Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa
File:                     6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa (raw, json)
Hash identifier:          /SpCrlqpYN2MoAdlp45W8yNnFIyo+Sn27q94tP8IT7E=
Subject key identifier:   E9:97:CC:68:97:46:82:43:11:C5:E7:7D:C3:3D:4C:77:CA:ED:07:F2
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       0187ECAD7D6E69F40BF74FCCF72E16F0271F
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa
Signing time:             Fri 05 May 2023 16:10:05 +0000
ROA not before:           Fri 05 May 2023 16:10:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.95.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ec:ad:7d:6e:69:f4:0b:f7:4f:cc:f7:2e:16:f0:27:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: May  5 16:10:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e997cc689746824311c5e77dc33d4c77caed07f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:79:48:b7:be:94:ee:9c:db:60:2e:6f:58:
                    b0:d5:e9:90:5a:7d:13:48:91:1c:81:ef:72:07:08:
                    5d:c9:32:05:2b:2a:0a:d8:34:e2:2c:39:f3:41:d6:
                    d4:14:65:7a:97:bd:4a:03:c2:b8:ca:7f:c6:3c:93:
                    80:ec:92:4f:fc:32:f1:d5:dc:54:6b:71:ae:2c:31:
                    fd:69:74:85:3f:98:22:8e:61:a7:0d:f6:74:18:bf:
                    6a:37:42:08:c6:ae:98:e4:a9:09:8e:50:8b:ed:b7:
                    e8:74:fd:30:89:33:d4:8b:de:40:c1:67:e8:ec:63:
                    dd:79:55:0c:c8:ea:55:dd:07:ab:df:3f:96:ef:88:
                    bc:b9:f7:2c:29:42:1a:1d:d7:df:03:dd:a7:a0:4b:
                    6d:97:18:88:c3:85:3b:56:49:31:ee:f3:83:db:bb:
                    3d:da:44:02:78:40:d6:d9:8a:d1:3e:ca:a7:54:d7:
                    43:c8:d0:7d:d8:3b:a4:0c:ba:63:66:7d:d5:7b:a3:
                    3e:d9:c3:09:c4:fa:4b:ce:d6:16:68:9f:43:aa:26:
                    10:1e:b3:8f:16:f9:f0:cf:e1:67:00:90:20:99:e8:
                    74:07:79:0d:04:17:4e:f4:8d:37:ca:f3:45:f5:c7:
                    8b:fd:31:cd:67:b4:89:be:24:f0:c0:e1:8c:3f:e0:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:CC:68:97:46:82:43:11:C5:E7:7D:C3:3D:4C:77:CA:ED:07:F2
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/6ZfMaJdGgkMRxed9wz1Md8rtB_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:da:95:52:a5:3c:d5:bf:f4:45:57:26:e0:38:e6:10:c2:8c:
         28:09:cb:22:6d:ac:59:96:d2:b0:60:c0:3d:8c:be:1b:47:c2:
         1b:15:49:e0:c2:d3:ae:e7:5b:b8:8e:f3:fe:a2:0c:f7:71:de:
         f4:54:2b:65:79:5f:87:9c:09:5a:ac:9f:12:c8:59:39:8e:da:
         7d:cf:e5:e3:5f:d0:15:e8:98:7b:8f:97:aa:9b:5b:2e:a3:a0:
         24:ef:e4:21:41:77:b4:1f:61:59:36:39:e3:51:c3:d0:95:a6:
         33:a4:ea:21:03:48:79:20:d4:85:53:a7:56:6b:1e:83:b2:88:
         03:a1:d7:c1:92:b3:36:48:4b:3b:98:59:4f:f7:a1:f8:4a:70:
         e7:10:e9:b1:71:bd:82:d2:6e:65:68:a8:2b:37:be:07:eb:74:
         a1:d9:61:08:17:d0:c2:d6:4f:fe:28:82:92:a5:0c:c8:6b:35:
         f2:43:ef:2b:ff:20:b0:d4:70:43:77:79:db:25:d3:31:88:ed:
         eb:7e:6f:8a:15:63:3e:b7:1e:4a:4a:f1:b1:ac:05:e8:2f:23:
         91:d7:7b:c4:25:db:46:57:97:cb:cd:d1:a2:85:d5:ee:c6:ed:
         1e:fb:dc:02:bd:a0:b5:cb:c0:0c:1c:57:49:21:83:50:24:cc:
         ea:a2:63:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfsrX1uafQL90/M9y4W8CcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjMwNTA1MTYxMDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTk3Y2M2ODk3NDY4MjQzMTFjNWU3N2RjMzNkNGM3N2NhZWQwN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWB5SLe+lO6c22Aub1iw1emQWn0T
SJEcge9yBwhdyTIFKyoK2DTiLDnzQdbUFGV6l71KA8K4yn/GPJOA7JJP/DLx1dxU
a3GuLDH9aXSFP5gijmGnDfZ0GL9qN0IIxq6Y5KkJjlCL7bfodP0wiTPUi95AwWfo
7GPdeVUMyOpV3Qer3z+W74i8ufcsKUIaHdffA92noEttlxiIw4U7Vkkx7vOD27s9
2kQCeEDW2YrRPsqnVNdDyNB92DukDLpjZn3Ve6M+2cMJxPpLztYWaJ9DqiYQHrOP
Fvnwz+FnAJAgmeh0B3kNBBdO9I03yvNF9ceL/THNZ7SJviTwwOGMP+AoGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmXzGiXRoJDEcXnfcM9THfK7QfyMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvNlpmTWFKZEdna01SeGVkOXd6MU1kOHJ0Ql9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/jMA0G
CSqGSIb3DQEBCwUAA4IBAQCe2pVSpTzVv/RFVybgOOYQwowoCcsibaxZltKwYMA9
jL4bR8IbFUngwtOu51u4jvP+ogz3cd70VCtleV+HnAlarJ8SyFk5jtp9z+XjX9AV
6Jh7j5eqm1suo6Ak7+QhQXe0H2FZNjnjUcPQlaYzpOohA0h5INSFU6dWax6DsogD
odfBkrM2SEs7mFlP96H4SnDnEOmxcb2C0m5laKgrN74H63Sh2WEIF9DC1k/+KIKS
pQzIazXyQ+8r/yCw1HBDd3nbJdMxiO3rfm+KFWM+tx5KSvGxrAXoLyOR13vEJdtG
V5fLzdGihdXuxu0e+9wCvaC1y8AMHFdJIYNQJMzqomOg
-----END CERTIFICATE-----