Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/026SeFBbQqX5E4E_4PeudsI0OTs.roa
File:                     026SeFBbQqX5E4E_4PeudsI0OTs.roa (raw, json)
Hash identifier:          yTR3mNVD0oOVxA/qlrL1EW/WRIiB+UYI3yMI7sP4iss=
Subject key identifier:   D3:6E:92:78:50:5B:42:A5:F9:13:81:3F:E0:F7:AE:76:C2:34:39:3B
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       01856C415CE874AA2C6A5D3569562B31D8A4
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/026SeFBbQqX5E4E_4PeudsI0OTs.roa
Signing time:             Sun 01 Jan 2023 07:35:00 +0000
ROA not before:           Sun 01 Jan 2023 07:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44437
IP address blocks:        185.244.24.0/24 maxlen: 24
                          2a05:1080::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:5c:e8:74:aa:2c:6a:5d:35:69:56:2b:31:d8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 07:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d36e9278505b42a5f913813fe0f7ae76c234393b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:ca:5a:18:3f:7e:10:b5:b3:2b:29:27:56:
                    b9:2c:9d:17:71:17:b8:0a:c6:03:27:be:9c:38:8a:
                    12:93:05:00:29:8e:e2:16:38:aa:4e:86:4e:a0:7c:
                    1e:02:ed:98:48:6d:74:33:21:35:96:cf:17:05:64:
                    27:05:f5:f3:81:e4:dd:9a:ae:b0:1e:f7:9a:03:5f:
                    d8:b4:eb:58:ed:57:cf:28:7a:81:fc:ea:b9:df:96:
                    48:89:08:b0:00:b6:71:9a:6d:cb:e9:08:68:5e:c4:
                    2d:7d:8e:2a:01:c1:5f:eb:a0:2d:f4:28:7b:52:dd:
                    52:1b:43:03:e2:99:13:18:73:b4:08:8b:d7:d9:ca:
                    15:53:87:fe:61:b2:0b:58:b4:fc:39:97:0e:b8:ce:
                    2f:76:e8:9e:92:37:aa:c6:df:0c:ed:11:06:3a:b5:
                    ff:e8:13:b5:7c:33:32:bf:60:4a:26:d1:72:b3:07:
                    eb:e4:3b:8e:62:09:86:50:b7:41:88:33:2b:63:1f:
                    29:19:1b:32:6e:ce:6d:73:41:9f:32:cf:33:60:fd:
                    ca:35:3e:52:47:4e:a5:1c:62:44:5d:11:40:36:f5:
                    bc:b9:31:66:d9:b8:9f:db:97:ce:b7:f8:75:68:1a:
                    00:66:bf:80:b3:f5:96:50:3b:14:c9:8a:b4:7c:95:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:92:78:50:5B:42:A5:F9:13:81:3F:E0:F7:AE:76:C2:34:39:3B
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/026SeFBbQqX5E4E_4PeudsI0OTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.24.0/24
                IPv6:
                  2a05:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:66:37:e7:6c:af:65:97:6d:96:a0:20:44:ab:e3:55:f0:6b:
         7d:ab:43:8b:fc:ea:02:ab:9d:c9:26:dd:b7:5b:10:41:62:7a:
         f0:d2:79:23:a0:2f:11:95:05:51:b2:4f:d6:53:12:3e:eb:9f:
         4d:a1:6c:2b:e2:e4:a4:07:36:e1:54:00:64:72:33:d0:b8:73:
         c7:01:15:e5:a4:d4:da:a6:68:b8:5d:83:e4:33:6a:ed:e0:99:
         76:61:2b:39:98:7e:d8:19:11:bf:73:7e:07:e2:bc:44:ea:ac:
         83:d5:1e:bc:5c:f5:4b:30:b5:3b:80:a8:31:ba:54:67:82:19:
         10:38:4b:12:be:d2:41:3a:42:f9:2f:84:d1:8a:56:80:a5:20:
         03:30:c7:95:49:6c:4e:b3:89:dc:27:31:d0:1c:1e:89:7a:7a:
         d6:27:23:ed:e8:21:bb:bb:d8:67:58:7e:6f:22:a0:14:59:b4:
         7e:a4:e8:5a:f8:e1:47:c6:8c:f3:d7:58:96:be:b2:50:97:03:
         67:fb:6d:24:3a:8f:d9:ef:0d:71:4b:68:90:d4:7c:20:00:66:
         a7:ee:3a:14:5a:30:49:7f:c9:4f:12:46:e7:e8:f8:68:d7:b5:
         1c:ae:af:a7:c1:f0:f0:a4:4a:1f:f2:6b:ce:38:20:ad:50:c0:
         29:f3:e3:06
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsQVzodKosal01aVYrMdikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjMwMTAxMDczNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzZlOTI3ODUwNWI0MmE1ZjkxMzgxM2ZlMGY3YWU3NmMyMzQzOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj13KWhg/fhC1syspJ1a5LJ0XcRe4
CsYDJ76cOIoSkwUAKY7iFjiqToZOoHweAu2YSG10MyE1ls8XBWQnBfXzgeTdmq6w
HveaA1/YtOtY7VfPKHqB/Oq535ZIiQiwALZxmm3L6QhoXsQtfY4qAcFf66At9Ch7
Ut1SG0MD4pkTGHO0CIvX2coVU4f+YbILWLT8OZcOuM4vduiekjeqxt8M7REGOrX/
6BO1fDMyv2BKJtFyswfr5DuOYgmGULdBiDMrYx8pGRsybs5tc0GfMs8zYP3KNT5S
R06lHGJEXRFANvW8uTFm2bif25fOt/h1aBoAZr+As/WWUDsUyYq0fJV1DQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNNuknhQW0Kl+ROBP+D3rnbCNDk7MB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvMDI2U2VGQmJRcVg1RTRFXzRQZXVkc0kwT1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufQYMA0E
AgACMAcDBQAqBRCAMA0GCSqGSIb3DQEBCwUAA4IBAQAnZjfnbK9ll22WoCBEq+NV
8Gt9q0OL/OoCq53JJt23WxBBYnrw0nkjoC8RlQVRsk/WUxI+659NoWwr4uSkBzbh
VABkcjPQuHPHARXlpNTapmi4XYPkM2rt4Jl2YSs5mH7YGRG/c34H4rxE6qyD1R68
XPVLMLU7gKgxulRnghkQOEsSvtJBOkL5L4TRilaApSADMMeVSWxOs4ncJzHQHB6J
enrWJyPt6CG7u9hnWH5vIqAUWbR+pOha+OFHxozz11iWvrJQlwNn+20kOo/Z7w1x
S2iQ1HwgAGan7joUWjBJf8lPEkbn6Pho17Ucrq+nwfDwpEof8mvOOCCtUMAp8+MG
-----END CERTIFICATE-----