Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa
File:                     3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa (raw, json)
Hash identifier:          kPmnw7aEns/tjlwe4ux6Njvqx1b36bwZhHvF8QM6F/M=
Subject key identifier:   DE:4C:BD:95:C8:17:29:7F:A3:51:28:DB:68:EE:B2:E7:03:07:DA:E7
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       0185720C54B931F7F9F3A85415E3B976ABB0
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa
Signing time:             Mon 02 Jan 2023 10:34:48 +0000
ROA not before:           Mon 02 Jan 2023 10:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211030
IP address blocks:        195.5.115.0/24 maxlen: 24
                          2a0d:f407:1030::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:54:b9:31:f7:f9:f3:a8:54:15:e3:b9:76:ab:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan  2 10:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=de4cbd95c817297fa35128db68eeb2e70307dae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:e1:de:cc:76:9f:8c:1d:e0:9a:41:b6:84:
                    37:a6:4a:f8:27:78:e3:9f:a3:64:11:48:a8:16:ae:
                    c1:77:2a:a7:f8:eb:10:02:3e:24:c6:7b:11:e6:60:
                    08:03:b0:84:86:2b:1d:66:49:09:a5:b0:53:8c:57:
                    a2:88:42:23:04:3b:e7:f9:3e:5f:ad:f6:91:15:c1:
                    5a:b5:13:f3:e6:17:b2:f2:c0:0e:00:3c:c2:a5:24:
                    f6:e6:a4:7d:8b:9d:12:d7:7f:a8:fa:07:05:2d:ef:
                    6f:62:cd:ee:01:3b:31:1f:02:22:a8:21:48:17:98:
                    bc:cf:64:ee:4f:b7:1f:d7:37:ad:d1:b1:0c:1b:80:
                    56:48:19:2b:cc:11:d2:9c:b2:d5:d7:97:6a:71:98:
                    2f:e0:c2:24:6a:50:db:1d:d5:7e:2a:a8:3f:a3:e5:
                    e9:f1:34:8b:b8:80:55:02:fa:a8:3e:04:ac:d5:ad:
                    23:6a:26:3b:e6:de:69:00:23:c9:52:c4:73:d9:e2:
                    69:53:f8:69:4e:72:15:8c:18:3a:29:12:a2:9b:b9:
                    b8:90:39:fb:bc:ef:00:3b:2a:84:9f:e7:8e:77:d7:
                    ea:9c:9b:5d:3c:7f:7b:61:32:99:96:6b:78:7b:71:
                    d5:50:73:55:c9:f8:65:9d:d4:53:53:64:37:18:c0:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4C:BD:95:C8:17:29:7F:A3:51:28:DB:68:EE:B2:E7:03:07:DA:E7
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/3ky9lcgXKX-jUSjbaO6y5wMH2uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.115.0/24
                IPv6:
                  2a0d:f407:1030::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:79:88:f7:3a:a1:34:a3:f7:a4:84:fc:dc:80:e2:3d:7d:
         ee:e7:8f:d9:94:cb:7d:c6:3a:b2:1a:c9:f4:f8:75:a0:89:07:
         a2:29:a9:c3:19:3d:81:fc:c5:6f:e6:ea:dd:32:56:22:e0:aa:
         8f:f1:7e:db:af:e2:4f:eb:2f:97:ed:32:6a:43:df:81:2c:80:
         d3:c7:ce:d5:1e:6e:d2:c2:2c:7d:8b:e5:5d:12:37:f3:86:62:
         15:71:82:ed:28:fd:18:c0:3c:0a:5e:e2:c5:50:a2:9d:86:0b:
         ab:f0:10:ce:0d:cc:c5:6a:6c:55:85:4b:63:b6:da:5c:85:fa:
         4a:e5:35:04:61:1f:64:4f:c2:0d:de:68:ce:34:7f:fe:c6:8a:
         1a:83:89:7e:30:aa:61:9d:73:4d:d5:98:14:3a:0f:4a:6c:59:
         85:fe:d6:fa:83:7f:9a:9e:4d:cd:00:87:43:7d:3f:b0:02:81:
         1e:90:2f:cb:66:66:44:74:77:b4:66:8d:e9:6e:80:a9:18:fb:
         8c:cb:48:45:7a:51:7f:69:29:5a:02:27:c6:ec:3e:fa:8a:ec:
         ba:55:da:6c:ac:94:d4:26:a2:75:01:74:3d:60:a4:f8:29:15:
         74:13:b8:e0:4e:20:1e:9d:d0:aa:fa:3b:4d:2c:27:2f:a8:e8:
         ff:0b:73:49
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVyDFS5Mff586hUFeO5dquwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjMwMTAyMTAzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTRjYmQ5NWM4MTcyOTdmYTM1MTI4ZGI2OGVlYjJlNzAzMDdkYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ7h3sx2n4wd4JpBtoQ3pkr4J3jj
n6NkEUioFq7Bdyqn+OsQAj4kxnsR5mAIA7CEhisdZkkJpbBTjFeiiEIjBDvn+T5f
rfaRFcFatRPz5hey8sAOADzCpST25qR9i50S13+o+gcFLe9vYs3uATsxHwIiqCFI
F5i8z2TuT7cf1zet0bEMG4BWSBkrzBHSnLLV15dqcZgv4MIkalDbHdV+Kqg/o+Xp
8TSLuIBVAvqoPgSs1a0jaiY75t5pACPJUsRz2eJpU/hpTnIVjBg6KRKim7m4kDn7
vO8AOyqEn+eOd9fqnJtdPH97YTKZlmt4e3HVUHNVyfhlndRTU2Q3GMDarQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN5MvZXIFyl/o1Eo22jusucDB9rnMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvM2t5OWxjZ1hLWC1qVVNqYmFPNnk1d01IMnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwwVzMA8E
AgACMAkDBwAqDfQHEDAwDQYJKoZIhvcNAQELBQADggEBAELBeYj3OqE0o/ekhPzc
gOI9fe7nj9mUy33GOrIayfT4daCJB6IpqcMZPYH8xW/m6t0yViLgqo/xftuv4k/r
L5ftMmpD34EsgNPHztUebtLCLH2L5V0SN/OGYhVxgu0o/RjAPApe4sVQop2GC6vw
EM4NzMVqbFWFS2O22lyF+krlNQRhH2RPwg3eaM40f/7GihqDiX4wqmGdc03VmBQ6
D0psWYX+1vqDf5qeTc0Ah0N9P7ACgR6QL8tmZkR0d7RmjelugKkY+4zLSEV6UX9p
KVoCJ8bsPvqK7LpV2myslNQmonUBdD1gpPgpFXQTuOBOIB6d0Kr6O00sJy+o6P8L
c0k=
-----END CERTIFICATE-----