Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa
File:                     iWapPsPFD9nhVushbgnvdezlUYM.roa (raw, json)
Hash identifier:          eqf9qs+GCbT3muu8Gtuengz9L96DwW/BjLoCzQzFp0Y=
Subject key identifier:   89:66:A9:3E:C3:C5:0F:D9:E1:56:EB:21:6E:09:EF:75:EC:E5:51:83
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       01856C7840261547114F79FA3E771D4623F2
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa
Signing time:             Sun 01 Jan 2023 08:34:58 +0000
ROA not before:           Sun 01 Jan 2023 08:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.1.172.0/24 maxlen: 24
                          2001:7f8:f5::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:40:26:15:47:11:4f:79:fa:3e:77:1d:46:23:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Jan  1 08:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8966a93ec3c50fd9e156eb216e09ef75ece55183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:57:ce:7d:9b:7d:e7:fc:5c:ca:59:ee:3d:
                    94:5c:57:05:d4:47:b7:d6:49:71:66:dd:61:09:c0:
                    9d:da:5b:09:32:cc:a6:43:7b:ab:5b:24:28:59:c9:
                    0d:94:69:5f:e5:3e:5b:34:3b:54:49:64:88:4d:87:
                    9e:7f:8e:26:d5:f4:bb:87:a2:fb:a3:1b:1e:d2:3d:
                    69:80:ac:1b:2c:6a:c4:ff:c9:b6:e0:5e:51:af:31:
                    e3:a2:6c:e1:64:98:2c:bd:a7:17:9c:2c:d8:f0:e3:
                    e4:84:68:bc:83:12:1a:49:e5:8e:28:fe:39:cf:78:
                    7f:27:eb:79:4c:48:c1:fc:99:93:6f:74:53:23:d3:
                    97:03:91:44:0c:1a:f7:61:54:92:ed:f9:1a:6c:12:
                    37:01:99:9c:0a:62:af:88:6a:95:68:f5:27:74:f6:
                    55:e4:90:16:e2:f0:ad:af:c5:79:dc:5b:06:a0:f3:
                    4e:45:18:82:18:a9:ab:be:9d:86:11:93:33:e5:cd:
                    9e:22:ed:19:6a:45:de:0b:33:d7:8e:25:7a:17:08:
                    6c:88:79:34:88:ed:16:b1:f9:20:aa:fd:db:06:4d:
                    47:ba:dd:d8:ff:04:8d:6f:ac:4b:d4:f0:e0:a3:a2:
                    f4:cc:6b:66:e6:bd:00:28:52:b7:7b:fb:53:a2:e7:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:66:A9:3E:C3:C5:0F:D9:E1:56:EB:21:6E:09:EF:75:EC:E5:51:83
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/iWapPsPFD9nhVushbgnvdezlUYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.172.0/24
                IPv6:
                  2001:7f8:f5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:d9:f1:3e:08:fc:9c:ab:58:b2:0a:db:ae:0c:40:49:c8:64:
         62:9b:f5:d0:d2:b1:a8:ae:be:db:c8:e0:90:79:56:07:ac:28:
         16:70:58:5f:49:c7:43:50:7e:4b:69:a9:7c:1b:04:35:b4:ac:
         5b:51:20:91:79:75:bc:5b:c6:95:97:fd:ae:9c:7b:a3:a5:78:
         91:04:db:30:6a:91:8e:e7:a5:ed:df:4f:12:72:68:c7:52:3a:
         9a:f0:d9:12:25:6f:e4:36:9a:8f:d3:86:fe:0d:86:32:8b:cb:
         88:69:23:b2:ad:60:d0:94:3a:7b:c7:84:8b:09:57:53:b0:87:
         b3:de:55:00:c1:78:3a:a8:ce:d1:f1:3d:5e:28:7a:c6:d6:4a:
         ea:55:5f:fc:76:0b:1a:38:01:c9:2b:85:f1:e5:45:c5:28:b8:
         54:07:8d:bf:24:7f:c8:8a:70:5e:39:95:8e:1f:78:cb:cf:29:
         3f:95:34:90:9c:a8:1a:70:41:11:37:02:b1:e8:2a:31:91:dd:
         ca:b3:42:35:1c:d8:aa:9a:2b:f5:ed:ab:59:ba:78:cc:f6:10:
         dd:ad:80:04:e4:7b:34:66:59:14:d1:61:af:c2:2e:92:d7:33:
         2f:9d:47:7a:90:a2:bd:de:90:54:ab:b8:df:1f:e4:11:04:9a:
         4b:5e:ab:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVseEAmFUcRT3n6PncdRiPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx
ZDNjYTUwHhcNMjMwMTAxMDgzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTY2YTkzZWMzYzUwZmQ5ZTE1NmViMjE2ZTA5ZWY3NWVjZTU1MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLBXzn2bfef8XMpZ7j2UXFcF1Ee3
1klxZt1hCcCd2lsJMsymQ3urWyQoWckNlGlf5T5bNDtUSWSITYeef44m1fS7h6L7
oxse0j1pgKwbLGrE/8m24F5RrzHjomzhZJgsvacXnCzY8OPkhGi8gxIaSeWOKP45
z3h/J+t5TEjB/JmTb3RTI9OXA5FEDBr3YVSS7fkabBI3AZmcCmKviGqVaPUndPZV
5JAW4vCtr8V53FsGoPNORRiCGKmrvp2GEZMz5c2eIu0ZakXeCzPXjiV6FwhsiHk0
iO0Wsfkgqv3bBk1Hut3Y/wSNb6xL1PDgo6L0zGtm5r0AKFK3e/tToudIAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIlmqT7DxQ/Z4VbrIW4J73Xs5VGDMB8GA1UdIwQY
MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt
MWM2ODBhZGY3YTI2LzEvaVdhcFBzUEZEOW5oVnVzaGJnbnZkZXpsVVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2
LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGsMA8E
AgACMAkDBwAgAQf4APUwDQYJKoZIhvcNAQELBQADggEBAAjZ8T4I/JyrWLIK264M
QEnIZGKb9dDSsaiuvtvI4JB5VgesKBZwWF9Jx0NQfktpqXwbBDW0rFtRIJF5dbxb
xpWX/a6ce6OleJEE2zBqkY7npe3fTxJyaMdSOprw2RIlb+Q2mo/Thv4NhjKLy4hp
I7KtYNCUOnvHhIsJV1Owh7PeVQDBeDqoztHxPV4oesbWSupVX/x2Cxo4AckrhfHl
RcUouFQHjb8kf8iKcF45lY4feMvPKT+VNJCcqBpwQRE3ArHoKjGR3cqzQjUc2Kqa
K/Xtq1m6eMz2EN2tgATkezRmWRTRYa/CLpLXMy+dR3qQor3ekFSruN8f5BEEmkte
q3w=
-----END CERTIFICATE-----