Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JvKtBO6v1VonrltKGiTm9_pw1VQ.roa
File:                     JvKtBO6v1VonrltKGiTm9_pw1VQ.roa (raw, json)
Hash identifier:          WWVL4ILR+/dbeC5dFV5rVcKjLBisLq/vK5qSppCgUSI=
Subject key identifier:   26:F2:AD:04:EE:AF:D5:5A:27:AE:5B:4A:1A:24:E6:F7:FA:70:D5:54
Certificate issuer:       /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial:       018C24AFAAE20AE40EB0765C45E3B187EE37
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JvKtBO6v1VonrltKGiTm9_pw1VQ.roa
Signing time:             Fri 01 Dec 2023 09:22:21 +0000
ROA not before:           Fri 01 Dec 2023 09:22:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25697
IP address blocks:        185.168.48.0/24 maxlen: 24
                          2a03:3b00:c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:24:af:aa:e2:0a:e4:0e:b0:76:5c:45:e3:b1:87:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
        Validity
            Not Before: Dec  1 09:22:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26f2ad04eeafd55a27ae5b4a1a24e6f7fa70d554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:d6:6e:f5:25:37:fe:0c:85:b8:0b:12:ca:
                    c9:85:54:b6:fd:7a:3c:d2:85:f6:dc:e5:45:e5:37:
                    b1:6c:a7:ac:dc:e1:f8:eb:5f:5a:3f:cf:fb:15:6e:
                    d1:36:f9:be:af:bc:8c:ba:1b:f1:56:8f:85:f5:c6:
                    8b:96:ca:f9:b5:84:f8:8a:fb:93:e0:db:15:a8:ca:
                    ff:da:dc:6d:5f:e1:04:71:80:95:af:6b:5d:d3:06:
                    36:cc:b1:db:9e:84:f2:1b:21:9f:b1:91:8f:ff:1e:
                    21:60:2b:10:35:ef:00:65:8d:40:c2:63:31:61:6a:
                    14:8d:77:34:5f:ac:ea:be:11:2c:f9:31:d9:8f:b1:
                    d8:a6:b5:ba:f8:5b:b3:20:0f:80:40:d3:81:63:ee:
                    11:82:da:6f:a7:2a:f1:86:77:19:89:ab:44:02:74:
                    46:16:1e:d8:b8:bb:23:28:f2:bb:12:3d:28:37:20:
                    64:1f:09:52:07:97:8f:89:c4:6e:15:aa:be:4a:d6:
                    85:0e:3d:76:9f:e7:e0:99:34:47:d9:06:df:83:85:
                    d4:e9:86:f9:28:e3:2c:88:32:d2:30:e6:6d:5d:7c:
                    38:10:b3:0e:5b:0d:5f:f2:ec:28:65:29:d2:53:fe:
                    37:73:aa:68:b9:35:4a:57:ed:34:a2:a1:5f:be:10:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F2:AD:04:EE:AF:D5:5A:27:AE:5B:4A:1A:24:E6:F7:FA:70:D5:54
            X509v3 Authority Key Identifier:
                keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/JvKtBO6v1VonrltKGiTm9_pw1VQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.48.0/24
                IPv6:
                  2a03:3b00:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:a5:90:52:be:57:ed:3f:06:09:b0:75:ba:fe:75:a8:80:
         64:63:3b:fa:f2:80:47:f6:77:a1:14:a5:64:96:b7:87:5f:02:
         4c:9f:65:6c:0f:2e:22:e0:43:8c:dc:55:c4:09:d1:1a:d2:de:
         79:2d:e4:bd:ba:6b:a0:7c:b7:b0:cc:07:be:1c:74:dd:15:4f:
         b5:07:71:27:2c:3a:d6:e5:f8:c6:3f:a4:bd:14:77:36:45:56:
         8a:71:9a:d4:52:37:cc:4b:df:06:a2:2f:ea:3e:00:f0:3e:37:
         83:37:d8:dd:1c:62:f7:ba:ec:6c:84:69:9b:5f:fa:73:54:f9:
         4a:eb:28:b4:37:e8:3c:8a:d8:5e:fd:3b:e9:ba:d4:d2:ef:83:
         7e:1a:5b:11:a3:52:65:e2:1a:a7:5a:da:85:f4:bc:ec:2b:f8:
         24:b4:5c:e6:ae:34:45:13:7c:61:4b:b9:d5:86:37:88:e8:b9:
         b0:66:54:76:63:c6:a8:83:b4:b0:22:bd:27:2e:0e:cb:fc:ac:
         d3:cd:4a:8e:d4:2a:cf:e6:84:61:e6:1b:25:c7:d1:34:12:8f:
         a4:6f:a8:97:35:0e:b4:7b:fd:d5:a7:23:97:01:1a:bc:61:02:
         21:f5:62:98:bd:95:96:f8:f1:92:56:f1:bd:69:14:b1:31:e2:
         cc:2f:ed:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwkr6riCuQOsHZcReOxh+43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1
YTdiNDUwHhcNMjMxMjAxMDkyMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmYyYWQwNGVlYWZkNTVhMjdhZTViNGExYTI0ZTZmN2ZhNzBkNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hPWbvUlN/4MhbgLEsrJhVS2/Xo8
0oX23OVF5TexbKes3OH4619aP8/7FW7RNvm+r7yMuhvxVo+F9caLlsr5tYT4ivuT
4NsVqMr/2txtX+EEcYCVr2td0wY2zLHbnoTyGyGfsZGP/x4hYCsQNe8AZY1AwmMx
YWoUjXc0X6zqvhEs+THZj7HYprW6+FuzIA+AQNOBY+4RgtpvpyrxhncZiatEAnRG
Fh7YuLsjKPK7Ej0oNyBkHwlSB5ePicRuFaq+StaFDj12n+fgmTRH2Qbfg4XU6Yb5
KOMsiDLSMOZtXXw4ELMOWw1f8uwoZSnSU/43c6pouTVKV+00oqFfvhBYxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCbyrQTur9VaJ65bShok5vf6cNVUMB8GA1UdIwQY
MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct
MjdmYjU4MjJiMzJkLzEvSnZLdEJPNnYxVm9ucmx0S0dpVG05X3B3MVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk
LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuagwMA8E
AgACMAkDBwAqAzsAAAwwDQYJKoZIhvcNAQELBQADggEBAC46pZBSvlftPwYJsHW6
/nWogGRjO/rygEf2d6EUpWSWt4dfAkyfZWwPLiLgQ4zcVcQJ0RrS3nkt5L26a6B8
t7DMB74cdN0VT7UHcScsOtbl+MY/pL0UdzZFVopxmtRSN8xL3waiL+o+APA+N4M3
2N0cYve67GyEaZtf+nNU+UrrKLQ36DyK2F79O+m61NLvg34aWxGjUmXiGqda2oX0
vOwr+CS0XOauNEUTfGFLudWGN4joubBmVHZjxqiDtLAivScuDsv8rNPNSo7UKs/m
hGHmGyXH0TQSj6RvqJc1DrR7/dWnI5cBGrxhAiH1Ypi9lZb48ZJW8b1pFLEx4swv
7WI=
-----END CERTIFICATE-----