Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa
File:                     pKevo_NeujmwCVZFp45b7KIFz3s.roa (raw, json)
Hash identifier:          l6+qFlwyL64KTPnP2quBL38Eli+9FB6tQVq1xWFFZoE=
Subject key identifier:   A4:A7:AF:A3:F3:5E:BA:39:B0:09:56:45:A7:8E:5B:EC:A2:05:CF:7B
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018AB18AAD2B16E4CB7EC915EC07231BD5F4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa
Signing time:             Wed 20 Sep 2023 07:42:50 +0000
ROA not before:           Wed 20 Sep 2023 07:42:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38915
IP address blocks:        2a07:3502:1070::/48 maxlen: 48
                          2a07:3502:1040::/48 maxlen: 48
                          2a07:3502:1090::/48 maxlen: 48
                          2a07:3502:11d0::/48 maxlen: 48
                          2a07:3500:19f8::/48 maxlen: 48
                          2a07:3500:19d8::/48 maxlen: 48
                          2a07:3500:1998::/48 maxlen: 48
                          2a07:3500:19e8::/48 maxlen: 48
                          2a07:3500:19a8::/48 maxlen: 48
                          2a07:3500:19a0::/48 maxlen: 48
                          2a07:3500:19e0::/48 maxlen: 48
                          2a07:3500:19f0::/48 maxlen: 48
                          2a07:3500:19b0::/48 maxlen: 48
                          2a07:3500:1200::/48 maxlen: 48
                          2a07:3500:1a00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b1:8a:ad:2b:16:e4:cb:7e:c9:15:ec:07:23:1b:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Sep 20 07:42:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4a7afa3f35eba39b0095645a78e5beca205cf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:75:f3:94:fa:75:ba:0a:37:ad:e3:8d:00:
                    95:d9:92:fc:94:f2:3d:b1:c7:f5:25:cc:f2:6f:9b:
                    0c:44:74:25:dd:c0:dd:25:78:3c:55:e9:ca:33:e4:
                    b8:5d:49:0c:d3:12:28:45:cb:61:7b:7d:cd:f2:2a:
                    09:86:d8:ba:c2:ba:03:b6:87:de:33:5c:b3:0b:6c:
                    e5:32:75:70:5b:b6:5c:a2:39:1b:41:51:b4:43:9d:
                    c8:98:28:c4:e4:54:32:46:8c:1c:9a:3b:3f:44:a2:
                    4e:ca:80:f2:ee:39:ba:7f:ac:36:49:b3:8b:9c:4f:
                    b5:83:e0:5b:8d:ab:f2:5c:df:a4:e8:64:41:5c:68:
                    d7:aa:fc:88:da:d9:e3:60:93:0b:73:51:55:cb:a5:
                    54:b0:30:56:63:02:01:f8:05:52:24:4e:9c:89:dc:
                    9b:df:76:b5:61:cb:88:1f:96:4e:7f:99:fe:18:e0:
                    9e:d9:65:77:49:33:1d:32:9c:81:7e:e2:36:3f:2c:
                    0f:ee:eb:3a:23:90:92:35:c0:2f:15:9d:23:cf:28:
                    e4:68:ef:3b:96:7b:23:3f:a3:ae:2f:cd:cb:26:3c:
                    3f:e0:5c:ba:96:30:c2:f0:94:14:b7:fe:8c:91:a9:
                    46:cc:43:ff:37:1a:6f:21:8a:63:86:b3:f3:29:44:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:AF:A3:F3:5E:BA:39:B0:09:56:45:A7:8E:5B:EC:A2:05:CF:7B
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/pKevo_NeujmwCVZFp45b7KIFz3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:3500:1200::/48
