Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LESb-H9ZIdvJhB-i2pX-WFnYDoE.roa
File:                     LESb-H9ZIdvJhB-i2pX-WFnYDoE.roa (raw, json)
Hash identifier:          /Begj3Ue/6vD50DN/D4bFkOodKs2VJcjjvW0htc5ngY=
Subject key identifier:   2C:44:9B:F8:7F:59:21:DB:C9:84:1F:A2:DA:95:FE:58:59:D8:0E:81
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       0187C694025BD3945E549B529D91AF0F16F5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LESb-H9ZIdvJhB-i2pX-WFnYDoE.roa
Signing time:             Fri 28 Apr 2023 06:36:41 +0000
ROA not before:           Fri 28 Apr 2023 06:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199707
IP address blocks:        5.253.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c6:94:02:5b:d3:94:5e:54:9b:52:9d:91:af:0f:16:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Apr 28 06:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c449bf87f5921dbc9841fa2da95fe5859d80e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:a3:1a:f2:3d:6e:3f:53:a9:04:f1:84:5d:
                    a3:83:29:b5:39:c1:1c:2a:89:f8:59:f5:1e:d1:de:
                    e7:26:74:0d:78:41:c3:db:3c:49:91:06:06:b0:51:
                    d8:09:c6:67:76:7f:39:09:99:37:59:44:59:c1:ed:
                    49:16:81:0c:18:2a:59:e6:ba:f8:96:fb:17:93:31:
                    9a:1d:49:0f:28:08:5f:d8:f6:03:ae:d1:d3:8d:1e:
                    16:b8:f3:15:1c:34:3b:1c:c1:96:2a:b8:ad:b8:a7:
                    a1:90:39:08:51:db:df:5c:64:99:c0:fe:de:40:bc:
                    5a:e3:f3:e8:41:9d:85:d2:ee:c6:1b:71:4e:e5:cb:
                    9d:54:cd:60:00:13:67:0f:f2:b7:da:c8:d1:d2:fa:
                    63:7d:37:69:d8:80:b8:5c:f7:66:0f:46:19:2c:d7:
                    61:a9:c5:2c:02:c6:78:82:88:d2:8d:0d:2e:b5:4d:
                    9c:f6:aa:2f:53:43:ea:9f:2d:ea:1f:37:07:34:2a:
                    a9:00:ef:cf:f9:6a:fe:c0:91:88:c7:90:1e:a3:f2:
                    98:09:b4:91:a5:1d:18:fb:ac:92:32:70:be:57:c0:
                    be:40:2d:eb:5c:a1:cc:f2:d4:cc:b9:fe:57:4e:be:
                    26:d1:31:96:98:ab:15:13:df:0a:12:7a:b9:d6:6f:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:44:9B:F8:7F:59:21:DB:C9:84:1F:A2:DA:95:FE:58:59:D8:0E:81
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LESb-H9ZIdvJhB-i2pX-WFnYDoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:24:1b:ce:c3:88:7a:95:f2:8f:8d:ae:06:58:cc:8b:76:08:
         64:90:c7:88:c8:62:53:fe:c9:84:fe:f6:c6:8a:35:1d:92:83:
         30:b5:50:a3:81:84:87:ea:7e:7e:c9:88:99:66:fa:8f:9a:cf:
         d6:c8:97:94:56:c3:1d:75:1b:9f:54:3c:e1:23:2f:7b:c2:e1:
         d6:b7:49:3a:8f:df:66:d3:e4:f2:c4:0f:33:da:03:65:82:82:
         a9:2a:f7:fd:f4:16:1b:39:92:3e:bc:e3:70:8f:f9:f2:05:dc:
         88:4f:2b:5f:73:8d:28:23:4a:a8:57:7a:1d:85:d9:9a:32:36:
         d8:14:00:a9:9d:9d:dc:04:b2:1d:f3:31:5c:e0:31:5d:d4:b9:
         ac:0b:15:67:37:4a:8f:56:84:60:64:b4:e5:4b:99:79:17:0b:
         fa:93:a8:8c:f2:78:c5:e1:0f:08:d8:7e:36:75:47:8b:25:a3:
         9d:09:f8:6a:81:36:58:e5:ea:1c:ac:27:84:1e:f1:14:59:35:
         7e:f9:ff:41:14:e4:fe:40:48:41:70:17:9a:18:5f:e7:eb:8e:
         c9:85:86:f2:3f:bb:00:e6:48:8d:a5:1d:22:ff:c5:20:3f:70:
         03:27:91:aa:7e:dc:f3:1e:94:17:1f:fe:e4:73:51:55:3d:26:
         3e:73:ff:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfGlAJb05ReVJtSnZGvDxb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNDI4MDYzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzQ0OWJmODdmNTkyMWRiYzk4NDFmYTJkYTk1ZmU1ODU5ZDgwZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNijGvI9bj9TqQTxhF2jgym1OcEc
Kon4WfUe0d7nJnQNeEHD2zxJkQYGsFHYCcZndn85CZk3WURZwe1JFoEMGCpZ5rr4
lvsXkzGaHUkPKAhf2PYDrtHTjR4WuPMVHDQ7HMGWKrituKehkDkIUdvfXGSZwP7e
QLxa4/PoQZ2F0u7GG3FO5cudVM1gABNnD/K32sjR0vpjfTdp2IC4XPdmD0YZLNdh
qcUsAsZ4gojSjQ0utU2c9qovU0Pqny3qHzcHNCqpAO/P+Wr+wJGIx5Aeo/KYCbSR
pR0Y+6ySMnC+V8C+QC3rXKHM8tTMuf5XTr4m0TGWmKsVE98KEnq51m+LqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxEm/h/WSHbyYQfotqV/lhZ2A6BMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvTEVTYi1IOVpJZHZKaEItaTJwWC1XRm5ZRG9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABf0kMA0G
CSqGSIb3DQEBCwUAA4IBAQBJJBvOw4h6lfKPja4GWMyLdghkkMeIyGJT/smE/vbG
ijUdkoMwtVCjgYSH6n5+yYiZZvqPms/WyJeUVsMddRufVDzhIy97wuHWt0k6j99m
0+TyxA8z2gNlgoKpKvf99BYbOZI+vONwj/nyBdyITytfc40oI0qoV3odhdmaMjbY
FACpnZ3cBLId8zFc4DFd1LmsCxVnN0qPVoRgZLTlS5l5Fwv6k6iM8njF4Q8I2H42
dUeLJaOdCfhqgTZY5eocrCeEHvEUWTV++f9BFOT+QEhBcBeaGF/n647JhYbyP7sA
5kiNpR0i/8UgP3ADJ5GqftzzHpQXH/7kc1FVPSY+c/8f
-----END CERTIFICATE-----