Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/RGI35GolnkJDfOfk_vSn835Px4s.roa
File:                     RGI35GolnkJDfOfk_vSn835Px4s.roa (raw, json)
Hash identifier:          Dvp7hBsy+Ft/m+GGAX/L20d2wsQwh4mpMF/KGDTW/kc=
Subject key identifier:   44:62:37:E4:6A:25:9E:42:43:7C:E7:E4:FE:F4:A7:F3:7E:4F:C7:8B
Certificate issuer:       /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial:       0188B5883961C22CB2DAE5E9B669AA32FC1B
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/RGI35GolnkJDfOfk_vSn835Px4s.roa
Signing time:             Tue 13 Jun 2023 16:13:03 +0000
ROA not before:           Tue 13 Jun 2023 16:13:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        194.180.26.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b5:88:39:61:c2:2c:b2:da:e5:e9:b6:69:aa:32:fc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
        Validity
            Not Before: Jun 13 16:13:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=446237e46a259e42437ce7e4fef4a7f37e4fc78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:93:7f:50:8e:e8:4d:4a:22:70:fd:34:65:
                    7e:84:a4:4f:b6:8e:e8:4b:da:6d:07:6c:8a:6a:96:
                    8b:45:89:4a:01:03:e2:53:a9:8a:6b:ef:84:a5:ef:
                    32:e7:0c:66:1b:43:68:86:97:d1:4a:d7:05:4d:5e:
                    2a:e7:fc:43:83:8d:e0:a2:73:e5:0f:d0:3a:61:32:
                    7d:b0:3f:bd:54:8f:2f:22:30:cb:f3:3f:b3:28:40:
                    1b:00:15:ec:aa:2d:40:5c:25:2d:63:39:63:98:7c:
                    08:14:f8:72:cc:a3:b9:47:55:11:b4:3d:bc:3b:57:
                    0b:c5:81:53:3b:d6:dc:3f:90:0d:1f:1b:af:17:08:
                    26:ea:4a:59:c5:eb:d3:07:ac:69:6e:7e:64:f2:b4:
                    34:a3:ae:bd:aa:3a:0a:18:33:bc:05:9e:05:b5:f5:
                    cb:2b:02:38:cc:ea:48:e4:01:5c:7e:2a:70:ce:a7:
                    3c:f6:c8:d4:84:92:70:7b:d3:23:90:d2:5d:7d:59:
                    e3:84:0a:2e:21:b8:83:4e:58:a4:9e:09:25:13:bb:
                    a2:ae:25:b2:0d:c8:a6:eb:29:ff:b9:f0:6a:c6:7d:
                    4d:ab:29:d5:eb:dd:8b:ca:b9:1b:66:2e:d8:5c:59:
                    f3:e4:40:28:31:ed:26:a9:05:2b:22:b2:59:3f:91:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:37:E4:6A:25:9E:42:43:7C:E7:E4:FE:F4:A7:F3:7E:4F:C7:8B
            X509v3 Authority Key Identifier:
                keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/RGI35GolnkJDfOfk_vSn835Px4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:c2:09:d8:a9:fb:58:42:cd:72:94:ea:7d:fa:b9:29:0d:
         25:a8:0e:9a:72:cb:ac:e0:5d:11:25:ba:39:e3:dd:ac:e0:70:
         3d:2d:fd:0c:2e:c4:13:b1:51:32:8c:dc:65:34:10:f3:51:00:
         89:89:54:bc:c6:a7:ec:5b:60:71:4f:22:42:14:f1:40:b6:14:
         2e:68:21:56:4f:00:6c:0b:75:c8:2e:c4:cc:fe:ba:4c:df:a0:
         bf:e5:c0:4d:2b:c6:91:b7:73:e7:10:5e:be:f1:e3:f6:6b:d2:
         3f:98:93:48:26:e1:7b:ad:63:0d:dc:e4:1b:99:39:8f:d3:f7:
         57:97:96:4b:a8:9a:07:64:b4:f5:a6:a2:a8:8a:89:e7:2e:ea:
         95:ae:95:d5:8b:1e:b0:4d:e7:1b:5c:ee:4f:33:7d:71:aa:49:
         ac:d2:ab:a5:57:48:aa:b5:b5:0a:31:5c:e8:3b:19:65:0e:3e:
         43:85:5d:22:ca:8c:df:5b:c2:f0:f0:af:21:aa:97:1d:02:90:
         cc:d4:c2:c1:d0:8f:ae:f5:e0:c2:9a:07:37:38:33:3c:4c:ca:
         9b:65:d7:16:50:35:b2:bf:63:b3:43:ec:90:7a:e9:0d:87:fe:
         10:7c:28:b9:e2:bc:5a:b7:22:8d:f0:4f:7c:ae:eb:00:c1:2a:
         e6:59:a2:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi1iDlhwiyy2uXptmmqMvwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjMwNjEzMTYxMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDYyMzdlNDZhMjU5ZTQyNDM3Y2U3ZTRmZWY0YTdmMzdlNGZjNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYeTf1CO6E1KInD9NGV+hKRPto7o
S9ptB2yKapaLRYlKAQPiU6mKa++Epe8y5wxmG0NohpfRStcFTV4q5/xDg43gonPl
D9A6YTJ9sD+9VI8vIjDL8z+zKEAbABXsqi1AXCUtYzljmHwIFPhyzKO5R1URtD28
O1cLxYFTO9bcP5ANHxuvFwgm6kpZxevTB6xpbn5k8rQ0o669qjoKGDO8BZ4FtfXL
KwI4zOpI5AFcfipwzqc89sjUhJJwe9MjkNJdfVnjhAouIbiDTlikngklE7uiriWy
Dcim6yn/ufBqxn1NqynV692LyrkbZi7YXFnz5EAoMe0mqQUrIrJZP5HEIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERiN+RqJZ5CQ3zn5P70p/N+T8eLMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvUkdJMzVHb2xua0pEZk9ma192U244MzVQeDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwrQaMA0G
CSqGSIb3DQEBCwUAA4IBAQA8k8IJ2Kn7WELNcpTqffq5KQ0lqA6acsus4F0RJbo5
492s4HA9Lf0MLsQTsVEyjNxlNBDzUQCJiVS8xqfsW2BxTyJCFPFAthQuaCFWTwBs
C3XILsTM/rpM36C/5cBNK8aRt3PnEF6+8eP2a9I/mJNIJuF7rWMN3OQbmTmP0/dX
l5ZLqJoHZLT1pqKoionnLuqVrpXVix6wTecbXO5PM31xqkms0qulV0iqtbUKMVzo
OxllDj5DhV0iyozfW8Lw8K8hqpcdApDM1MLB0I+u9eDCmgc3ODM8TMqbZdcWUDWy
v2OzQ+yQeukNh/4QfCi54rxatyKN8E98rusAwSrmWaLW
-----END CERTIFICATE-----