Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/f-mXZQw5l1_IfwoXvJIXXjy0ZeM.roa
File:                     f-mXZQw5l1_IfwoXvJIXXjy0ZeM.roa (raw, json)
Hash identifier:          sGxMji3k8QY6REAf2pXlJmDitnzLsy0HXh2GLj1K4p0=
Subject key identifier:   7F:E9:97:65:0C:39:97:5F:C8:7F:0A:17:BC:92:17:5E:3C:B4:65:E3
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       0189211A7A31BC2A3ADE2CAB5CD50FD4DFD8
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/f-mXZQw5l1_IfwoXvJIXXjy0ZeM.roa
Signing time:             Tue 04 Jul 2023 13:32:10 +0000
ROA not before:           Tue 04 Jul 2023 13:32:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202945
IP address blocks:        45.154.60.0/24 maxlen: 24
                          2a0f:b100:2::/48 maxlen: 48
                          2a0f:b100:5::/48 maxlen: 48
                          2a0f:b100::/44 maxlen: 44
                          2a0f:b100:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:21:1a:7a:31:bc:2a:3a:de:2c:ab:5c:d5:0f:d4:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jul  4 13:32:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7fe997650c39975fc87f0a17bc92175e3cb465e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:9d:a9:66:0d:cc:2b:40:72:a4:65:db:8c:
                    57:93:7a:5a:8e:62:f2:23:52:a1:2f:9f:5f:7f:74:
                    5a:7e:a6:5c:e8:43:21:2e:6b:d7:0d:2a:87:49:fc:
                    7f:4c:32:ab:db:ce:fc:4b:d6:b0:cd:69:79:de:eb:
                    3f:40:5b:d3:63:9c:09:a6:2d:54:00:be:de:56:15:
                    af:92:af:fb:cb:a2:f4:c3:46:e3:f1:f0:70:41:de:
                    7a:ff:60:94:f9:f3:08:46:01:97:3a:27:a8:f7:f7:
                    08:3e:98:34:fe:f6:a9:4f:b9:47:f5:51:c6:f9:db:
                    04:ac:77:6a:d9:41:0e:bb:9a:6b:f0:55:c4:4a:c9:
                    99:d9:2a:a7:7c:68:96:fe:b9:db:1e:a1:b9:fd:2d:
                    f6:56:b4:81:8f:6e:ef:6a:9c:fb:21:17:2e:45:63:
                    ed:9c:b5:6c:29:57:a7:e8:21:80:22:be:95:bf:b7:
                    6e:05:a6:cc:9a:43:93:dc:e0:ff:02:00:46:a8:d9:
                    d5:39:8a:08:f9:14:ea:75:cb:3e:5e:ed:1b:f7:b3:
                    61:5a:32:42:29:c5:63:ba:63:2f:a2:86:93:e9:fa:
                    43:96:1e:58:e3:4c:5e:16:2c:f3:92:f9:3e:11:bc:
                    00:e7:0b:80:33:79:d6:08:31:a5:03:bd:0c:ac:cf:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E9:97:65:0C:39:97:5F:C8:7F:0A:17:BC:92:17:5E:3C:B4:65:E3
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/f-mXZQw5l1_IfwoXvJIXXjy0ZeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.60.0/24
                IPv6:
                  2a0f:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:ad:77:5d:2b:bd:7a:b3:fd:ac:aa:b7:90:32:20:94:61:
         0d:9b:69:5e:55:33:84:29:26:40:f5:35:83:3c:70:30:cb:a5:
         13:80:28:77:f8:59:b8:c0:09:25:7d:76:d5:8b:08:1a:ae:67:
         84:83:32:d1:b6:e9:79:7e:eb:cc:e6:71:35:83:7b:ef:be:a2:
         5a:77:6d:0b:66:bc:f6:fa:7f:cb:b0:e1:67:59:aa:ff:f4:cd:
         be:bf:3e:43:3e:a7:71:22:40:b5:50:c1:be:7b:89:b6:88:26:
         29:19:f5:88:d9:34:c3:86:51:7f:85:75:a6:3f:f2:34:63:7f:
         06:3c:be:11:8c:60:5b:7e:1e:28:12:0c:6b:ef:18:24:9d:e4:
         3d:a1:1e:82:08:b5:50:7b:69:2a:05:b6:b5:82:cd:94:1d:42:
         c1:86:69:49:86:bb:f2:77:d8:6c:07:91:a2:ca:e9:9d:e2:25:
         6c:a1:9f:2d:54:55:67:02:77:49:10:33:b1:87:6f:ae:f4:fe:
         33:db:4e:a5:57:9e:20:10:bb:a5:5a:6c:78:9c:1e:d1:66:1c:
         7a:25:64:43:88:dc:e6:2d:9c:94:cf:b3:f6:5d:e9:62:89:c0:
         15:b3:71:a9:4d:a3:f2:82:b0:a0:a4:22:b7:c0:b6:2b:34:af:
         f0:02:58:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYkhGnoxvCo63iyrXNUP1N/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTYyZDA4Njk0ODBkYzExYjc0YTU1MmNkMTY3YjZmNjMz
OWM4YmEwHhcNMjMwNzA0MTMzMjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU5OTc2NTBjMzk5NzVmYzg3ZjBhMTdiYzkyMTc1ZTNjYjQ2NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvudqWYNzCtAcqRl24xXk3pajmLy
I1KhL59ff3RafqZc6EMhLmvXDSqHSfx/TDKr2878S9awzWl53us/QFvTY5wJpi1U
AL7eVhWvkq/7y6L0w0bj8fBwQd56/2CU+fMIRgGXOieo9/cIPpg0/vapT7lH9VHG
+dsErHdq2UEOu5pr8FXESsmZ2SqnfGiW/rnbHqG5/S32VrSBj27vapz7IRcuRWPt
nLVsKVen6CGAIr6Vv7duBabMmkOT3OD/AgBGqNnVOYoI+RTqdcs+Xu0b97NhWjJC
KcVjumMvooaT6fpDlh5Y40xeFizzkvk+EbwA5wuAM3nWCDGlA70MrM+WbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH/pl2UMOZdfyH8KF7ySF148tGXjMB8GA1UdIwQY
MBaAFKZWLQhpSA3BG3SlUs0We29jOci6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEt
NDVhOGZlZDNhMmE1LzEvZi1tWFpRdzVsMV9JZndvWHZKSVhYankwWmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEtNDVhOGZlZDNhMmE1
LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZo8MA8E
AgACMAkDBwQqD7EAAAAwDQYJKoZIhvcNAQELBQADggEBACT3rXddK716s/2sqreQ
MiCUYQ2baV5VM4QpJkD1NYM8cDDLpROAKHf4WbjACSV9dtWLCBquZ4SDMtG26Xl+
68zmcTWDe+++olp3bQtmvPb6f8uw4WdZqv/0zb6/PkM+p3EiQLVQwb57ibaIJikZ
9YjZNMOGUX+FdaY/8jRjfwY8vhGMYFt+HigSDGvvGCSd5D2hHoIItVB7aSoFtrWC
zZQdQsGGaUmGu/J32GwHkaLK6Z3iJWyhny1UVWcCd0kQM7GHb670/jPbTqVXniAQ
u6VabHicHtFmHHolZEOI3OYtnJTPs/Zd6WKJwBWzcalNo/KCsKCkIrfAtis0r/AC
WBA=
-----END CERTIFICATE-----