Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/qoPrz3oliVpJ46R9ExEasjShe90.roa
File:                     qoPrz3oliVpJ46R9ExEasjShe90.roa (raw, json)
Hash identifier:          tzMrz5poF1GbYear6N914RtYj1ue8qb4WTxogo6Lp+c=
Subject key identifier:   AA:83:EB:CF:7A:25:89:5A:49:E3:A4:7D:13:11:1A:B2:34:A1:7B:DD
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       01856D53F798C5C87636CC7BACF424D510AC
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/qoPrz3oliVpJ46R9ExEasjShe90.roa
Signing time:             Sun 01 Jan 2023 12:34:57 +0000
ROA not before:           Sun 01 Jan 2023 12:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        212.46.57.0/24 maxlen: 24
                          2a12:fc0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:f7:98:c5:c8:76:36:cc:7b:ac:f4:24:d5:10:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jan  1 12:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa83ebcf7a25895a49e3a47d13111ab234a17bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:77:d7:e2:55:32:f1:25:b5:51:23:95:8a:
                    51:93:e2:c2:0e:65:d6:63:cc:d5:d4:0d:ae:0c:6b:
                    a7:6f:3a:cc:fe:74:ca:43:57:cb:4c:46:4c:d1:f0:
                    1e:60:89:02:6b:5f:78:2b:99:ca:24:b4:97:d5:21:
                    a4:b0:59:2b:18:07:51:99:57:54:6f:d8:db:1b:d7:
                    73:5f:21:60:dc:26:24:49:a0:dd:6b:56:ab:4e:fd:
                    3a:6d:b9:9d:14:02:8b:89:a4:1b:92:1f:26:87:91:
                    95:a5:2f:f9:ec:1a:e2:bc:d6:79:c2:ba:df:05:79:
                    36:56:0c:ba:e8:93:ec:70:22:04:d5:9b:e1:f1:92:
                    66:4b:12:a8:b0:8c:7d:b9:4f:e5:23:76:86:f3:07:
                    c6:8b:2b:72:a7:be:71:c8:39:27:ef:72:4e:b7:10:
                    4b:32:77:16:02:64:da:c2:ed:02:b8:dd:a9:f8:40:
                    26:a5:56:5e:b9:d7:1f:ba:82:a5:62:f6:21:37:d1:
                    b1:8d:a4:84:b2:20:7d:00:09:9f:88:ec:a9:a3:97:
                    c3:4d:16:16:46:f8:2a:e7:77:39:35:fd:3e:23:43:
                    91:51:da:52:12:c4:e5:b5:a7:37:5a:6a:54:1a:7e:
                    e3:76:7a:a8:e7:5c:6c:93:b9:e6:b8:2b:c5:11:c7:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:EB:CF:7A:25:89:5A:49:E3:A4:7D:13:11:1A:B2:34:A1:7B:DD
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/qoPrz3oliVpJ46R9ExEasjShe90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24
                IPv6:
                  2a12:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:0d:d4:07:be:c6:a5:cb:3b:79:64:5a:81:af:06:9e:f9:
         ef:7c:28:e6:c1:77:e8:32:b7:74:18:81:37:94:62:03:82:d1:
         86:08:f6:b4:e0:0c:3e:f5:dd:9e:25:ef:60:e1:d1:de:f9:2b:
         9a:9b:1f:eb:17:e0:51:c2:a3:47:b6:4c:45:45:fb:a9:f6:8c:
         cc:80:3b:95:1b:ac:93:78:ee:22:1e:b1:41:51:45:fb:a8:be:
         81:9c:a2:e3:da:84:3a:f5:00:0d:bf:7d:c1:4f:66:bb:be:46:
         19:a7:68:e1:72:3f:30:8a:aa:bf:14:32:94:64:6c:12:e1:df:
         2d:25:b5:20:74:ce:4d:01:92:e3:e9:ae:24:bc:21:ab:71:de:
         47:24:d4:f3:e7:e7:78:6b:82:8d:46:b3:d9:4b:c4:2a:f2:9f:
         ba:47:34:1f:6e:da:2c:71:af:05:b6:64:8f:60:45:f3:6b:df:
         43:85:82:53:03:17:ff:9c:0b:d4:64:de:63:3e:a0:60:2c:77:
         b2:29:84:ff:bc:6e:4e:62:b2:4f:bb:3b:f0:c5:bb:c3:78:1b:
         5e:ef:09:28:04:1b:5f:dc:53:d0:2c:a6:e4:b4:d1:ad:fa:9c:
         87:12:c8:4f:4e:e9:c7:99:2d:b2:7d:6a:9b:16:1c:ad:c6:60:
         f7:e4:87:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtU/eYxch2Nsx7rPQk1RCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi
NmJkY2MwHhcNMjMwMTAxMTIzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTgzZWJjZjdhMjU4OTVhNDllM2E0N2QxMzExMWFiMjM0YTE3YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkah31+JVMvEltVEjlYpRk+LCDmXW
Y8zV1A2uDGunbzrM/nTKQ1fLTEZM0fAeYIkCa194K5nKJLSX1SGksFkrGAdRmVdU
b9jbG9dzXyFg3CYkSaDda1arTv06bbmdFAKLiaQbkh8mh5GVpS/57BrivNZ5wrrf
BXk2Vgy66JPscCIE1Zvh8ZJmSxKosIx9uU/lI3aG8wfGiytyp75xyDkn73JOtxBL
MncWAmTawu0CuN2p+EAmpVZeudcfuoKlYvYhN9GxjaSEsiB9AAmfiOypo5fDTRYW
Rvgq53c5Nf0+I0ORUdpSEsTltac3WmpUGn7jdnqo51xsk7nmuCvFEccr+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKqD6896JYlaSeOkfRMRGrI0oXvdMB8GA1UdIwQY
MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct
MjQ2NTRlOTQxYzEyLzEvcW9Qcnozb2xpVnBKNDZSOUV4RWFzalNoZTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy
LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1C45MA8E
AgACMAkDBwQqEg/AAAAwDQYJKoZIhvcNAQELBQADggEBAIRNDdQHvsalyzt5ZFqB
rwae+e98KObBd+gyt3QYgTeUYgOC0YYI9rTgDD713Z4l72Dh0d75K5qbH+sX4FHC
o0e2TEVF+6n2jMyAO5UbrJN47iIesUFRRfuovoGcouPahDr1AA2/fcFPZru+Rhmn
aOFyPzCKqr8UMpRkbBLh3y0ltSB0zk0BkuPpriS8Iatx3kck1PPn53hrgo1Gs9lL
xCryn7pHNB9u2ixxrwW2ZI9gRfNr30OFglMDF/+cC9Rk3mM+oGAsd7IphP+8bk5i
sk+7O/DFu8N4G17vCSgEG1/cU9AspuS00a36nIcSyE9O6ceZLbJ9apsWHK3GYPfk
h90=
-----END CERTIFICATE-----