Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHqqwKMgo20PRVanNnQQ_hdFaGU.roa
File:                     bHqqwKMgo20PRVanNnQQ_hdFaGU.roa (raw, json)
Hash identifier:          ZIx0Nzp8plMqABUbbPjtgmWP7FBuDqOWkJ6qo7faygc=
Subject key identifier:   6C:7A:AA:C0:A3:20:A3:6D:0F:45:56:A7:36:74:10:FE:17:45:68:65
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01856F67194EBE09FF5086A2F293979AB6C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHqqwKMgo20PRVanNnQQ_hdFaGU.roa
Signing time:             Sun 01 Jan 2023 22:15:05 +0000
ROA not before:           Sun 01 Jan 2023 22:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212672
IP address blocks:        212.192.16.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:19:4e:be:09:ff:50:86:a2:f2:93:97:9a:b6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  1 22:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c7aaac0a320a36d0f4556a7367410fe17456865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:2b:20:5d:b9:f6:23:52:ea:34:b1:85:74:
                    13:65:48:dd:11:75:89:7b:e8:92:8a:5c:1d:f3:86:
                    f0:e8:cb:ce:44:c3:0c:e4:7e:95:55:5d:3f:ed:b4:
                    8d:2e:5e:a2:d7:6f:50:1b:a1:e9:6e:38:e9:52:82:
                    02:16:0e:29:85:a2:42:e8:80:55:5a:f1:68:76:25:
                    bd:d2:5f:7a:a6:ef:ce:2d:2a:93:1a:3f:d3:c0:8e:
                    23:4c:73:d1:3b:36:41:07:3b:f0:73:fa:58:63:a6:
                    d3:d6:62:20:0f:e5:55:f9:b1:ae:77:ef:e7:61:60:
                    88:fc:c2:2d:b1:f7:ab:88:ae:34:85:54:75:26:1e:
                    d2:02:38:c9:4c:3c:50:dc:76:43:d6:1f:e1:c9:bb:
                    9d:b8:29:e7:fc:03:fa:f2:90:b1:f3:0a:57:80:67:
                    31:38:99:83:ad:57:e4:d1:ce:71:cb:59:e4:7d:22:
                    a2:57:31:ef:4a:5c:7f:c9:52:18:5f:77:7b:de:cc:
                    45:7f:48:b9:fc:56:7a:53:af:a8:d9:c1:dc:ca:a8:
                    b8:24:c1:27:1c:3e:d7:de:51:9d:11:7a:b6:70:b2:
                    57:cb:87:f9:eb:b9:42:58:58:e2:4f:ba:ed:4d:a3:
                    c7:0f:1f:03:7d:7e:99:0c:db:e2:81:d2:db:c7:0b:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7A:AA:C0:A3:20:A3:6D:0F:45:56:A7:36:74:10:FE:17:45:68:65
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bHqqwKMgo20PRVanNnQQ_hdFaGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:22:6d:54:05:8a:47:33:96:b8:24:a3:bf:bc:98:32:01:3b:
         8c:6d:f7:d0:74:c8:85:1e:36:ef:54:1d:43:1e:ef:82:01:a0:
         2e:5a:17:53:9e:7b:21:6a:bc:38:8e:c1:46:55:af:b6:1c:b8:
         b8:da:1e:24:63:2f:af:28:2e:da:ea:ec:5d:39:b6:8e:62:49:
         88:21:f8:06:05:a2:fd:b8:b8:b0:63:42:ab:0f:9e:90:14:c6:
         64:25:8a:54:1c:b9:13:03:2e:f9:93:87:10:77:14:0d:0d:da:
         eb:07:48:29:47:1f:e4:08:d0:22:60:d7:29:0e:8f:03:19:22:
         12:b9:2d:1d:f0:9a:46:30:48:95:ad:b1:aa:aa:5b:bb:bd:45:
         32:39:b1:ec:e3:bd:73:a5:3c:da:f1:18:61:fc:76:9a:5d:e2:
         d4:68:2e:06:b8:06:13:92:e2:e1:79:9c:e5:bc:ee:2f:9b:5e:
         08:5c:53:72:de:ff:05:a0:e4:a7:80:68:f0:e6:38:95:09:27:
         2e:4a:90:9c:9d:12:71:c9:f0:e2:31:a4:d7:3a:ea:23:e1:69:
         8f:ce:71:be:a8:d4:e8:a5:4c:5b:f5:01:11:48:05:0c:d3:48:
         e4:ed:20:91:30:5f:41:b9:9d:60:2f:46:e1:5f:8a:d0:5e:ed:
         d5:2b:e6:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvZxlOvgn/UIai8pOXmrbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTAxMjIxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzdhYWFjMGEzMjBhMzZkMGY0NTU2YTczNjc0MTBmZTE3NDU2ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL4rIF259iNS6jSxhXQTZUjdEXWJ
e+iSilwd84bw6MvORMMM5H6VVV0/7bSNLl6i129QG6HpbjjpUoICFg4phaJC6IBV
WvFodiW90l96pu/OLSqTGj/TwI4jTHPROzZBBzvwc/pYY6bT1mIgD+VV+bGud+/n
YWCI/MItsferiK40hVR1Jh7SAjjJTDxQ3HZD1h/hybuduCnn/AP68pCx8wpXgGcx
OJmDrVfk0c5xy1nkfSKiVzHvSlx/yVIYX3d73sxFf0i5/FZ6U6+o2cHcyqi4JMEn
HD7X3lGdEXq2cLJXy4f567lCWFjiT7rtTaPHDx8DfX6ZDNvigdLbxwttwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGx6qsCjIKNtD0VWpzZ0EP4XRWhlMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYkhxcXdLTWdvMjBQUlZhbk5uUVFfaGRGYUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1MAQMA0G
CSqGSIb3DQEBCwUAA4IBAQBoIm1UBYpHM5a4JKO/vJgyATuMbffQdMiFHjbvVB1D
Hu+CAaAuWhdTnnsharw4jsFGVa+2HLi42h4kYy+vKC7a6uxdObaOYkmIIfgGBaL9
uLiwY0KrD56QFMZkJYpUHLkTAy75k4cQdxQNDdrrB0gpRx/kCNAiYNcpDo8DGSIS
uS0d8JpGMEiVrbGqqlu7vUUyObHs471zpTza8Rhh/HaaXeLUaC4GuAYTkuLheZzl
vO4vm14IXFNy3v8FoOSngGjw5jiVCScuSpCcnRJxyfDiMaTXOuoj4WmPznG+qNTo
pUxb9QERSAUM00jk7SCRMF9BuZ1gL0bhX4rQXu3VK+YA
-----END CERTIFICATE-----