Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/c-G-HfKfYwMqygE072CqyGtQpPY.roa
File:                     c-G-HfKfYwMqygE072CqyGtQpPY.roa (raw, json)
Hash identifier:          mfgoe+5hagf50Y+XO7p/PPTkBykydMjPDTc4WOLsmII=
Subject key identifier:   73:E1:BE:1D:F2:9F:63:03:2A:CA:01:34:EF:60:AA:C8:6B:50:A4:F6
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       0187B86E2EE8D8D81EDCFB991D38F5835E6A
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/c-G-HfKfYwMqygE072CqyGtQpPY.roa
Signing time:             Tue 25 Apr 2023 12:40:41 +0000
ROA not before:           Tue 25 Apr 2023 12:40:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     27
IP address blocks:        82.112.101.200/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b8:6e:2e:e8:d8:d8:1e:dc:fb:99:1d:38:f5:83:5e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 25 12:40:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73e1be1df29f63032aca0134ef60aac86b50a4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:c5:9f:60:55:29:8b:d5:20:83:1d:d6:e1:
                    fc:80:77:84:22:e8:c7:25:da:42:54:4e:ea:81:f0:
                    87:3d:23:37:c7:3a:df:56:4f:f2:7a:33:d8:84:ee:
                    09:25:3b:ed:51:f0:7f:1e:bf:86:34:2c:8d:36:e4:
                    e8:97:ba:34:f4:72:98:6f:aa:6a:43:ec:b8:b3:df:
                    e7:b2:56:94:df:cd:39:34:97:74:f5:86:e5:79:e7:
                    00:77:c0:57:d5:35:7c:10:c5:8e:04:94:c5:86:4d:
                    44:d5:9e:49:df:41:ad:a0:01:70:2f:8f:91:3b:c3:
                    f5:33:47:14:d8:a0:ca:5f:56:cf:a0:7a:81:0d:65:
                    44:f6:67:60:cd:e8:63:d7:25:62:d1:bb:b9:e2:d9:
                    77:8d:b6:53:59:b6:a7:7f:1a:a2:57:b7:6e:0b:99:
                    92:aa:8a:67:c9:91:4c:c0:2b:80:aa:ad:99:fe:90:
                    18:b1:d4:3c:41:36:c4:9a:0b:59:63:98:4c:2b:67:
                    0a:01:d5:fc:2a:ff:2f:7b:d4:47:28:62:dc:c6:cd:
                    59:c6:5f:9b:dc:3a:60:30:2f:c8:6f:4c:15:26:99:
                    bb:6a:2e:ec:d4:ae:c8:cc:7a:03:bd:18:e1:7c:34:
                    73:11:3b:14:87:5a:83:dd:af:d5:3e:1a:fa:19:0f:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:BE:1D:F2:9F:63:03:2A:CA:01:34:EF:60:AA:C8:6B:50:A4:F6
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/c-G-HfKfYwMqygE072CqyGtQpPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.112.101.200/29

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:d7:7c:f5:b8:3b:19:06:7b:de:c2:39:13:58:0c:80:92:
         0c:f3:84:6b:50:a2:65:62:dd:f4:f9:8d:1d:e0:d7:ab:1e:60:
         9d:06:25:b7:ce:42:8e:f3:6d:57:12:0e:bc:3a:ff:91:e4:d9:
         28:26:0c:0e:1b:bb:77:71:d5:85:4c:5c:89:0b:da:77:7c:ed:
         fc:84:6d:18:67:10:2e:37:a4:d9:4a:20:c0:63:0c:40:7c:30:
         a0:e4:4b:2b:fd:7a:66:1d:0a:26:0d:62:3d:cb:f4:5e:6a:55:
         26:72:ed:08:70:19:05:81:92:d5:3f:11:41:93:1a:35:7f:61:
         e4:0e:c8:60:1e:8d:f0:43:2f:6a:21:ed:a9:d3:94:48:0a:10:
         03:96:50:c3:2a:4a:0a:d5:92:97:a8:30:e7:fa:0b:83:16:2f:
         2c:05:a5:d5:64:d7:0e:49:85:40:a6:4b:62:52:2e:ac:e3:a2:
         2b:ed:59:63:b4:3a:81:ab:2d:c4:e5:7a:9f:71:3e:03:a3:ad:
         a6:75:5f:50:f5:46:1b:16:03:c8:01:a9:91:8f:5b:7d:e3:7f:
         94:b9:4b:59:70:91:17:a9:71:d3:86:17:03:36:ab:c0:aa:c2:
         24:ea:ac:79:bd:4e:9f:aa:4c:19:28:6e:d4:c4:48:14:6d:ef:
         c0:92:04:22
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYe4bi7o2Nge3PuZHTj1g15qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjMwNDI1MTI0MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2UxYmUxZGYyOWY2MzAzMmFjYTAxMzRlZjYwYWFjODZiNTBhNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPfFn2BVKYvVIIMd1uH8gHeEIujH
JdpCVE7qgfCHPSM3xzrfVk/yejPYhO4JJTvtUfB/Hr+GNCyNNuTol7o09HKYb6pq
Q+y4s9/nslaU3805NJd09YbleecAd8BX1TV8EMWOBJTFhk1E1Z5J30GtoAFwL4+R
O8P1M0cU2KDKX1bPoHqBDWVE9mdgzehj1yVi0bu54tl3jbZTWbanfxqiV7duC5mS
qopnyZFMwCuAqq2Z/pAYsdQ8QTbEmgtZY5hMK2cKAdX8Kv8ve9RHKGLcxs1Zxl+b
3DpgMC/Ib0wVJpm7ai7s1K7IzHoDvRjhfDRzETsUh1qD3a/VPhr6GQ9wmwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHPhvh3yn2MDKsoBNO9gqshrUKT2MB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvYy1HLUhmS2ZZd01xeWdFMDcyQ3F5R3RRcFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDUnBlyDAN
BgkqhkiG9w0BAQsFAAOCAQEAUq3XfPW4OxkGe97CORNYDICSDPOEa1CiZWLd9PmN
HeDXqx5gnQYlt85CjvNtVxIOvDr/keTZKCYMDhu7d3HVhUxciQvad3zt/IRtGGcQ
Ljek2UogwGMMQHwwoORLK/16Zh0KJg1iPcv0XmpVJnLtCHAZBYGS1T8RQZMaNX9h
5A7IYB6N8EMvaiHtqdOUSAoQA5ZQwypKCtWSl6gw5/oLgxYvLAWl1WTXDkmFQKZL
YlIurOOiK+1ZY7Q6gastxOV6n3E+A6OtpnVfUPVGGxYDyAGpkY9bfeN/lLlLWXCR
F6lx04YXAzarwKrCJOqseb1On6pMGShu1MRIFG3vwJIEIg==
-----END CERTIFICATE-----