Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa
File:                     AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa (raw, json)
Hash identifier:          yhQSmyN0HcZ3EXzGQFpbGak5sucTSv7t5ipQZJDhiGs=
Subject key identifier:   02:85:13:33:1B:06:3D:E8:23:56:3D:40:BC:16:76:13:33:C1:35:AF
Certificate issuer:       /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial:       0188BB37E8C9885873D874076FD2AC6FE66A
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa
Signing time:             Wed 14 Jun 2023 18:43:03 +0000
ROA not before:           Wed 14 Jun 2023 18:43:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212630
IP address blocks:        82.117.241.0/24 maxlen: 24
                          2a0b:53c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bb:37:e8:c9:88:58:73:d8:74:07:6f:d2:ac:6f:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
        Validity
            Not Before: Jun 14 18:43:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=028513331b063de823563d40bc16761333c135af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:f9:84:ab:2c:03:2a:16:04:88:83:67:ca:
                    09:f6:e0:6a:be:70:e0:08:85:1d:f0:c0:9d:33:c6:
                    59:5e:72:42:e2:c1:3c:1d:a5:e7:a4:f6:2d:6e:5f:
                    02:56:1b:5f:8f:af:c9:0f:91:7b:3d:d9:f9:4e:13:
                    05:bf:1c:54:92:fa:97:b1:8c:64:8e:ee:2f:9c:44:
                    b4:81:77:b9:e8:74:60:5a:5e:49:b5:93:dd:de:ec:
                    5b:67:d5:70:96:22:37:9e:a9:05:7f:ae:70:bd:b5:
                    af:98:4f:e9:90:1c:20:ac:53:8e:6b:20:ed:6c:62:
                    82:b1:32:c5:b9:18:38:9f:48:15:d1:28:41:58:0d:
                    de:c3:af:13:2d:1f:4c:80:a1:82:1e:98:5c:a8:61:
                    1f:14:c0:bb:a9:a4:f1:50:01:81:81:35:85:c1:2c:
                    ff:f6:20:98:fb:32:5f:8c:69:5f:46:75:e6:b9:21:
                    bc:e9:87:26:fb:0e:c4:49:d4:59:55:a5:24:ff:c6:
                    ec:99:19:09:d9:7f:cc:0e:8c:10:90:c9:c5:3f:33:
                    15:56:a0:38:d8:06:e9:56:8e:46:16:77:0f:df:00:
                    61:0a:e2:f0:6b:9a:69:02:6a:bf:58:a3:93:c5:6e:
                    87:10:26:21:e6:e7:75:d4:c2:d7:ad:5c:cd:95:96:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:13:33:1B:06:3D:E8:23:56:3D:40:BC:16:76:13:33:C1:35:AF
            X509v3 Authority Key Identifier:
                keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/AoUTMxsGPegjVj1AvBZ2EzPBNa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.117.241.0/24
                IPv6:
                  2a0b:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:23:77:53:0c:85:3a:8d:1b:15:e3:5c:2e:2e:c4:fc:b1:38:
         99:a5:43:fd:a2:a9:dd:02:5c:68:05:e2:3c:9f:22:cd:c2:07:
         00:26:c0:35:0c:49:5c:58:58:1d:c6:e5:bc:a5:31:d3:08:1f:
         ce:01:2f:dd:49:55:36:ef:14:34:35:e6:c3:0a:cb:49:1d:f4:
         31:53:89:ae:8d:ee:2d:88:af:dd:09:71:ba:e0:a8:9c:43:5d:
         ec:e5:cf:a1:30:68:27:d9:a0:63:b1:b0:54:7c:59:52:0c:b7:
         41:11:bf:60:b3:76:05:4b:fd:49:06:b2:86:02:7c:d7:d1:89:
         57:4f:e3:62:4b:be:42:24:d1:6d:54:39:35:a2:c8:1c:78:43:
         64:ea:7a:63:53:87:b5:7f:8d:90:ee:7e:8a:96:b8:66:f5:6b:
         38:a6:3e:82:62:68:08:0c:91:51:73:9e:ee:d4:98:6f:91:b8:
         ef:32:b7:0b:21:3e:72:29:59:db:bb:75:de:a0:c9:fa:d2:c6:
         24:a8:97:12:94:8f:28:03:1f:9d:e4:09:6b:85:a6:16:2a:4c:
         4a:c1:15:e3:45:93:d5:84:4f:71:b0:4f:70:53:16:67:26:33:
         cc:a1:d7:fa:db:62:04:a6:11:7b:23:6a:90:d4:c0:39:02:a2:
         01:a9:09:66
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYi7N+jJiFhz2HQHb9Ksb+ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj
Zjk2Y2EwHhcNMjMwNjE0MTg0MzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjg1MTMzMzFiMDYzZGU4MjM1NjNkNDBiYzE2NzYxMzMzYzEzNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWT5hKssAyoWBIiDZ8oJ9uBqvnDg
CIUd8MCdM8ZZXnJC4sE8HaXnpPYtbl8CVhtfj6/JD5F7Pdn5ThMFvxxUkvqXsYxk
ju4vnES0gXe56HRgWl5JtZPd3uxbZ9VwliI3nqkFf65wvbWvmE/pkBwgrFOOayDt
bGKCsTLFuRg4n0gV0ShBWA3ew68TLR9MgKGCHphcqGEfFMC7qaTxUAGBgTWFwSz/
9iCY+zJfjGlfRnXmuSG86Ycm+w7ESdRZVaUk/8bsmRkJ2X/MDowQkMnFPzMVVqA4
2AbpVo5GFncP3wBhCuLwa5ppAmq/WKOTxW6HECYh5ud11MLXrVzNlZZmNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAKFEzMbBj3oI1Y9QLwWdhMzwTWvMB8GA1UdIwQY
MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt
MzlmNGFiNmVjN2U2LzEvQW9VVE14c0dQZWdqVmoxQXZCWjJFelBCTmE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2
LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUnXxMA0E
AgACMAcDBQAqC1PAMA0GCSqGSIb3DQEBCwUAA4IBAQBjI3dTDIU6jRsV41wuLsT8
sTiZpUP9oqndAlxoBeI8nyLNwgcAJsA1DElcWFgdxuW8pTHTCB/OAS/dSVU27xQ0
NebDCstJHfQxU4muje4tiK/dCXG64KicQ13s5c+hMGgn2aBjsbBUfFlSDLdBEb9g
s3YFS/1JBrKGAnzX0YlXT+NiS75CJNFtVDk1osgceENk6npjU4e1f42Q7n6Klrhm
9Ws4pj6CYmgIDJFRc57u1JhvkbjvMrcLIT5yKVnbu3XeoMn60sYkqJcSlI8oAx+d
5AlrhaYWKkxKwRXjRZPVhE9xsE9wUxZnJjPModf622IEphF7I2qQ1MA5AqIBqQlm
-----END CERTIFICATE-----