Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qE7RGfjR4VTo5GNjes30_2LoKcs.roa
File:                     qE7RGfjR4VTo5GNjes30_2LoKcs.roa (raw, json)
Hash identifier:          fhpTy5xkTKh/P6ncZZVwjAG+fOmdvwC+Uaz5VYgfT4c=
Subject key identifier:   A8:4E:D1:19:F8:D1:E1:54:E8:E4:63:63:7A:CD:F4:FF:62:E8:29:CB
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0189FE0764828E8EC72A7049B4D960CB0D36
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qE7RGfjR4VTo5GNjes30_2LoKcs.roa
Signing time:             Wed 16 Aug 2023 11:07:24 +0000
ROA not before:           Wed 16 Aug 2023 11:07:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51714
IP address blocks:        192.144.32.0/24 maxlen: 24
                          2a09:ff00:103::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:07:64:82:8e:8e:c7:2a:70:49:b4:d9:60:cb:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Aug 16 11:07:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a84ed119f8d1e154e8e463637acdf4ff62e829cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:e8:35:5a:67:c6:99:80:78:38:34:a0:b6:
                    5c:5c:f6:2e:05:30:89:03:95:6b:88:ba:a0:af:e3:
                    8b:3e:5a:61:56:04:21:78:e7:96:53:e8:b9:f0:67:
                    f8:78:9e:07:78:ff:ec:e8:7b:9e:15:57:65:68:87:
                    53:33:51:e3:47:a0:e5:bf:5e:22:9e:52:31:62:fc:
                    01:df:d7:0c:b5:ea:cc:71:28:66:44:00:3a:7d:64:
                    76:a3:cb:ac:05:9e:54:09:e1:1b:1c:5d:9c:9a:f5:
                    d3:74:b0:31:69:d6:02:40:01:db:a9:a9:cb:b9:bc:
                    d2:19:64:cb:47:1d:13:22:b7:ac:6c:14:37:1a:a4:
                    97:95:15:07:e9:de:93:79:0b:44:f4:eb:c5:6d:f3:
                    7b:5d:3e:cc:9d:27:d6:70:17:4a:60:76:99:d4:ae:
                    0d:74:30:20:f7:7e:d1:4a:65:ad:34:64:a3:2b:1b:
                    9d:0f:fe:e3:73:39:42:b8:4d:5c:11:af:1f:bc:da:
                    55:c4:dd:39:bc:08:b5:be:78:dd:b5:0d:40:49:63:
                    3e:f7:be:90:86:38:61:ea:73:fc:13:9a:24:68:33:
                    bb:ec:f4:0f:4f:b1:cc:59:3a:c2:5c:5e:b9:e2:77:
                    be:0a:ec:76:81:94:ee:2a:ab:6d:5a:94:c4:c3:17:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4E:D1:19:F8:D1:E1:54:E8:E4:63:63:7A:CD:F4:FF:62:E8:29:CB
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/qE7RGfjR4VTo5GNjes30_2LoKcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.32.0/24
                IPv6:
                  2a09:ff00:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:cc:a2:44:09:e6:29:ea:00:43:da:1b:f3:a5:a3:d8:f7:61:
         f6:8e:b1:75:2a:0a:c5:15:9d:cb:25:a6:97:4c:32:97:5a:9e:
         61:55:40:b6:1f:44:8d:fe:a8:94:09:7c:39:9c:b7:1a:49:fd:
         57:d0:fb:61:04:25:24:2c:4e:77:ad:28:3f:35:38:dc:74:7a:
         94:b9:40:e1:88:32:64:aa:e5:02:de:0c:65:5e:a6:f1:f9:8e:
         b3:2d:ca:83:33:24:53:2a:9f:26:0c:1b:1d:c6:97:a2:1d:e7:
         b6:8a:00:90:1a:de:e3:ab:39:c9:2e:a7:0e:4f:ed:7b:4f:fa:
         9d:bf:39:a0:7c:44:8d:06:c0:70:c9:e7:67:b1:2c:98:f6:ce:
         c7:0c:c5:a7:54:dc:1e:cc:de:88:52:5f:ba:9a:2f:bb:19:eb:
         4d:94:d5:d6:18:5a:03:14:a2:61:62:65:a2:8f:d0:9e:59:4a:
         61:6b:b7:53:4d:ff:ee:0c:df:7c:52:a4:ba:2b:1e:6c:58:87:
         dc:16:36:9a:99:de:18:74:65:4e:1f:4d:ad:50:f8:3b:96:17:
         f1:d9:18:d1:ad:5a:62:5a:6f:b5:42:92:b5:58:02:8a:97:5d:
         a1:19:df:9b:b3:6f:19:21:81:31:59:23:8e:e8:b8:73:59:cb:
         97:16:14:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn+B2SCjo7HKnBJtNlgyw02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwODE2MTEwNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODRlZDExOWY4ZDFlMTU0ZThlNDYzNjM3YWNkZjRmZjYyZTgyOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+foNVpnxpmAeDg0oLZcXPYuBTCJ
A5VriLqgr+OLPlphVgQheOeWU+i58Gf4eJ4HeP/s6HueFVdlaIdTM1HjR6Dlv14i
nlIxYvwB39cMterMcShmRAA6fWR2o8usBZ5UCeEbHF2cmvXTdLAxadYCQAHbqanL
ubzSGWTLRx0TIresbBQ3GqSXlRUH6d6TeQtE9OvFbfN7XT7MnSfWcBdKYHaZ1K4N
dDAg937RSmWtNGSjKxudD/7jczlCuE1cEa8fvNpVxN05vAi1vnjdtQ1ASWM+976Q
hjhh6nP8E5okaDO77PQPT7HMWTrCXF654ne+Cux2gZTuKqttWpTEwxdguQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKhO0Rn40eFU6ORjY3rN9P9i6CnLMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvcUU3UkdmalI0VlRvNUdOamVzMzBfMkxvS2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwJAgMA8E
AgACMAkDBwAqCf8AAQMwDQYJKoZIhvcNAQELBQADggEBAJ7MokQJ5inqAEPaG/Ol
o9j3YfaOsXUqCsUVncslppdMMpdanmFVQLYfRI3+qJQJfDmctxpJ/VfQ+2EEJSQs
TnetKD81ONx0epS5QOGIMmSq5QLeDGVepvH5jrMtyoMzJFMqnyYMGx3Gl6Id57aK
AJAa3uOrOckupw5P7XtP+p2/OaB8RI0GwHDJ52exLJj2zscMxadU3B7M3ohSX7qa
L7sZ602U1dYYWgMUomFiZaKP0J5ZSmFrt1NN/+4M33xSpLorHmxYh9wWNpqZ3hh0
ZU4fTa1Q+DuWF/HZGNGtWmJab7VCkrVYAoqXXaEZ35uzbxkhgTFZI47ouHNZy5cW
FC0=
-----END CERTIFICATE-----