Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa
File:                     NuJuH7n4QRx6qztEUpUBHUQuNek.roa (raw, json)
Hash identifier:          4437SBNS0QstOdtfS04bWDHdkQNdOloQ5wj5Ko1LVzo=
Subject key identifier:   36:E2:6E:1F:B9:F8:41:1C:7A:AB:3B:44:52:95:01:1D:44:2E:35:E9
Certificate issuer:       /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial:       0189B54F925EC9C64BAE2A92684BCF7D2B1F
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa
Signing time:             Wed 02 Aug 2023 08:13:58 +0000
ROA not before:           Wed 02 Aug 2023 08:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61272
IP address blocks:        91.216.163.0/24 maxlen: 32
                          213.252.228.0/22 maxlen: 32
                          213.252.232.0/23 maxlen: 32
                          213.252.238.0/23 maxlen: 32
                          85.206.160.0/20 maxlen: 32
                          185.64.104.0/22 maxlen: 32
                          88.119.160.0/20 maxlen: 32
                          185.25.48.0/22 maxlen: 32
                          85.206.240.0/22 maxlen: 32
                          2a04:2181:c010::/48 maxlen: 64
                          2a04:2181:c011::/48 maxlen: 64
                          2a04:2181:c012::/48 maxlen: 64
                          2a04:2180::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b5:4f:92:5e:c9:c6:4b:ae:2a:92:68:4b:cf:7d:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
        Validity
            Not Before: Aug  2 08:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=36e26e1fb9f8411c7aab3b445295011d442e35e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:da:f4:2b:60:46:a2:0a:3f:39:21:ac:84:
                    47:38:9b:bd:32:45:76:03:7c:a2:03:97:30:82:48:
                    62:e9:8d:28:cb:c6:76:a7:78:93:b3:a6:8c:b8:d1:
                    ef:f5:04:4f:b8:dc:e1:25:00:41:4b:29:61:99:a7:
                    7a:a3:c2:96:36:b8:fc:34:1a:23:8e:8f:b5:7b:c0:
                    ef:95:c0:4b:d6:26:7f:e5:ac:63:89:6c:a3:56:79:
                    13:2e:84:59:2f:91:b3:53:29:c9:43:1a:c8:e9:7c:
                    31:e7:5c:4c:be:01:fc:a3:db:1f:2c:04:cd:8d:71:
                    72:65:17:58:3c:d5:b1:df:5b:d3:c9:7b:72:ab:6e:
                    6a:a5:64:8e:c8:d2:ad:96:30:19:54:61:63:1b:da:
                    a2:98:45:a0:e5:00:42:5f:a1:8a:a0:1f:f2:30:28:
                    c1:82:21:d9:1d:2a:08:8e:9d:c9:c6:94:a7:e8:97:
                    4c:68:c0:9c:89:ae:4a:81:41:3d:f5:16:96:44:80:
                    c4:fc:a7:c6:f2:96:56:60:bd:b3:2a:03:d1:9f:ce:
                    08:02:c7:bb:8e:3f:a5:27:32:fa:55:67:cc:7b:06:
                    89:02:d1:eb:c7:ae:38:ef:f7:aa:3d:06:8a:c7:02:
                    3d:cb:2c:4c:42:dc:f4:db:f8:2b:10:46:8f:10:16:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E2:6E:1F:B9:F8:41:1C:7A:AB:3B:44:52:95:01:1D:44:2E:35:E9
            X509v3 Authority Key Identifier:
                keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.206.160.0/20
