Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa
File:                     vb1u-MjAlJsOkkXwDJc5XhusTtU.roa (raw, json)
Hash identifier:          +Es7u7giyCD5JZIs/CM2zKcL/kTek8jtUDA8IHzx2Zo=
Subject key identifier:   BD:BD:6E:F8:C8:C0:94:9B:0E:92:45:F0:0C:97:39:5E:1B:AC:4E:D5
Certificate issuer:       /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial:       018824E96BA6D3B122512099F8C959D27894
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa
Signing time:             Tue 16 May 2023 14:14:17 +0000
ROA not before:           Tue 16 May 2023 14:14:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213065
IP address blocks:        145.84.24.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:24:e9:6b:a6:d3:b1:22:51:20:99:f8:c9:59:d2:78:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
        Validity
            Not Before: May 16 14:14:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdbd6ef8c8c0949b0e9245f00c97395e1bac4ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:25:0a:78:9a:fa:a8:57:9b:a1:36:a4:20:
                    2c:eb:4a:a3:d0:00:f9:eb:46:38:fd:cf:fd:80:b3:
                    95:99:1e:e4:e1:a7:fb:02:85:30:bd:7e:16:e5:0a:
                    0b:8c:48:a6:cf:dc:8c:4e:f9:a0:64:62:c1:92:46:
                    c7:c1:55:37:2f:1a:a1:78:5d:09:82:00:0e:05:15:
                    8e:81:da:ce:c1:9f:10:a8:4e:e3:1b:25:bb:7a:db:
                    3b:e9:bd:39:fa:69:7d:52:6d:d9:f0:3c:e9:f9:2d:
                    07:d4:ac:9d:b0:fd:e2:0d:84:c0:b4:f9:6b:8d:4e:
                    66:7e:ea:24:71:6b:77:e9:3b:48:a4:f9:51:c0:f7:
                    02:85:50:07:9b:e5:cc:1a:34:2d:c5:f7:fb:f8:0a:
                    08:51:85:ed:c2:ad:ba:47:0c:ee:bc:52:cf:d3:11:
                    50:64:42:0c:6b:9b:10:14:44:35:88:70:cb:8e:bb:
                    ec:43:31:9d:c8:87:18:25:0f:88:48:35:05:70:fa:
                    b4:99:ba:8c:84:66:26:15:39:ce:44:9d:1d:4b:84:
                    75:83:e4:79:4d:16:9b:65:75:55:23:4c:c0:06:f6:
                    0f:bb:37:26:bf:9f:a6:3c:8f:a5:d8:ad:7b:5c:27:
                    bd:4e:2f:d4:1a:9f:d5:b1:26:44:4e:41:ec:6d:d1:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:6E:F8:C8:C0:94:9B:0E:92:45:F0:0C:97:39:5E:1B:AC:4E:D5
            X509v3 Authority Key Identifier:
                keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vb1u-MjAlJsOkkXwDJc5XhusTtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.84.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:03:04:40:96:52:50:4a:d4:58:8f:68:3e:59:1e:62:dd:c9:
         f2:5b:31:a7:81:99:60:55:b6:0a:25:ee:44:e9:56:20:05:94:
         25:a9:9e:a2:d8:dc:74:8c:19:26:f5:9b:bd:3b:34:31:95:4c:
         e4:fb:b0:48:03:2d:64:66:cd:22:11:05:b3:de:af:51:40:9b:
         60:45:38:91:7b:99:97:0e:96:4b:3e:46:81:31:8a:46:3f:08:
         35:64:2f:7e:6e:21:d8:93:3f:4e:6b:6b:f2:ff:d3:cb:ba:15:
         3c:56:16:a2:40:4a:0f:25:98:7b:6c:ea:49:25:33:e7:75:ea:
         47:75:aa:2b:13:fd:a9:51:35:07:a9:dd:8b:18:44:a1:d9:3c:
         d4:76:c6:3f:8e:48:30:00:0d:38:5f:cf:6e:4e:9a:3e:fd:7f:
         46:eb:e8:d6:c8:86:35:f7:9a:c5:29:e7:8d:bb:dd:90:18:3b:
         50:e7:5f:87:ca:e5:f1:06:85:ea:6e:97:b4:d9:5f:8a:b8:5f:
         95:ec:8c:cb:4d:f1:84:03:f2:73:e8:b8:2e:02:7a:fd:53:0d:
         95:dc:79:66:de:a0:b9:0c:73:8f:e7:94:55:4d:9d:c0:7c:e0:
         17:a0:c0:f9:59:3c:86:69:ff:37:d9:ed:91:9d:39:4c:69:e8:
         2f:7d:ab:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgk6Wum07EiUSCZ+MlZ0niUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMGRjMTQ0OTMxNmI2NTY3YzNlMWUzNzRiODJlZDg5MmI1
ZDBmNjMwHhcNMjMwNTE2MTQxNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGJkNmVmOGM4YzA5NDliMGU5MjQ1ZjAwYzk3Mzk1ZTFiYWM0ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpslCnia+qhXm6E2pCAs60qj0AD5
60Y4/c/9gLOVmR7k4af7AoUwvX4W5QoLjEimz9yMTvmgZGLBkkbHwVU3LxqheF0J
ggAOBRWOgdrOwZ8QqE7jGyW7ets76b05+ml9Um3Z8Dzp+S0H1KydsP3iDYTAtPlr
jU5mfuokcWt36TtIpPlRwPcChVAHm+XMGjQtxff7+AoIUYXtwq26RwzuvFLP0xFQ
ZEIMa5sQFEQ1iHDLjrvsQzGdyIcYJQ+ISDUFcPq0mbqMhGYmFTnORJ0dS4R1g+R5
TRabZXVVI0zABvYPuzcmv5+mPI+l2K17XCe9Ti/UGp/VsSZETkHsbdH+nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL29bvjIwJSbDpJF8AyXOV4brE7VMB8GA1UdIwQY
MBaAFL8NwUSTFrZWfD4eN0uC7YkrXQ9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMt
NTc1NWIyZjEwNDE4LzEvdmIxdS1NakFsSnNPa2tYd0RKYzVYaHVzVHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMtNTc1NWIyZjEwNDE4
LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkVQYMA0G
CSqGSIb3DQEBCwUAA4IBAQDRAwRAllJQStRYj2g+WR5i3cnyWzGngZlgVbYKJe5E
6VYgBZQlqZ6i2Nx0jBkm9Zu9OzQxlUzk+7BIAy1kZs0iEQWz3q9RQJtgRTiRe5mX
DpZLPkaBMYpGPwg1ZC9+biHYkz9Oa2vy/9PLuhU8VhaiQEoPJZh7bOpJJTPndepH
daorE/2pUTUHqd2LGESh2TzUdsY/jkgwAA04X89uTpo+/X9G6+jWyIY195rFKeeN
u92QGDtQ51+HyuXxBoXqbpe02V+KuF+V7IzLTfGEA/Jz6LguAnr9Uw2V3Hlm3qC5
DHOP55RVTZ3AfOAXoMD5WTyGaf832e2RnTlMaegvfavI
-----END CERTIFICATE-----