Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gUB2hGTxRrwSLRVFcMFz8RLDWvo.roa
File:                     gUB2hGTxRrwSLRVFcMFz8RLDWvo.roa (raw, json)
Hash identifier:          tCP/r9VNEoIqFhcQU9fgvkmJM71/l2i3wqsJCdYvydI=
Subject key identifier:   81:40:76:84:64:F1:46:BC:12:2D:15:45:70:C1:73:F1:12:C3:5A:FA
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018626EF1AEC000A99A3065A7B7EFF3C0316
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gUB2hGTxRrwSLRVFcMFz8RLDWvo.roa
Signing time:             Mon 06 Feb 2023 13:34:09 +0000
ROA not before:           Mon 06 Feb 2023 13:34:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200223
IP address blocks:        45.131.60.0/24 maxlen: 24
                          2a07:e345::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:26:ef:1a:ec:00:0a:99:a3:06:5a:7b:7e:ff:3c:03:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Feb  6 13:34:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8140768464f146bc122d154570c173f112c35afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:6a:65:d7:0e:ba:05:6d:10:92:65:01:c9:
                    6e:54:92:39:c7:27:8b:21:72:62:73:60:e0:9e:70:
                    01:ce:a3:60:04:e6:a6:6b:78:3b:55:03:6a:cf:e1:
                    35:38:d0:30:96:60:be:f0:97:2c:5a:b8:99:8b:e4:
                    77:1f:f6:11:38:9b:64:7e:fc:64:ec:b1:64:21:f0:
                    16:ef:fb:18:82:0d:6c:db:ad:67:4f:74:60:b3:55:
                    34:df:5f:2f:21:99:f3:a7:5c:9f:d9:3e:23:68:6a:
                    fa:6a:a6:d2:59:1b:84:d9:08:fe:50:9a:5a:a8:2e:
                    e7:cc:c6:bb:3b:57:d9:da:3b:89:75:b4:1c:f9:29:
                    04:dd:c1:d2:2a:93:66:b4:29:84:e9:a2:cc:69:01:
                    55:7e:1d:d9:32:49:80:10:44:ca:18:7b:ea:3a:85:
                    d9:68:98:ef:11:ac:af:6d:c4:44:a4:95:fa:7a:a3:
                    bb:ec:0c:f8:0f:f5:ea:5e:09:6f:27:90:56:16:76:
                    56:24:93:64:10:ca:b3:fd:91:56:42:0b:e0:55:a9:
                    0c:a2:48:e8:aa:80:c9:9d:66:a0:16:4f:48:00:a7:
                    6b:df:a8:50:75:9c:56:c8:33:86:47:f7:63:91:f7:
                    73:fc:a5:b7:5a:16:60:d2:52:9b:f0:23:9c:c9:65:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:40:76:84:64:F1:46:BC:12:2D:15:45:70:C1:73:F1:12:C3:5A:FA
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/gUB2hGTxRrwSLRVFcMFz8RLDWvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.60.0/24
                IPv6:
                  2a07:e345::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:56:f1:a7:10:8d:ce:60:fd:70:c3:a2:ea:de:cc:ef:88:
         dd:66:6b:f5:e1:bf:ea:c0:40:da:0b:65:74:20:8b:b9:5d:3b:
         20:ee:cd:2a:b4:93:a0:f0:a4:05:fe:e2:bb:1b:cc:a6:3e:0f:
         54:8a:e4:89:ea:de:93:76:18:6e:f9:0e:3b:4d:a7:81:d9:18:
         e9:b8:97:d2:d5:e8:33:d9:78:f3:c2:d6:f6:c5:22:4f:c0:a4:
         42:93:66:24:a1:d5:e6:6f:a1:e2:ba:58:d5:4c:46:98:f5:f5:
         37:a6:94:d6:ab:52:1c:ff:a2:47:4d:38:57:88:b9:c0:dc:2b:
         96:a9:a3:5e:70:d4:8e:54:e0:7c:f2:ac:14:91:e6:a0:07:25:
         d8:c1:ba:a2:1a:60:e4:9b:7e:07:52:54:0f:b0:ae:ba:44:f9:
         be:9f:c9:37:b1:b6:ad:df:06:fb:f7:f6:6f:7b:07:fe:a5:8f:
         51:7b:7b:a6:52:9c:c0:d3:d8:04:24:da:2a:e9:0c:38:08:46:
         05:6c:b3:39:8d:53:17:47:9a:4e:dc:7e:a4:58:be:35:1e:9f:
         7f:92:d5:1e:e0:0f:e4:e1:4c:4a:ef:5b:4d:b2:5b:df:e9:7a:
         be:70:60:b3:c1:ce:d3:69:f5:e2:03:ba:0c:e3:29:65:38:91:
         cc:d4:a8:39
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYm7xrsAAqZowZae37/PAMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMjA2MTMzNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTQwNzY4NDY0ZjE0NmJjMTIyZDE1NDU3MGMxNzNmMTEyYzM1YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCZqZdcOugVtEJJlAcluVJI5xyeL
IXJic2DgnnABzqNgBOama3g7VQNqz+E1ONAwlmC+8JcsWriZi+R3H/YROJtkfvxk
7LFkIfAW7/sYgg1s261nT3Rgs1U0318vIZnzp1yf2T4jaGr6aqbSWRuE2Qj+UJpa
qC7nzMa7O1fZ2juJdbQc+SkE3cHSKpNmtCmE6aLMaQFVfh3ZMkmAEETKGHvqOoXZ
aJjvEayvbcREpJX6eqO77Az4D/XqXglvJ5BWFnZWJJNkEMqz/ZFWQgvgVakMokjo
qoDJnWagFk9IAKdr36hQdZxWyDOGR/djkfdz/KW3WhZg0lKb8COcyWUftQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIFAdoRk8Ua8Ei0VRXDBc/ESw1r6MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvZ1VCMmhHVHhScndTTFJWRmNNRno4UkxEV3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYM8MA0E
AgACMAcDBQAqB+NFMA0GCSqGSIb3DQEBCwUAA4IBAQC161bxpxCNzmD9cMOi6t7M
74jdZmv14b/qwEDaC2V0IIu5XTsg7s0qtJOg8KQF/uK7G8ymPg9UiuSJ6t6Tdhhu
+Q47TaeB2RjpuJfS1egz2Xjzwtb2xSJPwKRCk2YkodXmb6HiuljVTEaY9fU3ppTW
q1Ic/6JHTThXiLnA3CuWqaNecNSOVOB88qwUkeagByXYwbqiGmDkm34HUlQPsK66
RPm+n8k3sbat3wb79/Zvewf+pY9Re3umUpzA09gEJNoq6Qw4CEYFbLM5jVMXR5pO
3H6kWL41Hp9/ktUe4A/k4UxK71tNslvf6Xq+cGCzwc7TafXiA7oM4yllOJHM1Kg5
-----END CERTIFICATE-----