Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/rs1ZwEUqUmz0yP9PLmn3iX2pgrs.roa
File:                     rs1ZwEUqUmz0yP9PLmn3iX2pgrs.roa (raw, json)
Hash identifier:          cW99OlCMo2mFAD+dr68yfvOGKq9eV775otF5vi4+Kh4=
Subject key identifier:   AE:CD:59:C0:45:2A:52:6C:F4:C8:FF:4F:2E:69:F7:89:7D:A9:82:BB
Certificate issuer:       /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial:       01857139B0F1712C57AE1895A07BF14B75D8
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/rs1ZwEUqUmz0yP9PLmn3iX2pgrs.roa
Signing time:             Mon 02 Jan 2023 06:44:44 +0000
ROA not before:           Mon 02 Jan 2023 06:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3209
IP address blocks:        80.68.144.0/24 maxlen: 24
                          2a06:780::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:b0:f1:71:2c:57:ae:18:95:a0:7b:f1:4b:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
        Validity
            Not Before: Jan  2 06:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aecd59c0452a526cf4c8ff4f2e69f7897da982bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:a9:b2:c2:fa:11:26:a6:08:4e:df:a2:cd:
                    54:8e:e5:e3:8f:83:fc:60:62:5d:d0:ff:9d:f3:51:
                    86:1a:06:66:ef:09:23:fd:7e:41:d3:6b:f6:41:78:
                    64:08:b3:7d:21:ad:db:53:55:62:58:92:40:2b:b0:
                    72:16:ac:86:e6:36:df:30:5e:05:fa:04:8b:b6:e2:
                    d9:0a:8d:31:d2:dd:22:d0:90:ad:7e:c7:45:fc:00:
                    6f:c1:b8:64:71:45:11:84:bd:a6:73:a5:f5:1c:1c:
                    7d:22:d2:dc:cf:01:f2:94:20:04:f0:7f:8a:14:f8:
                    8d:2e:69:31:13:6b:9f:d9:88:e8:02:f8:8a:47:cd:
                    0f:3b:5f:7b:e3:c7:33:1f:cf:3f:a9:3f:e8:7f:8e:
                    96:c1:88:c9:41:70:b5:61:4a:d4:4f:33:1a:8e:fe:
                    b7:d6:50:c8:51:03:4b:c4:be:15:b9:e9:53:91:77:
                    ca:c5:9c:1c:09:e5:a3:0b:b4:6e:24:75:69:72:7b:
                    60:fc:60:90:9b:2a:24:b1:32:a2:a5:0b:cf:20:3e:
                    39:33:04:e8:c4:2e:88:e9:c7:d8:9d:ee:39:43:d8:
                    b4:a0:58:f1:69:6e:9d:e3:c9:d9:8f:48:24:65:9e:
                    42:d8:f5:09:78:af:f8:87:29:ba:25:9d:7f:5a:48:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:59:C0:45:2A:52:6C:F4:C8:FF:4F:2E:69:F7:89:7D:A9:82:BB
            X509v3 Authority Key Identifier:
                keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/rs1ZwEUqUmz0yP9PLmn3iX2pgrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.144.0/24
                IPv6:
                  2a06:780::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:9c:c8:1e:68:5a:d3:68:dd:c6:fb:84:70:7f:ba:9e:70:
         39:e6:77:2e:2d:d3:ab:70:d9:c3:5b:f3:28:0b:3e:80:9f:1c:
         d2:af:21:6d:c9:1d:4e:4c:00:b4:0e:27:58:ae:6c:c3:e6:c9:
         24:d5:9f:d3:08:a9:56:29:8a:36:f5:83:1a:01:0b:41:e6:f6:
         d8:55:e2:32:6c:77:e8:af:00:cd:8c:1d:22:fc:23:47:d6:c5:
         c5:b8:d1:2b:63:8e:51:d7:b2:90:a4:1e:e5:22:08:7d:ac:e2:
         f2:ae:e4:8c:82:43:cf:5b:55:8d:f6:f9:b5:ad:ee:7c:ef:d6:
         44:ca:5b:99:1c:20:79:b5:88:93:44:05:17:4c:f3:2c:ab:59:
         a1:94:29:f6:de:00:33:87:21:a1:ef:2b:36:d1:22:9f:60:ea:
         d2:70:53:07:68:21:ef:cd:da:5b:b9:78:1b:51:d0:73:82:a9:
         0f:fd:a4:ae:71:25:d0:2b:4b:11:04:58:fa:ff:98:b8:09:0b:
         ff:d1:10:ea:33:3e:51:55:bf:31:f7:f6:5a:34:6e:99:f3:21:
         2a:dc:9d:6e:3a:e9:3b:62:60:63:29:04:c4:47:d0:b6:74:e6:
         68:ea:5d:3f:31:69:c5:b2:27:d1:cf:dc:17:dc:8b:05:e3:48:
         1f:89:86:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxObDxcSxXrhiVoHvxS3XYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmN2I3YzBkNmY3YjM0NjA4ZWIyNGNmYTFhODg4YmYzM2Ix
YjYxNTMwHhcNMjMwMTAyMDY0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWNkNTljMDQ1MmE1MjZjZjRjOGZmNGYyZTY5Zjc4OTdkYTk4MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfWpssL6ESamCE7fos1UjuXjj4P8
YGJd0P+d81GGGgZm7wkj/X5B02v2QXhkCLN9Ia3bU1ViWJJAK7ByFqyG5jbfMF4F
+gSLtuLZCo0x0t0i0JCtfsdF/ABvwbhkcUURhL2mc6X1HBx9ItLczwHylCAE8H+K
FPiNLmkxE2uf2YjoAviKR80PO19748czH88/qT/of46WwYjJQXC1YUrUTzMajv63
1lDIUQNLxL4VuelTkXfKxZwcCeWjC7RuJHVpcntg/GCQmyoksTKipQvPID45MwTo
xC6I6cfYne45Q9i0oFjxaW6d48nZj0gkZZ5C2PUJeK/4hym6JZ1/Wkjq0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK7NWcBFKlJs9Mj/Ty5p94l9qYK7MB8GA1UdIwQY
MBaAFB97fA1vezRgjrJM+hqIi/M7G2FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMt
MmI5MzJlNjgyM2FkLzEvcnMxWndFVXFVbXoweVA5UExtbjNpWDJwZ3JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMtMmI5MzJlNjgyM2Fk
LzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUESQMA0E
AgACMAcDBQMqBgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBzbZzIHmha02jdxvuEcH+6
nnA55ncuLdOrcNnDW/MoCz6AnxzSryFtyR1OTAC0DidYrmzD5skk1Z/TCKlWKYo2
9YMaAQtB5vbYVeIybHforwDNjB0i/CNH1sXFuNErY45R17KQpB7lIgh9rOLyruSM
gkPPW1WN9vm1re5879ZEyluZHCB5tYiTRAUXTPMsq1mhlCn23gAzhyGh7ys20SKf
YOrScFMHaCHvzdpbuXgbUdBzgqkP/aSucSXQK0sRBFj6/5i4CQv/0RDqMz5RVb8x
9/ZaNG6Z8yEq3J1uOuk7YmBjKQTER9C2dOZo6l0/MWnFsifRz9wX3IsF40gfiYZ5
-----END CERTIFICATE-----