                  85.206.240.0/22
                  88.119.160.0/20
                  91.216.163.0/24
                  185.25.48.0/22
                  185.64.104.0/22
                  213.252.228.0-213.252.233.255
                  213.252.238.0/23
                IPv6:
                  2a04:2180::/32
                  2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:b5:c9:08:a9:ac:a4:d4:ef:80:1a:e4:ec:a3:3f:85:b6:
         26:31:c5:bd:ce:c8:cf:95:a3:5a:ab:f4:1c:5d:a9:54:f1:86:
         61:5b:01:77:4e:2c:c5:7b:1e:08:0f:80:7b:3f:9d:fc:12:6d:
         b1:cc:42:d1:68:4c:36:a0:8d:e5:c6:b6:25:34:c4:eb:ad:60:
         7a:bb:d9:86:e3:1d:b0:8d:61:0a:d9:22:f8:cc:f2:fb:ec:fd:
         eb:61:bd:0f:f5:83:95:71:7c:3a:b0:bc:1e:5f:66:6b:f7:60:
         d3:b1:e6:ed:cc:95:90:16:bf:73:c3:fe:9c:b3:66:d6:1d:6d:
         00:73:4c:a5:a3:28:08:e3:ae:ae:b1:db:64:01:80:99:6e:f5:
         29:b6:0f:11:ca:8b:4e:fe:28:a3:24:8f:e9:c3:75:62:83:96:
         e8:91:59:25:65:83:79:ab:8b:c0:32:0b:2f:d3:67:55:b2:85:
         37:bc:c2:76:94:42:1a:04:36:5d:fe:bf:c8:db:df:07:08:40:
         e0:14:b0:71:fa:ff:1a:74:36:49:85:10:3d:41:41:08:b6:67:
         af:0d:72:59:05:5d:93:18:69:3c:e4:9a:24:3c:7e:84:d0:cf:
         f9:94:bc:05:49:cc:9a:3b:72:0e:87:c2:18:e1:6e:71:77:69:
         93:d4:a2:bb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAYm1T5JeycZLriqSaEvPfSsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NmVhNzM1OTIyMWMxYjc3ZDZjYzAwNmY3YjY3MDZhOWE5
MDgyOTkwHhcNMjMwODAyMDgxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmUyNmUxZmI5Zjg0MTFjN2FhYjNiNDQ1Mjk1MDExZDQ0MmUzNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYja9CtgRqIKPzkhrIRHOJu9MkV2
A3yiA5cwgkhi6Y0oy8Z2p3iTs6aMuNHv9QRPuNzhJQBBSylhmad6o8KWNrj8NBoj
jo+1e8DvlcBL1iZ/5axjiWyjVnkTLoRZL5GzUynJQxrI6Xwx51xMvgH8o9sfLATN
jXFyZRdYPNWx31vTyXtyq25qpWSOyNKtljAZVGFjG9qimEWg5QBCX6GKoB/yMCjB
giHZHSoIjp3JxpSn6JdMaMCcia5KgUE99RaWRIDE/KfG8pZWYL2zKgPRn84IAse7
jj+lJzL6VWfMewaJAtHrx6447/eqPQaKxwI9yyxMQtz02/grEEaPEBah6QIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFDbibh+5+EEceqs7RFKVAR1ELjXpMB8GA1UdIwQY
MBaAFLZupzWSIcG3fWzABve2cGqakIKZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMt
Njk5ODM1YzkyYmZlLzEvTnVKdUg3bjRRUng2cXp0RVVwVUJIVVF1TmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mODdhMmUtNDZiMS00YTY2LWE5MGMtNjk5ODM1YzkyYmZl
LzEvdG02bk5aSWh3YmQ5Yk1BRzk3WndhcHFRZ3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzA+BAIAATA4AwQEVc6gAwQC
Vc7wAwQEWHegAwQAW9ijAwQCuRkwAwQCuUBoMAwDBALV/OQDBAHV/OgDBAHV/O4w
IQQCAAIwGwMFACoEIYAwEgMHBCoEIYHAEAMHACoEIYHAEjANBgkqhkiG9w0BAQsF
AAOCAQEAA9a1yQiprKTU74Aa5OyjP4W2JjHFvc7Iz5WjWqv0HF2pVPGGYVsBd04s
xXseCA+Aez+d/BJtscxC0WhMNqCN5ca2JTTE661gervZhuMdsI1hCtki+Mzy++z9
62G9D/WDlXF8OrC8Hl9ma/dg07Hm7cyVkBa/c8P+nLNm1h1tAHNMpaMoCOOurrHb
ZAGAmW71KbYPEcqLTv4ooySP6cN1YoOW6JFZJWWDeauLwDILL9NnVbKFN7zCdpRC
GgQ2Xf6/yNvfBwhA4BSwcfr/GnQ2SYUQPUFBCLZnrw1yWQVdkxhpPOSaJDx+hNDP
+ZS8BUnMmjtyDofCGOFucXdpk9Siuw==
-----END CERTIFICATE-----