                  2a07:3500:1998::/48
                  2a07:3500:19a0::/48
                  2a07:3500:19a8::/48
                  2a07:3500:19b0::/48
                  2a07:3500:19d8::/48
                  2a07:3500:19e0::/48
                  2a07:3500:19e8::/48
                  2a07:3500:19f0::/48
                  2a07:3500:19f8::/48
                  2a07:3500:1a00::/48
                  2a07:3502:1040::/48
                  2a07:3502:1070::/48
                  2a07:3502:1090::/48
                  2a07:3502:11d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:d1:3b:ee:ca:01:b6:e9:fc:ac:b6:45:9f:5e:b2:cd:61:
         05:c7:c3:31:b2:48:bb:ab:1b:20:e9:2b:bc:66:e4:89:78:ac:
         b6:6d:08:6b:a8:87:33:ab:0f:c4:f2:06:88:7f:11:ce:32:cf:
         3c:df:82:19:2f:28:0b:a7:6a:89:e0:9c:d8:ad:a7:0d:1b:6a:
         ca:38:5d:93:ec:cd:dc:90:57:50:39:25:db:59:07:e2:bd:a6:
         73:13:2e:b0:17:81:db:90:ed:0d:eb:a5:ab:1f:9d:04:7a:97:
         0a:98:e3:95:13:07:2e:8a:2a:b4:d9:47:b0:a9:67:8a:a8:77:
         c9:9e:fd:9a:8b:91:c3:02:b2:07:5d:2a:b1:26:59:0e:2e:92:
         e5:e9:c7:aa:cf:4a:d8:70:b9:a1:f6:c5:fe:32:ce:55:dc:62:
         19:9c:ba:e5:dc:4a:dd:e4:ad:89:0e:a8:3e:f9:0a:de:54:59:
         76:cc:55:6f:e2:32:d5:d9:11:b7:49:a7:7d:80:c4:a3:6c:31:
         c9:63:fd:98:82:b4:f5:1a:c2:aa:a8:e7:38:91:4f:19:28:4d:
         76:b7:bf:33:58:9e:6c:30:ad:1f:7d:63:fb:2d:a9:68:05:58:
         0a:55:f5:9c:46:48:ca:05:cf:63:a2:33:98:bd:70:f7:55:9e:
         79:ca:eb:67
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAYqxiq0rFuTLfskV7AcjG9X0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMwOTIwMDc0MjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGE3YWZhM2YzNWViYTM5YjAwOTU2NDVhNzhlNWJlY2EyMDVjZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniF185T6dboKN63jjQCV2ZL8lPI9
scf1Jczyb5sMRHQl3cDdJXg8VenKM+S4XUkM0xIoRcthe33N8ioJhti6wroDtofe
M1yzC2zlMnVwW7ZcojkbQVG0Q53ImCjE5FQyRowcmjs/RKJOyoDy7jm6f6w2SbOL
nE+1g+BbjavyXN+k6GRBXGjXqvyI2tnjYJMLc1FVy6VUsDBWYwIB+AVSJE6cidyb
33a1YcuIH5ZOf5n+GOCe2WV3STMdMpyBfuI2PywP7us6I5CSNcAvFZ0jzyjkaO87
lnsjP6OuL83LJjw/4Fy6ljDC8JQUt/6MkalGzEP/NxpvIYpjhrPzKUQKSQIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFKSnr6PzXro5sAlWRaeOW+yiBc97MB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvcEtldm9fTmV1am13Q1ZaRnA0NWI3S0lGejNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTCBjgQCAAIwgYcDBwAq
BzUAEgADBwAqBzUAGZgDBwAqBzUAGaADBwAqBzUAGagDBwAqBzUAGbADBwAqBzUA
GdgDBwAqBzUAGeADBwAqBzUAGegDBwAqBzUAGfADBwAqBzUAGfgDBwAqBzUAGgAD
BwAqBzUCEEADBwAqBzUCEHADBwAqBzUCEJADBwAqBzUCEdAwDQYJKoZIhvcNAQEL
BQADggEBAFwN0TvuygG26fystkWfXrLNYQXHwzGySLurGyDpK7xm5Il4rLZtCGuo
hzOrD8TyBoh/Ec4yzzzfghkvKAunaongnNitpw0baso4XZPszdyQV1A5JdtZB+K9
pnMTLrAXgduQ7Q3rpasfnQR6lwqY45UTBy6KKrTZR7CpZ4qod8me/ZqLkcMCsgdd
KrEmWQ4ukuXpx6rPSthwuaH2xf4yzlXcYhmcuuXcSt3krYkOqD75Ct5UWXbMVW/i
MtXZEbdJp32AxKNsMclj/ZiCtPUawqqo5ziRTxkoTXa3vzNYnmwwrR99Y/stqWgF
WApV9ZxGSMoFz2OiM5i9cPdVnnnK62c=
-----END CERTIFICATE-----