Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa
File:                     BEz5FG5B11RjyMa_6sfQpozvsYQ.roa (raw, json)
Hash identifier:          mi44IEjMqo2sAPC2nDHMuRsg1wOzIrsNOHFkBbQtMEU=
Subject key identifier:   04:4C:F9:14:6E:41:D7:54:63:C8:C6:BF:EA:C7:D0:A6:8C:EF:B1:84
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       01856E8B1D749EA0F7AAABFE7BBE3A2785C2
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa
Signing time:             Sun 01 Jan 2023 18:14:48 +0000
ROA not before:           Sun 01 Jan 2023 18:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        194.110.172.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:8b:1d:74:9e:a0:f7:aa:ab:fe:7b:be:3a:27:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan  1 18:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=044cf9146e41d75463c8c6bfeac7d0a68cefb184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:2d:3f:60:90:c4:82:cf:98:54:a8:cd:cc:
                    11:cc:ea:fd:e0:a7:64:b4:f2:73:fa:c3:72:cb:94:
                    ab:8a:3c:1a:fb:be:8e:be:a2:87:2b:49:f5:8d:61:
                    77:4d:f4:f6:f0:47:05:dc:2d:84:55:b4:5b:de:d5:
                    7a:be:f1:8a:a8:9e:9f:01:85:a1:91:80:76:54:03:
                    ce:6c:46:fe:32:cb:5f:8a:ad:d2:c8:e8:60:2b:3b:
                    7c:e9:42:fc:44:f4:ee:f4:65:20:be:44:78:f0:45:
                    49:92:e3:d8:25:c8:86:0e:b2:0b:46:f9:3b:c8:e2:
                    8f:65:cb:44:ce:e7:94:53:51:2d:aa:e4:1e:7b:f0:
                    50:f8:5a:76:f3:2a:25:ff:4e:a0:14:3e:86:97:87:
                    1d:1e:c6:b0:58:d8:00:1a:51:66:f0:ff:1f:d2:a3:
                    bd:9d:66:eb:d7:cb:cf:50:03:cf:91:3f:2a:de:d2:
                    67:3f:11:99:2e:cd:64:22:78:ff:28:a3:a6:09:ba:
                    82:a1:41:06:59:4c:24:f9:cb:6d:d0:78:b8:2a:3e:
                    cf:27:b7:a5:a4:f3:97:ec:54:b5:5e:66:25:32:97:
                    7d:28:be:b1:3c:81:d7:db:6c:d2:6d:7f:83:be:b5:
                    04:1c:8c:3a:02:20:d7:c2:2f:f5:01:f5:04:a7:0d:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4C:F9:14:6E:41:D7:54:63:C8:C6:BF:EA:C7:D0:A6:8C:EF:B1:84
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/BEz5FG5B11RjyMa_6sfQpozvsYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:63:9a:53:0f:7d:1e:53:46:8e:da:39:ce:e3:56:74:a5:6c:
         df:31:29:f3:30:50:42:c5:aa:02:11:ea:48:42:07:e7:ba:88:
         38:1c:d9:0f:b2:0e:88:9f:8d:57:10:85:85:e2:db:8a:da:1d:
         19:0c:73:87:ec:46:42:fd:51:5f:9a:33:1c:87:f6:cb:e7:3f:
         63:3e:ff:19:60:29:3f:ac:16:13:71:f2:55:23:2c:f5:17:d6:
         c4:60:e5:c0:14:7c:17:15:26:46:c4:e2:1b:f7:c5:87:e0:bc:
         8e:ae:f3:f0:c7:35:5d:0a:6b:f3:ce:0e:50:c1:0f:21:d0:98:
         ef:f8:be:5f:0a:4d:09:db:4f:8b:fd:cb:2a:ec:76:f1:8a:1c:
         89:da:f3:b0:ee:0e:2c:86:a2:3f:16:de:91:d0:24:35:89:8e:
         78:7e:51:53:11:92:c2:d2:e6:2c:47:c3:94:e9:c7:8a:78:45:
         a8:64:c6:ba:92:8a:0f:1d:34:98:c5:e8:e1:92:30:c3:d0:58:
         4d:93:01:1c:d0:01:1e:f9:f4:f9:3e:63:54:cf:67:fe:67:9b:
         7c:5b:25:4f:25:04:30:86:fb:a8:cc:00:fb:cc:b3:60:5d:21:
         a3:a8:68:18:21:57:41:f0:82:5e:48:d1:94:7b:f8:26:ef:41:
         a5:2d:c0:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuix10nqD3qqv+e746J4XCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwMTAxMTgxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDRjZjkxNDZlNDFkNzU0NjNjOGM2YmZlYWM3ZDBhNjhjZWZiMTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7wtP2CQxILPmFSozcwRzOr94Kdk
tPJz+sNyy5Srijwa+76OvqKHK0n1jWF3TfT28EcF3C2EVbRb3tV6vvGKqJ6fAYWh
kYB2VAPObEb+Mstfiq3SyOhgKzt86UL8RPTu9GUgvkR48EVJkuPYJciGDrILRvk7
yOKPZctEzueUU1EtquQee/BQ+Fp28yol/06gFD6Gl4cdHsawWNgAGlFm8P8f0qO9
nWbr18vPUAPPkT8q3tJnPxGZLs1kInj/KKOmCbqCoUEGWUwk+ctt0Hi4Kj7PJ7el
pPOX7FS1XmYlMpd9KL6xPIHX22zSbX+DvrUEHIw6AiDXwi/1AfUEpw316wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARM+RRuQddUY8jGv+rH0KaM77GEMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvQkV6NUZHNUIxMVJqeU1hXzZzZlFwb3p2c1lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwm6sMA0G
CSqGSIb3DQEBCwUAA4IBAQBoY5pTD30eU0aO2jnO41Z0pWzfMSnzMFBCxaoCEepI
Qgfnuog4HNkPsg6In41XEIWF4tuK2h0ZDHOH7EZC/VFfmjMch/bL5z9jPv8ZYCk/
rBYTcfJVIyz1F9bEYOXAFHwXFSZGxOIb98WH4LyOrvPwxzVdCmvzzg5QwQ8h0Jjv
+L5fCk0J20+L/csq7HbxihyJ2vOw7g4shqI/Ft6R0CQ1iY54flFTEZLC0uYsR8OU
6ceKeEWoZMa6kooPHTSYxejhkjDD0FhNkwEc0AEe+fT5PmNUz2f+Z5t8WyVPJQQw
hvuozAD7zLNgXSGjqGgYIVdB8IJeSNGUe/gm70GlLcA5
-----END CERTIFICATE-----