Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/lz4ObykiUjv8Nb2ofC9mSGJFSH8.roa
File:                     lz4ObykiUjv8Nb2ofC9mSGJFSH8.roa (raw, json)
Hash identifier:          b8VjCLTGdRZqVdkYRouk/MYtcwxx08DvO1f1ivGVSu0=
Subject key identifier:   97:3E:0E:6F:29:22:52:3B:FC:35:BD:A8:7C:2F:66:48:62:45:48:7F
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       018940EA95BDB5895AA81E0C88F8D5E03FAB
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/lz4ObykiUjv8Nb2ofC9mSGJFSH8.roa
Signing time:             Mon 10 Jul 2023 17:47:42 +0000
ROA not before:           Mon 10 Jul 2023 17:47:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35838
IP address blocks:        2a02:1788::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:40:ea:95:bd:b5:89:5a:a8:1e:0c:88:f8:d5:e0:3f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Jul 10 17:47:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=973e0e6f2922523bfc35bda87c2f66486245487f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b5:ec:d3:71:51:c6:14:9d:83:d8:c5:63:c3:
                    b8:8e:42:0e:ae:54:e7:45:39:0f:07:a8:ce:d5:b6:
                    c7:03:03:b9:e9:51:33:d4:8c:84:cf:71:5e:d6:01:
                    10:c5:c3:a7:80:57:62:8c:ca:e9:5f:0b:19:41:a7:
                    1a:f0:a3:33:68:f1:7d:fa:87:f8:5b:44:79:10:04:
                    2a:a8:3c:5d:10:26:14:68:68:58:d8:43:c3:f6:60:
                    17:9f:6a:f8:67:d6:47:90:a0:24:c2:dd:12:9a:29:
                    ca:8e:1c:2b:df:2d:44:3e:f0:c2:af:a1:69:38:0f:
                    56:81:28:57:40:7c:95:fb:96:51:bb:04:39:3d:df:
                    33:b8:29:07:a9:ff:56:52:a8:2a:e2:3a:cc:74:60:
                    69:00:d0:f3:68:ea:c8:76:19:a1:3f:21:a5:13:96:
                    48:58:0c:89:b7:5d:f7:3f:77:de:0b:d2:9d:bd:4a:
                    ae:60:ba:4b:2f:83:0a:a9:a2:92:0d:fb:42:28:96:
                    e0:97:da:1a:46:ce:76:d5:d6:d0:5a:e7:47:2f:1d:
                    d7:ca:df:28:2c:71:f8:83:7d:ad:60:0a:cb:c3:97:
                    96:db:0b:09:27:bb:ca:be:43:fe:3b:5f:ad:cc:50:
                    3a:8d:8b:c4:65:db:65:91:4f:b4:82:62:06:50:88:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:0E:6F:29:22:52:3B:FC:35:BD:A8:7C:2F:66:48:62:45:48:7F
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/lz4ObykiUjv8Nb2ofC9mSGJFSH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:1788::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:86:15:e5:ca:b5:aa:26:a2:7f:88:d8:11:96:44:2d:b3:
         90:2f:c0:f9:f1:61:2f:d3:60:d1:d9:c1:0f:50:b5:2f:10:72:
         69:b3:c0:bd:2b:2c:ab:2e:67:c3:4b:75:2b:aa:59:e4:de:cf:
         c7:fa:13:98:31:34:a5:4a:7c:c9:c2:b1:e7:5b:e8:e8:34:d3:
         b8:04:a8:9e:9b:50:1e:7b:78:78:bc:a9:d2:f4:b5:be:93:63:
         b2:16:66:69:81:4a:ba:77:5a:77:f8:be:92:14:32:68:df:bc:
         86:ff:9a:44:26:2b:49:9f:8e:16:2c:70:5b:58:2c:99:88:4e:
         b2:df:00:72:fc:47:94:36:eb:3d:a1:75:a6:d9:c1:e4:a7:fa:
         82:91:3b:ea:b3:b6:4e:14:0e:dd:8f:9a:6c:b0:8b:8a:e6:9f:
         24:30:71:ab:42:50:46:ce:b2:40:e8:96:67:ac:7e:8d:66:97:
         97:a3:16:e9:aa:5f:33:cd:78:93:28:ec:cd:ff:34:d5:c8:3c:
         8a:31:41:50:5b:a1:36:b4:1c:82:cc:a2:87:73:75:b3:65:4a:
         17:fc:fe:d5:46:9a:18:0d:6f:07:83:26:aa:a0:19:e0:69:aa:
         b7:a7:cf:10:9a:fd:66:3a:2b:f9:54:65:38:99:e1:3e:80:4d:
         95:8e:90:dc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlA6pW9tYlaqB4MiPjV4D+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjdkMTYzNWI0NmIzYzIyNzRiMjg3NTA1YmJiZDdkOTE1
ZGNhZjUwHhcNMjMwNzEwMTc0NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNlMGU2ZjI5MjI1MjNiZmMzNWJkYTg3YzJmNjY0ODYyNDU0ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrXs03FRxhSdg9jFY8O4jkIOrlTn
RTkPB6jO1bbHAwO56VEz1IyEz3Fe1gEQxcOngFdijMrpXwsZQaca8KMzaPF9+of4
W0R5EAQqqDxdECYUaGhY2EPD9mAXn2r4Z9ZHkKAkwt0SminKjhwr3y1EPvDCr6Fp
OA9WgShXQHyV+5ZRuwQ5Pd8zuCkHqf9WUqgq4jrMdGBpANDzaOrIdhmhPyGlE5ZI
WAyJt133P3feC9KdvUquYLpLL4MKqaKSDftCKJbgl9oaRs521dbQWudHLx3Xyt8o
LHH4g32tYArLw5eW2wsJJ7vKvkP+O1+tzFA6jYvEZdtlkU+0gmIGUIgEywIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJc+Dm8pIlI7/DW9qHwvZkhiRUh/MB8GA1UdIwQY
MBaAFNNn0WNbRrPCJ0sodQW7vX2RXcr1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQt
NjliOGQ2YjUzZThjLzEvbHo0T2J5a2lVanY4TmIyb2ZDOW1TR0pGU0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84YThiNGMtOGYxMi00YzhkLThiZTQtNjliOGQ2YjUzZThj
LzEvMDJmUlkxdEdzOEluU3loMUJidTlmWkZkeXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIXiDAN
BgkqhkiG9w0BAQsFAAOCAQEAapCGFeXKtaomon+I2BGWRC2zkC/A+fFhL9Ng0dnB
D1C1LxByabPAvSssqy5nw0t1K6pZ5N7Px/oTmDE0pUp8ycKx51vo6DTTuASonptQ
Hnt4eLyp0vS1vpNjshZmaYFKundad/i+khQyaN+8hv+aRCYrSZ+OFixwW1gsmYhO
st8AcvxHlDbrPaF1ptnB5Kf6gpE76rO2ThQO3Y+abLCLiuafJDBxq0JQRs6yQOiW
Z6x+jWaXl6MW6apfM814kyjszf801cg8ijFBUFuhNrQcgsyih3N1s2VKF/z+1Uaa
GA1vB4MmqqAZ4Gmqt6fPEJr9Zjor+VRlOJnhPoBNlY6Q3A==
-----END CERTIFICATE-----