   36:63:69:91:78:FB:93:0F:B8:90:6D:48:52:4B:59:5D:C5:1A:74:97
Certificate issuer:       /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial:       018CC801BB2ED94BCDDAFCF3ABAF69A44F14
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/NmNpkXj7kw-4kG1IUktZXcUadJc.roa
Signing time:             Tue 02 Jan 2024 02:30:05 +0000
ROA not before:           Tue 02 Jan 2024 02:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6830
IP address blocks:        80.67.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 09:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:bb:2e:d9:4b:cd:da:fc:f3:ab:af:69:a4:4f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
        Validity
            Not Before: Jan  2 02:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3663699178fb930fb8906d48524b595dc51a7497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:c2:4a:06:fa:77:1c:c8:f3:8c:28:60:63:
                    b8:0a:92:46:b2:cb:22:c8:64:56:23:cc:4f:06:e4:
                    0e:60:8f:d1:f5:0f:09:df:97:2d:9b:61:db:13:9f:
                    1c:e3:12:74:f4:31:31:87:29:50:5f:95:40:48:02:
                    ce:11:87:1a:a0:0d:2f:ce:ea:5b:d0:cf:3c:bd:42:
                    2c:df:46:b7:de:97:e0:d2:46:8d:1a:31:19:ba:09:
                    9e:c7:0c:a0:80:68:f9:8d:1d:6a:1c:f5:a0:59:30:
                    c2:ac:ba:77:13:31:ad:84:47:ba:f9:02:fc:71:c0:
                    d3:da:dc:8f:17:7d:50:97:bb:81:1b:28:b0:fe:8d:
                    0d:2a:c2:8f:25:97:9f:cc:ce:09:d3:da:65:94:b9:
                    83:a0:17:32:63:05:9d:26:e6:58:b2:10:be:e1:24:
                    8a:d4:be:8e:d8:7a:1a:0b:10:cb:31:94:c0:ed:67:
                    d4:f1:81:ca:c9:0a:0d:a7:52:1b:3e:1b:67:45:46:
                    ff:2a:0a:dc:a7:4f:60:63:99:17:a5:d4:bb:f4:01:
                    5b:b9:ea:d7:a9:85:2b:1a:39:1d:2d:42:7f:a3:55:
                    fb:53:4f:f1:75:87:a7:3f:13:81:63:c7:4c:4e:30:
                    18:03:fd:9b:49:9b:47:7d:e3:6c:16:72:55:6e:44:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:69:91:78:FB:93:0F:B8:90:6D:48:52:4B:59:5D:C5:1A:74:97
            X509v3 Authority Key Identifier:
                keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/NmNpkXj7kw-4kG1IUktZXcUadJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:a2:18:91:3f:27:16:d3:bb:d2:69:a9:f6:cb:60:1b:6f:
         ad:ad:82:1d:7f:e1:f3:59:57:7f:2f:9a:f3:28:ee:5a:41:24:
         c9:51:5c:af:de:7e:69:67:31:b0:66:86:b4:14:2a:78:a7:d7:
         c5:d1:82:b3:cb:4a:59:7d:27:ec:97:4f:df:ae:1d:5f:a4:8d:
         a9:92:b5:24:66:55:c6:50:70:25:92:54:bb:52:7e:10:41:19:
         9c:c5:5b:c9:2d:f2:f9:a0:94:81:21:3c:77:51:b6:b9:8b:31:
         41:ec:89:5d:6b:e9:4d:d0:85:d3:3f:ee:0d:ec:da:53:d1:4a:
         9f:8c:fb:ff:0d:2a:8d:f4:2d:28:67:3b:07:c7:7a:06:3e:b9:
         65:92:5f:47:09:14:30:c3:99:75:f9:6f:eb:03:40:3a:6b:cf:
         b2:34:56:02:d2:a1:23:49:dd:02:23:a7:26:e4:69:c0:17:77:
         ce:ae:fa:05:b4:16:2d:7a:5a:55:43:04:cc:54:2a:72:6e:3c:
         33:c4:97:0a:bb:0e:59:0d:e1:7f:b2:4e:60:43:a3:e6:5b:72:
         f0:cd:56:1c:21:cf:37:cd:ed:9e:3e:ba:94:54:4f:6c:e7:da:
         51:41:17:a5:38:75:b7:ff:a7:97:5c:5f:58:c3:9c:2b:5d:56:
         4d:f7:f2:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAbsu2UvN2vzzq69ppE8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1
ZDE3MDkwHhcNMjQwMTAyMDIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjYzNjk5MTc4ZmI5MzBmYjg5MDZkNDg1MjRiNTk1ZGM1MWE3NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+3CSgb6dxzI84woYGO4CpJGsssi
yGRWI8xPBuQOYI/R9Q8J35ctm2HbE58c4xJ09DExhylQX5VASALOEYcaoA0vzupb
0M88vUIs30a33pfg0kaNGjEZugmexwyggGj5jR1qHPWgWTDCrLp3EzGthEe6+QL8
ccDT2tyPF31Ql7uBGyiw/o0NKsKPJZefzM4J09pllLmDoBcyYwWdJuZYshC+4SSK
1L6O2HoaCxDLMZTA7WfU8YHKyQoNp1IbPhtnRUb/Kgrcp09gY5kXpdS79AFbuerX
qYUrGjkdLUJ/o1X7U0/xdYenPxOBY8dMTjAYA/2bSZtHfeNsFnJVbkTeHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZjaZF4+5MPuJBtSFJLWV3FGnSXMB8GA1UdIwQY
MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt
NGM1MWM2Nzk3YzFmLzEvTm1OcGtYajdrdy00a0cxSVVrdFpYY1VhZEpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm
LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEOQMA0G
CSqGSIb3DQEBCwUAA4IBAQCD0KIYkT8nFtO70mmp9stgG2+trYIdf+HzWVd/L5rz
KO5aQSTJUVyv3n5pZzGwZoa0FCp4p9fF0YKzy0pZfSfsl0/frh1fpI2pkrUkZlXG
UHAlklS7Un4QQRmcxVvJLfL5oJSBITx3Uba5izFB7Ilda+lN0IXTP+4N7NpT0Uqf
jPv/DSqN9C0oZzsHx3oGPrllkl9HCRQww5l1+W/rA0A6a8+yNFYC0qEjSd0CI6cm
5GnAF3fOrvoFtBYtelpVQwTMVCpybjwzxJcKuw5ZDeF/sk5gQ6PmW3LwzVYcIc83
ze2ePrqUVE9s59pRQRelOHW3/6eXXF9Yw5wrXVZN9/JF
-----END CERTIFICATE-----