Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/6PHRLFdEF_OSmNAgjoJg4ps4fqQ.roa
File:                     6PHRLFdEF_OSmNAgjoJg4ps4fqQ.roa (raw, json)
Hash identifier:          lP7Out+DnYjr4aTuiIZCYojpjWR9aqjR9loN93ISFkw=
Subject key identifier:   E8:F1:D1:2C:57:44:17:F3:92:98:D0:20:8E:82:60:E2:9B:38:7E:A4
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       018B798B05CE6B28FF262C94A3D6466427B2
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/6PHRLFdEF_OSmNAgjoJg4ps4fqQ.roa
Signing time:             Sun 29 Oct 2023 03:47:15 +0000
ROA not before:           Sun 29 Oct 2023 03:47:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6782
IP address blocks:        195.196.30.0/24 maxlen: 24
                          2a00:ff40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:79:8b:05:ce:6b:28:ff:26:2c:94:a3:d6:46:64:27:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Oct 29 03:47:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8f1d12c574417f39298d0208e8260e29b387ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:75:84:72:5d:3e:a1:9f:53:8d:e8:cd:0a:
                    b8:6b:15:ba:62:b1:9c:8a:f8:c3:c3:a2:c3:e3:18:
                    25:2a:83:f6:37:4c:5f:06:8c:88:30:da:de:4b:40:
                    a4:d5:7b:37:e9:9a:4b:0a:e3:ca:ba:9a:d8:39:ed:
                    40:19:60:49:59:6d:64:3f:9b:ef:6a:7f:eb:69:9e:
                    85:4d:7e:88:c1:ea:d1:60:2c:c9:ca:de:56:eb:71:
                    64:74:a5:b8:5f:d1:e4:93:c8:74:a9:d1:b0:b8:77:
                    e1:b5:cf:57:68:28:58:c2:6f:dd:09:cd:2c:54:b5:
                    24:09:3e:6b:e4:d7:f6:b6:6f:36:d0:89:81:4b:ac:
                    76:98:f4:3f:25:e8:bb:24:e8:d4:31:85:d1:33:b8:
                    5a:c6:30:71:fe:78:47:82:0a:b6:74:27:71:0b:8a:
                    38:00:38:bf:a2:47:d2:33:a6:2d:57:6f:ae:1a:19:
                    49:8e:2f:e1:42:ce:df:0b:ab:74:84:c3:8a:d1:01:
                    30:a4:80:87:67:91:21:81:31:28:6e:76:b2:60:cc:
                    19:54:f6:9e:0b:9c:f7:ef:35:50:db:53:e2:f6:3a:
                    34:17:c8:7c:05:08:88:d6:2f:fa:fd:13:cb:64:62:
                    73:8c:76:8c:1c:57:e8:a4:cd:f8:04:5a:95:f8:66:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F1:D1:2C:57:44:17:F3:92:98:D0:20:8E:82:60:E2:9B:38:7E:A4
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/6PHRLFdEF_OSmNAgjoJg4ps4fqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.196.30.0/24
                IPv6:
                  2a00:ff40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:2a:03:72:38:87:0c:3a:6c:c9:ce:e1:2c:27:28:6e:e7:72:
         32:6f:fb:ca:c9:94:81:f7:fd:43:35:68:40:92:ac:40:03:59:
         5c:a3:0b:55:01:20:4a:45:fd:81:6b:cf:7d:bb:14:af:c4:1a:
         ab:e4:51:a2:04:64:2a:35:84:77:3a:6f:b2:c6:65:47:a5:2e:
         de:bc:14:30:82:c8:7a:0d:cd:cf:30:c2:c2:bf:bd:ba:ff:08:
         5c:0c:f8:3a:8c:4a:5a:8c:8d:2d:c2:5a:e3:05:c1:d7:90:b3:
         a7:1e:54:ad:5b:c2:7e:22:5d:39:53:b3:97:a6:56:e1:90:b1:
         35:3c:07:ff:0d:f9:ea:5f:46:d5:d4:d1:c0:ff:8f:6a:e4:19:
         6d:54:7d:b0:67:09:6d:73:56:0b:bf:78:da:60:ce:89:41:04:
         ee:66:fe:17:9b:70:65:94:e6:a2:1d:6b:da:5c:5f:0c:4d:ca:
         c8:db:fd:f6:8a:76:1b:83:ad:dd:70:91:ea:91:bd:3e:4d:90:
         ab:97:15:96:c7:c9:90:9d:c4:30:0f:23:e4:5b:db:94:3b:e8:
         dd:81:86:9d:60:ff:d6:4c:ca:3c:63:06:b6:15:1a:37:e4:b7:
         04:f3:9e:2a:a1:93:59:4e:4a:36:25:81:3a:47:cb:df:d4:8e:
         33:70:de:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYt5iwXOayj/JiyUo9ZGZCeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz
OTczN2IwHhcNMjMxMDI5MDM0NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGYxZDEyYzU3NDQxN2YzOTI5OGQwMjA4ZTgyNjBlMjliMzg3ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0V1hHJdPqGfU43ozQq4axW6YrGc
ivjDw6LD4xglKoP2N0xfBoyIMNreS0Ck1Xs36ZpLCuPKuprYOe1AGWBJWW1kP5vv
an/raZ6FTX6IwerRYCzJyt5W63FkdKW4X9Hkk8h0qdGwuHfhtc9XaChYwm/dCc0s
VLUkCT5r5Nf2tm820ImBS6x2mPQ/Jei7JOjUMYXRM7haxjBx/nhHggq2dCdxC4o4
ADi/okfSM6YtV2+uGhlJji/hQs7fC6t0hMOK0QEwpICHZ5EhgTEobnayYMwZVPae
C5z37zVQ21Pi9jo0F8h8BQiI1i/6/RPLZGJzjHaMHFfopM34BFqV+GZVOwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOjx0SxXRBfzkpjQII6CYOKbOH6kMB8GA1UdIwQY
MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt
OWJhNGVjMzFjYjZiLzEvNlBIUkxGZEVGX09TbU5BZ2pvSmc0cHM0ZnFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi
LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw8QeMA0E
AgACMAcDBQAqAP9AMA0GCSqGSIb3DQEBCwUAA4IBAQCCKgNyOIcMOmzJzuEsJyhu
53Iyb/vKyZSB9/1DNWhAkqxAA1lcowtVASBKRf2Ba899uxSvxBqr5FGiBGQqNYR3
Om+yxmVHpS7evBQwgsh6Dc3PMMLCv726/whcDPg6jEpajI0twlrjBcHXkLOnHlSt
W8J+Il05U7OXplbhkLE1PAf/DfnqX0bV1NHA/49q5BltVH2wZwltc1YLv3jaYM6J
QQTuZv4Xm3BllOaiHWvaXF8MTcrI2/32inYbg63dcJHqkb0+TZCrlxWWx8mQncQw
DyPkW9uUO+jdgYadYP/WTMo8Ywa2FRo35LcE854qoZNZTko2JYE6R8vf1I4zcN4s
-----END CERTIFICATE-----