Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LdlPs_Er7yWDffyAwrUhIENKfkg.roa
File:                     LdlPs_Er7yWDffyAwrUhIENKfkg.roa (raw, json)
Hash identifier:          2eYcc7JXPQl15aRV/bfdWyNEKody3l3GBxOi7Ko3NZY=
Subject key identifier:   2D:D9:4F:B3:F1:2B:EF:25:83:7D:FC:80:C2:B5:21:20:43:4A:7E:48
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       0188917482E6BBCEF928E8DF290EC998C35B
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LdlPs_Er7yWDffyAwrUhIENKfkg.roa
Signing time:             Tue 06 Jun 2023 16:05:11 +0000
ROA not before:           Tue 06 Jun 2023 16:05:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15224
IP address blocks:        185.34.188.0/23 maxlen: 23
                          2a00:db60:2000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:74:82:e6:bb:ce:f9:28:e8:df:29:0e:c9:98:c3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Jun  6 16:05:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dd94fb3f12bef25837dfc80c2b52120434a7e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:03:2c:8f:cd:81:9d:42:ad:b6:30:27:31:
                    2f:23:be:4d:ea:f6:5e:9a:41:f7:e2:9a:96:62:09:
                    8a:35:ce:f9:0f:b9:7c:de:73:d6:a9:13:bc:33:92:
                    19:a3:72:b0:0b:ce:72:bd:7c:04:27:b2:7f:33:ba:
                    0d:d6:67:e6:bd:f4:5d:c8:4b:ba:8a:0a:01:14:98:
                    cc:c9:26:59:8a:94:c7:31:6f:59:f3:1f:64:26:09:
                    86:d6:8f:6d:72:28:25:05:60:c4:fc:83:73:d2:d8:
                    d5:10:08:57:96:74:cc:05:30:f7:88:dc:5b:68:8d:
                    d4:e0:0b:0f:f5:3c:1c:66:f9:64:59:56:86:42:73:
                    18:c2:e6:f4:48:35:c5:75:27:bf:d3:63:4b:1e:e2:
                    fe:64:74:ad:12:15:38:86:d1:13:f3:06:92:bb:a8:
                    de:6f:7b:bd:7c:57:65:68:cf:b7:62:c1:ad:17:06:
                    84:ae:d9:7d:e1:81:99:3d:43:9e:d1:75:d0:85:6c:
                    11:22:5f:ea:da:bc:4c:07:f9:6a:f1:5f:1e:8c:83:
                    a2:f2:7f:22:27:01:cd:b3:0f:dc:e4:a8:23:88:a7:
                    cd:4d:b3:4b:f5:54:cd:1b:b6:4c:fd:30:cd:35:48:
                    13:c7:f3:d2:69:a0:e4:a7:7d:9b:f4:be:a2:47:1e:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D9:4F:B3:F1:2B:EF:25:83:7D:FC:80:C2:B5:21:20:43:4A:7E:48
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/LdlPs_Er7yWDffyAwrUhIENKfkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.188.0/23
                IPv6:
                  2a00:db60:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:a5:e9:5f:41:43:2f:df:c5:65:61:b6:c5:fb:48:c6:e7:0e:
         e5:13:97:0f:10:27:b2:58:64:26:6a:e6:1d:7d:bd:82:c1:f5:
         0b:37:f7:1a:89:b4:23:ab:1b:32:da:99:d4:1d:7f:33:06:6a:
         42:eb:ee:7d:65:3f:c8:46:58:4d:90:41:9f:b3:e3:e7:4a:d6:
         5b:d0:74:b9:c3:65:5f:51:a2:3e:17:63:04:0a:76:a6:fa:39:
         dd:ec:00:92:11:8b:58:81:b4:3c:49:f1:ed:10:8c:7b:ef:ca:
         91:c8:3d:43:92:54:5a:f2:d6:f0:fa:d2:61:5f:f4:d4:26:50:
         67:ee:83:d8:16:91:de:8f:ee:6d:14:2f:b6:e2:88:fd:d1:bd:
         00:a4:9f:98:8b:ee:03:1a:f8:4a:62:e4:78:32:f8:16:9a:81:
         75:d7:fa:77:2c:01:f7:a2:5d:3b:f8:91:f3:d1:60:0f:a3:60:
         a8:72:3e:47:2d:5f:38:8e:f9:e0:1e:4e:24:35:18:5c:96:0d:
         f7:2d:ef:54:d4:76:d3:8c:e9:3d:fe:de:28:5b:fb:d9:f3:10:
         2e:02:17:82:57:c7:dc:c1:f2:ec:54:ba:d4:14:de:8d:2b:b6:
         ab:1f:34:cd:ef:d2:db:30:a3:a2:1e:59:04:29:c2:a0:14:36:
         8c:d8:eb:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiRdILmu875KOjfKQ7JmMNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz
MDZhMTcwHhcNMjMwNjA2MTYwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGQ5NGZiM2YxMmJlZjI1ODM3ZGZjODBjMmI1MjEyMDQzNGE3ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0oDLI/NgZ1CrbYwJzEvI75N6vZe
mkH34pqWYgmKNc75D7l83nPWqRO8M5IZo3KwC85yvXwEJ7J/M7oN1mfmvfRdyEu6
igoBFJjMySZZipTHMW9Z8x9kJgmG1o9tciglBWDE/INz0tjVEAhXlnTMBTD3iNxb
aI3U4AsP9TwcZvlkWVaGQnMYwub0SDXFdSe/02NLHuL+ZHStEhU4htET8waSu6je
b3u9fFdlaM+3YsGtFwaErtl94YGZPUOe0XXQhWwRIl/q2rxMB/lq8V8ejIOi8n8i
JwHNsw/c5KgjiKfNTbNL9VTNG7ZM/TDNNUgTx/PSaaDkp32b9L6iRx5kYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC3ZT7PxK+8lg338gMK1ISBDSn5IMB8GA1UdIwQY
MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt
MmJiZjhmYWEwMGNhLzEvTGRsUHNfRXI3eVdEZmZ5QXdyVWhJRU5LZmtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh
LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuSK8MA8E
AgACMAkDBwAqANtgIAAwDQYJKoZIhvcNAQELBQADggEBAKal6V9BQy/fxWVhtsX7
SMbnDuUTlw8QJ7JYZCZq5h19vYLB9Qs39xqJtCOrGzLamdQdfzMGakLr7n1lP8hG
WE2QQZ+z4+dK1lvQdLnDZV9Roj4XYwQKdqb6Od3sAJIRi1iBtDxJ8e0QjHvvypHI
PUOSVFry1vD60mFf9NQmUGfug9gWkd6P7m0UL7biiP3RvQCkn5iL7gMa+Epi5Hgy
+BaagXXX+ncsAfeiXTv4kfPRYA+jYKhyPkctXziO+eAeTiQ1GFyWDfct71TUdtOM
6T3+3ihb+9nzEC4CF4JXx9zB8uxUutQU3o0rtqsfNM3v0tswo6IeWQQpwqAUNozY
6/U=
-----END CERTIFICATE-----