Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PKBr8d6JhY9PL_AzXpyPLOG10Tc.roa
File:                     PKBr8d6JhY9PL_AzXpyPLOG10Tc.roa (raw, json)
Hash identifier:          xu/J/j7/vS/zoVbNBVnfG4/NgQCLm9F2duwwDi7i8p8=
Subject key identifier:   3C:A0:6B:F1:DE:89:85:8F:4F:2F:F0:33:5E:9C:8F:2C:E1:B5:D1:37
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE61BC6960C4AF1CEE6197CCDE8A5D8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PKBr8d6JhY9PL_AzXpyPLOG10Tc.roa
Signing time:             Sun 01 Jan 2023 10:34:57 +0000
ROA not before:           Sun 01 Jan 2023 10:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        45.141.116.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:1b:c6:96:0c:4a:f1:ce:e6:19:7c:cd:e8:a5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ca06bf1de89858f4f2ff0335e9c8f2ce1b5d137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:fc:e1:53:a5:9d:14:a0:e8:cb:7e:34:67:
                    38:7d:d8:05:32:66:f2:32:15:23:b8:ae:49:9b:bb:
                    bc:a1:53:a5:f4:98:8f:66:05:74:89:a3:84:cc:ed:
                    39:f5:79:06:0b:28:a0:bc:90:eb:42:59:ee:6f:ff:
                    92:81:a8:97:b4:dc:bb:52:f2:11:95:f0:0d:bd:2e:
                    f3:31:71:72:f8:75:c2:eb:99:bf:81:b8:e4:b1:c4:
                    ed:6b:09:2e:74:ca:34:9e:d2:6d:cb:1c:08:68:af:
                    7b:65:16:d9:ce:bb:be:7b:61:13:8c:ed:8e:46:25:
                    48:3f:c6:6d:9e:12:49:8b:59:b8:e7:84:a1:c3:3f:
                    97:c6:c0:76:a0:68:a7:e8:44:4f:b1:90:12:e2:4f:
                    c8:06:30:39:3d:34:f4:e8:69:1f:e5:3e:f9:dc:20:
                    59:5b:af:e2:66:2f:13:41:e7:94:e6:ea:fb:40:2c:
                    1b:25:f0:69:27:d0:42:a8:a2:a3:cd:eb:4a:eb:85:
                    e6:b4:7a:c5:02:79:e8:a8:17:bf:f2:25:9f:42:f0:
                    06:b8:01:19:80:67:0f:a8:a4:95:ce:16:08:77:50:
                    86:2a:b1:2a:3b:33:4d:4f:40:35:4f:47:8f:16:4e:
                    a0:24:8c:96:6c:3e:bf:52:4f:52:99:7f:26:8f:23:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A0:6B:F1:DE:89:85:8F:4F:2F:F0:33:5E:9C:8F:2C:E1:B5:D1:37
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/PKBr8d6JhY9PL_AzXpyPLOG10Tc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:3c:7b:e7:39:13:fb:6b:03:63:6c:dd:30:46:64:3b:53:
         cc:c0:a3:6c:a2:6f:20:22:ee:2f:fc:d2:f5:d6:c9:fe:1f:e2:
         49:12:a7:8f:c1:8e:53:c5:6d:bd:1a:df:7e:30:1c:9d:44:76:
         89:d4:a0:50:28:0c:fa:60:ae:4a:f7:6d:77:75:94:54:a7:94:
         ec:6a:89:8e:0a:bf:f6:10:06:69:db:50:3b:4c:ad:13:92:ff:
         e5:85:18:fc:ce:9a:9f:88:2b:d2:b9:a1:a2:a6:a5:55:87:d8:
         28:44:43:7a:09:7e:79:ef:27:b0:f4:22:2e:17:f1:6f:c2:cd:
         7d:2a:f2:21:10:d2:cb:94:55:7c:a1:53:9b:1f:d7:3c:df:ba:
         f8:8b:fd:8f:47:e8:3f:93:a6:b1:55:18:30:4c:4b:6a:67:c9:
         e6:0a:e1:7b:cb:1f:ce:88:6d:c2:31:6a:d2:ee:69:9d:eb:75:
         6f:60:79:f6:0c:b3:cc:36:2e:4d:45:bc:52:6a:90:1f:da:54:
         f8:b3:71:37:f8:db:af:5f:bf:b6:3f:9d:7b:8b:62:15:c3:f4:
         93:81:23:f9:60:26:ff:07:8a:14:fe:f1:13:5f:82:ac:5a:a4:
         d7:71:2f:58:ed:d7:2b:20:4c:0d:20:a2:5e:5e:ba:13:ff:2a:
         53:a2:44:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5hvGlgxK8c7mGXzN6KXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTAxMTAzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2EwNmJmMWRlODk4NThmNGYyZmYwMzM1ZTljOGYyY2UxYjVkMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsf84VOlnRSg6Mt+NGc4fdgFMmby
MhUjuK5Jm7u8oVOl9JiPZgV0iaOEzO059XkGCyigvJDrQlnub/+SgaiXtNy7UvIR
lfANvS7zMXFy+HXC65m/gbjkscTtawkudMo0ntJtyxwIaK97ZRbZzru+e2ETjO2O
RiVIP8ZtnhJJi1m454Shwz+XxsB2oGin6ERPsZAS4k/IBjA5PTT06Gkf5T753CBZ
W6/iZi8TQeeU5ur7QCwbJfBpJ9BCqKKjzetK64XmtHrFAnnoqBe/8iWfQvAGuAEZ
gGcPqKSVzhYId1CGKrEqOzNNT0A1T0ePFk6gJIyWbD6/Uk9SmX8mjyN+IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyga/HeiYWPTy/wM16cjyzhtdE3MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvUEtCcjhkNkpoWTlQTF9BelhweVBMT0cxMFRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLY10MA0G
CSqGSIb3DQEBCwUAA4IBAQAnizx75zkT+2sDY2zdMEZkO1PMwKNsom8gIu4v/NL1
1sn+H+JJEqePwY5TxW29Gt9+MBydRHaJ1KBQKAz6YK5K9213dZRUp5TsaomOCr/2
EAZp21A7TK0Tkv/lhRj8zpqfiCvSuaGipqVVh9goREN6CX557yew9CIuF/Fvws19
KvIhENLLlFV8oVObH9c837r4i/2PR+g/k6axVRgwTEtqZ8nmCuF7yx/OiG3CMWrS
7mmd63VvYHn2DLPMNi5NRbxSapAf2lT4s3E3+NuvX7+2P517i2IVw/STgSP5YCb/
B4oU/vETX4KsWqTXcS9Y7dcrIEwNIKJeXroT/ypTokRq
-----END CERTIFICATE-----