Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/GMaSpeU9v8BW3c5CrGZb0006HaI.roa
File:                     GMaSpeU9v8BW3c5CrGZb0006HaI.roa (raw, json)
Hash identifier:          NhGlTblaCfmzOFf2TPpQphqdjZIorE1rTAn1WnQHFHo=
Subject key identifier:   18:C6:92:A5:E5:3D:BF:C0:56:DD:CE:42:AC:66:5B:D3:4D:3A:1D:A2
Certificate issuer:       /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial:       01856E2681507E63B8D043818B2285BE2460
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/GMaSpeU9v8BW3c5CrGZb0006HaI.roa
Signing time:             Sun 01 Jan 2023 16:24:55 +0000
ROA not before:           Sun 01 Jan 2023 16:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57119
IP address blocks:        185.175.148.0/22 maxlen: 22
                          2a0b:fd00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:81:50:7e:63:b8:d0:43:81:8b:22:85:be:24:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
        Validity
            Not Before: Jan  1 16:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=18c692a5e53dbfc056ddce42ac665bd34d3a1da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:fd:61:8f:b1:72:63:8b:30:47:aa:28:89:
                    13:5e:68:f0:a0:cf:1b:44:7a:dd:f8:e3:5e:9e:26:
                    77:73:89:33:a4:b1:7b:e6:22:c8:17:fb:9b:48:8e:
                    19:e5:51:33:17:30:e7:23:57:e9:31:a9:53:87:b3:
                    7e:b6:96:17:e2:cd:a3:d7:9f:59:a3:fe:ff:7b:99:
                    93:25:85:16:07:12:af:7a:a7:97:5e:d7:9d:94:77:
                    46:74:3a:92:f3:e2:71:6f:5d:1b:e0:03:c1:8d:95:
                    72:91:8b:29:dc:6f:ab:32:2e:63:41:a1:b4:98:fc:
                    6e:7c:63:2c:93:46:df:a0:59:7e:33:86:bd:3c:ff:
                    2d:23:15:10:a8:63:39:a1:46:0e:1e:9b:75:37:ac:
                    18:e4:6d:d1:90:55:d8:81:36:df:5e:01:23:74:57:
                    db:ae:d8:eb:05:ba:f8:27:14:97:4d:ea:3f:ba:33:
                    0c:83:36:41:2d:d1:28:f8:7e:02:46:c5:8a:90:5a:
                    d9:da:0e:20:2a:ca:8e:b3:da:46:56:c0:8b:cf:e7:
                    cc:49:36:d5:13:0a:4c:ad:08:bf:12:a1:47:30:0c:
                    39:0a:ca:06:6d:81:7d:3e:1b:d0:5b:ea:31:8a:75:
                    76:49:ef:9b:12:4a:2a:f2:eb:37:e7:4c:14:72:e1:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:92:A5:E5:3D:BF:C0:56:DD:CE:42:AC:66:5B:D3:4D:3A:1D:A2
            X509v3 Authority Key Identifier:
                keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/GMaSpeU9v8BW3c5CrGZb0006HaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.148.0/22
                IPv6:
                  2a0b:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:6b:84:e6:dc:f0:53:81:6a:ae:04:9e:67:06:6f:60:34:b5:
         07:10:1a:be:5e:c3:cf:4a:d6:3c:10:69:11:4b:6b:d9:0b:7d:
         c3:bd:0c:23:34:c3:e8:0a:a4:19:83:23:fa:44:09:2d:94:61:
         23:2a:5b:7b:64:61:a6:61:a7:f6:c0:dc:7a:1f:9a:4d:2e:5b:
         af:b3:2c:f7:85:18:f9:f5:3c:65:cd:fc:df:5b:5e:2e:a7:1f:
         ce:aa:31:5e:74:92:da:e9:07:1f:fd:39:9b:1d:05:1a:95:df:
         a5:b6:df:7b:04:d4:fd:66:43:8c:34:a3:1a:19:de:32:4c:a8:
         c2:84:93:77:a5:42:dc:7c:db:c8:bd:dd:2b:4c:90:06:a8:40:
         cf:77:43:c9:0d:29:cd:9f:c7:86:a0:9c:5d:ea:73:31:51:30:
         8e:8c:f0:60:96:e1:72:34:37:d4:b0:63:15:9d:fb:87:f4:fd:
         fb:ca:46:47:89:34:2d:9b:21:2b:b3:b7:49:eb:23:b4:b8:5c:
         26:46:9e:40:8f:38:18:80:91:c3:52:08:af:24:ed:85:a5:3c:
         57:8d:6b:0f:e5:73:8d:84:0e:d1:63:bf:e6:67:33:f2:db:58:
         62:02:e8:99:2f:55:d1:c0:fb:72:5a:18:04:a3:39:40:c1:3f:
         ca:22:69:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuJoFQfmO40EOBiyKFviRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi
YTNlMzgwHhcNMjMwMTAxMTYyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGM2OTJhNWU1M2RiZmMwNTZkZGNlNDJhYzY2NWJkMzRkM2ExZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivf9YY+xcmOLMEeqKIkTXmjwoM8b
RHrd+ONeniZ3c4kzpLF75iLIF/ubSI4Z5VEzFzDnI1fpMalTh7N+tpYX4s2j159Z
o/7/e5mTJYUWBxKveqeXXtedlHdGdDqS8+Jxb10b4APBjZVykYsp3G+rMi5jQaG0
mPxufGMsk0bfoFl+M4a9PP8tIxUQqGM5oUYOHpt1N6wY5G3RkFXYgTbfXgEjdFfb
rtjrBbr4JxSXTeo/ujMMgzZBLdEo+H4CRsWKkFrZ2g4gKsqOs9pGVsCLz+fMSTbV
EwpMrQi/EqFHMAw5CsoGbYF9PhvQW+oxinV2Se+bEkoq8us350wUcuGjEwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBjGkqXlPb/AVt3OQqxmW9NNOh2iMB8GA1UdIwQY
MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt
MTQ5ODcyNDNhYzU2LzEvR01hU3BlVTl2OEJXM2M1Q3JHWmIwMDA2SGFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2
LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua+UMA0E
AgACMAcDBQAqC/0AMA0GCSqGSIb3DQEBCwUAA4IBAQAQa4Tm3PBTgWquBJ5nBm9g
NLUHEBq+XsPPStY8EGkRS2vZC33DvQwjNMPoCqQZgyP6RAktlGEjKlt7ZGGmYaf2
wNx6H5pNLluvsyz3hRj59TxlzfzfW14upx/OqjFedJLa6Qcf/TmbHQUald+ltt97
BNT9ZkOMNKMaGd4yTKjChJN3pULcfNvIvd0rTJAGqEDPd0PJDSnNn8eGoJxd6nMx
UTCOjPBgluFyNDfUsGMVnfuH9P37ykZHiTQtmyErs7dJ6yO0uFwmRp5AjzgYgJHD
UgivJO2FpTxXjWsP5XONhA7RY7/mZzPy21hiAuiZL1XRwPtyWhgEozlAwT/KImkN
-----END CERTIFICATE-----