Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o3Ch6cdoop33IeWxsNjBw6G-tRM.roa
File:                     o3Ch6cdoop33IeWxsNjBw6G-tRM.roa (raw, json)
Hash identifier:          MYI50QmJgv2wvJLLRGfS+uQRSgrtVX+0MysbpGYziUc=
Subject key identifier:   A3:70:A1:E9:C7:68:A2:9D:F7:21:E5:B1:B0:D8:C1:C3:A1:BE:B5:13
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       018810FA275F1A6ED00E12B782F02D916993
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o3Ch6cdoop33IeWxsNjBw6G-tRM.roa
Signing time:             Fri 12 May 2023 17:20:09 +0000
ROA not before:           Fri 12 May 2023 17:20:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211585
IP address blocks:        185.210.168.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:10:fa:27:5f:1a:6e:d0:0e:12:b7:82:f0:2d:91:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: May 12 17:20:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a370a1e9c768a29df721e5b1b0d8c1c3a1beb513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:d6:d4:22:e6:a0:b2:f0:cc:87:68:a9:9f:
                    dc:f5:00:63:a3:ec:c4:e7:2a:47:67:70:1c:ab:2f:
                    6a:1a:c2:1d:ee:d4:6c:dc:48:4d:0d:25:34:c1:90:
                    38:41:7b:72:5a:27:c6:a2:fb:99:5f:81:24:5f:2c:
                    26:fd:65:8b:57:db:81:1d:6b:00:fe:b8:65:ea:d9:
                    c4:3a:c4:d7:87:24:ed:34:4a:2c:91:61:c3:69:d6:
                    53:a9:16:7c:13:f7:d8:93:f0:e0:e1:ce:81:c3:33:
                    0d:8c:5c:d5:7a:ed:36:04:ff:bc:33:b7:5f:5d:39:
                    03:2a:04:1d:4c:f8:25:e8:66:0a:e2:86:4a:0f:c3:
                    b6:19:11:48:20:8a:04:98:35:b8:7c:08:96:6a:96:
                    49:b1:fa:bb:e6:a2:59:07:66:26:2b:b5:0c:11:46:
                    80:31:33:72:92:d4:b8:8e:bf:87:43:be:bf:11:74:
                    66:73:46:46:55:da:5a:32:c2:10:ed:45:48:ce:b9:
                    ea:47:da:7d:fe:0a:c3:a9:95:a3:73:d7:66:03:90:
                    70:39:6a:6c:a8:a5:ad:8e:ec:bb:7e:0f:93:51:84:
                    a6:14:3e:22:85:9b:9c:55:a9:a7:89:16:f4:e9:02:
                    c5:dc:c8:90:47:70:28:76:08:20:72:fa:4b:63:80:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:A1:E9:C7:68:A2:9D:F7:21:E5:B1:B0:D8:C1:C3:A1:BE:B5:13
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/o3Ch6cdoop33IeWxsNjBw6G-tRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:a5:e2:0f:13:7a:c7:bc:1d:af:7e:b2:5e:82:25:ca:b5:
         b4:da:d6:f8:5e:55:8a:b4:43:83:3a:03:0e:90:9b:f2:f7:ae:
         68:be:2b:60:5b:77:24:cc:2f:15:f5:de:82:0e:e0:2a:c7:84:
         54:e1:09:a9:61:af:a4:53:d6:f4:61:87:a6:3b:4e:92:ff:53:
         bb:2e:20:ed:bc:b1:1c:59:14:c2:2a:f0:ad:7b:3c:96:05:db:
         56:16:4b:0b:63:f1:7c:74:ff:1c:b3:9e:81:78:84:77:5b:e9:
         25:ca:2b:ed:51:bd:69:71:c4:6d:14:c7:04:5b:b7:bb:e0:73:
         60:42:0e:08:08:28:18:7e:c4:12:d1:36:f9:7d:3b:9f:f4:ae:
         78:64:85:22:c7:7c:d5:d0:97:64:23:42:40:55:b3:16:c6:bc:
         a8:4f:3f:d7:c6:45:04:ba:9d:d2:83:a5:81:b5:53:5d:f4:99:
         df:5b:d4:e6:41:09:4a:39:cd:3e:69:39:b9:19:3f:1f:f2:a5:
         3f:69:6b:16:17:83:95:16:bc:8a:17:82:7e:b4:40:de:c2:0f:
         4d:5a:c9:1e:05:9c:76:1c:f1:86:62:24:c0:97:8e:e5:6b:03:
         34:4c:4b:47:0c:ff:ea:bd:e0:cd:05:03:de:a8:ac:43:8a:f5:
         dc:b4:60:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgQ+idfGm7QDhK3gvAtkWmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjMwNTEyMTcyMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzcwYTFlOWM3NjhhMjlkZjcyMWU1YjFiMGQ4YzFjM2ExYmViNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+PW1CLmoLLwzIdoqZ/c9QBjo+zE
5ypHZ3Acqy9qGsId7tRs3EhNDSU0wZA4QXtyWifGovuZX4EkXywm/WWLV9uBHWsA
/rhl6tnEOsTXhyTtNEoskWHDadZTqRZ8E/fYk/Dg4c6BwzMNjFzVeu02BP+8M7df
XTkDKgQdTPgl6GYK4oZKD8O2GRFIIIoEmDW4fAiWapZJsfq75qJZB2YmK7UMEUaA
MTNyktS4jr+HQ76/EXRmc0ZGVdpaMsIQ7UVIzrnqR9p9/grDqZWjc9dmA5BwOWps
qKWtjuy7fg+TUYSmFD4ihZucVamniRb06QLF3MiQR3AodgggcvpLY4AyHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKNwoenHaKKd9yHlsbDYwcOhvrUTMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvbzNDaDZjZG9vcDMzSWVXeHNOakJ3NkctdFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudKoMA0G
CSqGSIb3DQEBCwUAA4IBAQAG9qXiDxN6x7wdr36yXoIlyrW02tb4XlWKtEODOgMO
kJvy965ovitgW3ckzC8V9d6CDuAqx4RU4QmpYa+kU9b0YYemO06S/1O7LiDtvLEc
WRTCKvCtezyWBdtWFksLY/F8dP8cs56BeIR3W+klyivtUb1pccRtFMcEW7e74HNg
Qg4ICCgYfsQS0Tb5fTuf9K54ZIUix3zV0JdkI0JAVbMWxryoTz/XxkUEup3Sg6WB
tVNd9JnfW9TmQQlKOc0+aTm5GT8f8qU/aWsWF4OVFryKF4J+tEDewg9NWskeBZx2
HPGGYiTAl47lawM0TEtHDP/qveDNBQPeqKxDivXctGDW
-----END CERTIFICATE-----