Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/UG84Y0hOwSwfxDD-ewu2DjzPL8k.roa
File:                     UG84Y0hOwSwfxDD-ewu2DjzPL8k.roa (raw, json)
Hash identifier:          3QqckjP3QET8MKfQfwlHpCTv0zglf6yp1B4A1vNhv1k=
Subject key identifier:   50:6F:38:63:48:4E:C1:2C:1F:C4:30:FE:7B:0B:B6:0E:3C:CF:2F:C9
Certificate issuer:       /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial:       018BB415EC74A499972FFA18CB27AE1D196E
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/UG84Y0hOwSwfxDD-ewu2DjzPL8k.roa
Signing time:             Thu 09 Nov 2023 12:36:57 +0000
ROA not before:           Thu 09 Nov 2023 12:36:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5500
IP address blocks:        193.93.200.0/22 maxlen: 22
                          2a02:56c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 11:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b4:15:ec:74:a4:99:97:2f:fa:18:cb:27:ae:1d:19:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
        Validity
            Not Before: Nov  9 12:36:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=506f3863484ec12c1fc430fe7b0bb60e3ccf2fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ab:bc:f8:17:0f:f2:97:c1:f4:c1:17:61:de:
                    e2:f2:10:4c:9e:8e:e0:bf:96:0c:4b:47:67:87:b3:
                    f9:39:91:b6:2f:04:78:3c:61:e1:e1:8f:76:bd:7a:
                    d3:10:fe:c3:b3:f3:82:b0:ed:8a:45:97:f0:25:36:
                    f7:af:b3:49:c7:0d:86:07:39:74:68:65:1e:73:29:
                    c6:1a:08:a8:59:e2:e4:c5:89:6c:91:87:29:48:36:
                    70:e7:c6:65:90:05:b8:5d:78:2b:4d:c6:75:6e:15:
                    b9:71:94:96:93:66:91:f0:58:b1:b9:29:fc:7a:0b:
                    7f:17:a4:50:14:9b:4c:ca:4a:c9:4d:c7:46:de:e4:
                    ff:6b:d0:68:88:68:bd:52:44:8a:88:d5:98:f2:01:
                    7f:b5:d7:bd:8b:67:6a:41:40:da:43:70:88:5e:a5:
                    2d:2f:42:8d:21:c4:00:bd:a3:78:e6:38:f1:47:f9:
                    95:94:1a:a2:e1:ed:3e:47:cd:ee:84:2e:25:93:8c:
                    6d:17:98:dd:93:16:5d:14:2b:3a:4b:8a:b2:ed:22:
                    08:e4:1a:4a:4f:ed:26:62:ce:30:01:36:67:af:40:
                    7d:8d:32:6f:78:6e:ed:e7:18:72:6d:34:82:0d:93:
                    48:2e:1d:e4:29:f1:63:0d:8e:29:83:00:2c:3b:4d:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:38:63:48:4E:C1:2C:1F:C4:30:FE:7B:0B:B6:0E:3C:CF:2F:C9
            X509v3 Authority Key Identifier:
                keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/UG84Y0hOwSwfxDD-ewu2DjzPL8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.200.0/22
                IPv6:
                  2a02:56c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:78:26:ac:fb:d1:24:cd:b8:38:77:07:44:06:b4:18:57:41:
         b7:00:70:75:55:3c:77:cb:56:81:f8:88:38:71:d8:51:29:f6:
         e4:73:10:e9:c8:fb:6f:44:5e:94:8f:90:7c:2e:73:72:29:24:
         33:71:2e:89:7d:a2:c6:12:ca:17:22:38:33:4a:cf:6f:a2:5b:
         a3:93:a8:66:7b:23:db:fa:f5:95:34:71:ac:a0:ec:1f:c7:87:
         13:36:c0:db:3d:d8:ce:15:b7:ec:43:d4:fe:b7:4e:70:24:d1:
         3b:37:b9:c1:ca:bc:7b:2a:68:70:a3:5a:f8:0b:a5:42:82:63:
         9e:c4:cc:d9:ff:af:eb:b4:e4:d6:46:11:7c:42:dd:8d:04:e6:
         dc:31:76:03:a4:58:a2:fa:e8:1f:e1:a8:18:f9:f0:b3:7b:e3:
         6c:6a:e1:44:94:9a:15:90:d9:66:d2:38:8a:ad:85:1a:b7:54:
         c2:28:91:a2:4f:47:5b:78:46:67:48:88:d1:da:14:77:b9:75:
         73:21:99:8d:a1:25:83:04:91:dc:cf:a0:35:0c:7a:f5:d3:66:
         42:2a:27:33:ea:6d:4d:e9:51:61:43:17:15:b0:a5:52:9e:9a:
         5d:bb:94:0d:17:7f:c4:bd:d3:89:4b:9d:96:f3:2b:af:7f:56:
         30:3d:a9:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYu0Fex0pJmXL/oYyyeuHRluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNjEzNGJjZjU5ZjU4MWQ2Yjc2NjMwY2ZhODc4Njc4NzZh
MjkyMTUwHhcNMjMxMTA5MTIzNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZmMzg2MzQ4NGVjMTJjMWZjNDMwZmU3YjBiYjYwZTNjY2YyZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qu8+BcP8pfB9MEXYd7i8hBMno7g
v5YMS0dnh7P5OZG2LwR4PGHh4Y92vXrTEP7Ds/OCsO2KRZfwJTb3r7NJxw2GBzl0
aGUecynGGgioWeLkxYlskYcpSDZw58ZlkAW4XXgrTcZ1bhW5cZSWk2aR8FixuSn8
egt/F6RQFJtMykrJTcdG3uT/a9BoiGi9UkSKiNWY8gF/tde9i2dqQUDaQ3CIXqUt
L0KNIcQAvaN45jjxR/mVlBqi4e0+R83uhC4lk4xtF5jdkxZdFCs6S4qy7SII5BpK
T+0mYs4wATZnr0B9jTJveG7t5xhybTSCDZNILh3kKfFjDY4pgwAsO0328wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFBvOGNITsEsH8Qw/nsLtg48zy/JMB8GA1UdIwQY
MBaAFDBhNLz1n1gda3ZjDPqHhnh2opIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgt
NmQ4ZWE5ZDFjZDczLzEvVUc4NFkwaE93U3dmeERELWV3dTJEanpQTDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hODk0MWEtNzI1MC00OGVjLWFhZjgtNmQ4ZWE5ZDFjZDcz
LzEvTUdFMHZQV2ZXQjFyZG1NTS1vZUdlSGFpa2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwV3IMA0E
AgACMAcDBQAqAlbAMA0GCSqGSIb3DQEBCwUAA4IBAQBYeCas+9Ekzbg4dwdEBrQY
V0G3AHB1VTx3y1aB+Ig4cdhRKfbkcxDpyPtvRF6Uj5B8LnNyKSQzcS6JfaLGEsoX
IjgzSs9volujk6hmeyPb+vWVNHGsoOwfx4cTNsDbPdjOFbfsQ9T+t05wJNE7N7nB
yrx7Kmhwo1r4C6VCgmOexMzZ/6/rtOTWRhF8Qt2NBObcMXYDpFii+ugf4agY+fCz
e+NsauFElJoVkNlm0jiKrYUat1TCKJGiT0dbeEZnSIjR2hR3uXVzIZmNoSWDBJHc
z6A1DHr102ZCKicz6m1N6VFhQxcVsKVSnppdu5QNF3/EvdOJS52W8yuvf1YwPanK
-----END CERTIFICATE-----