Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa
File:                     ukMPwW9EUjJtSabPv3tNV8DVlYM.roa (raw, json)
Hash identifier:          3um8mBdg5hB0Lyhs+dlpfrV8LSTxYDvYgmKlLAxEbD0=
Subject key identifier:   BA:43:0F:C1:6F:44:52:32:6D:49:A6:CF:BF:7B:4D:57:C0:D5:95:83
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       01857315BC279907E67868DF8707243CE714
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa
Signing time:             Mon 02 Jan 2023 15:24:42 +0000
ROA not before:           Mon 02 Jan 2023 15:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44486
IP address blocks:        91.197.55.0/24 maxlen: 24
                          2a06:8ac0::/45 maxlen: 45

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:bc:27:99:07:e6:78:68:df:87:07:24:3c:e7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Jan  2 15:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba430fc16f4452326d49a6cfbf7b4d57c0d59583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:03:5a:7f:4b:5f:db:67:fb:09:45:aa:0f:
                    ef:07:9b:de:8e:bb:25:5d:68:8d:3e:cc:62:21:b2:
                    03:26:b1:f2:e3:1f:03:4c:28:65:ca:ab:d5:a7:0b:
                    2a:fc:6c:4f:f3:d7:a8:15:d9:45:19:25:9d:ce:32:
                    ef:6c:ca:c0:43:53:c9:23:a9:f5:4b:a9:47:bb:77:
                    3c:e7:44:2f:fe:f3:89:09:7f:73:7c:a4:40:6a:f6:
                    27:21:4d:e0:09:d9:ec:8b:e3:e4:72:8e:c0:23:c7:
                    1d:2c:fe:c7:e1:83:a8:24:5b:33:fb:23:e4:cd:79:
                    0a:45:83:83:3d:a6:56:74:17:17:1a:4f:09:40:95:
                    51:35:51:49:c5:47:db:8f:0c:e1:63:3e:b5:8d:3f:
                    f3:d3:2c:22:3d:27:d4:41:8f:48:68:fc:d6:19:8b:
                    92:86:46:9d:dc:b8:35:a3:01:04:23:c0:34:ae:d6:
                    d4:75:77:d8:e2:cd:28:3e:0e:d8:55:5d:92:cd:63:
                    a9:fa:19:29:e9:b7:98:49:94:07:cc:94:20:35:0f:
                    c7:0e:3b:86:d2:3b:f2:52:b6:6a:8a:d6:7f:1c:05:
                    1d:b3:db:84:33:36:84:3c:12:72:a7:cd:01:7d:43:
                    18:ad:ed:8b:78:72:9d:d3:af:e0:8a:9c:20:32:7d:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:43:0F:C1:6F:44:52:32:6D:49:A6:CF:BF:7B:4D:57:C0:D5:95:83
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.197.55.0/24
                IPv6:
                  2a06:8ac0::/45

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:eb:2e:67:cb:d3:24:b6:0a:15:47:f0:18:27:66:a9:c8:
         0e:0a:b7:39:e4:54:ae:56:bc:52:8a:ae:52:bf:4b:ff:68:67:
         71:6a:bc:ca:cf:59:25:6f:a6:6f:1b:6a:b5:df:b6:8a:b5:fc:
         d2:03:40:43:e7:c3:d1:2a:ad:cb:d4:1b:ed:b9:28:e9:1a:db:
         00:53:aa:7f:b6:62:32:5d:ef:58:a3:5b:6e:06:cb:53:28:06:
         f4:e9:8f:c4:ba:38:9e:04:0d:5b:f6:b2:ad:3d:14:65:0b:b3:
         80:5b:f2:b6:07:8b:51:d2:cb:3d:ac:13:40:9f:e9:0c:a9:b8:
         c4:0b:ff:61:43:88:83:6c:26:15:20:cd:5e:59:11:1f:b2:60:
         fe:95:8e:9f:c9:f1:9b:01:e6:ba:84:ef:8f:3c:ec:ec:62:c0:
         ca:60:d8:98:e3:4e:f5:30:07:6b:af:6b:fd:e3:ce:e3:6c:ee:
         52:07:ff:47:db:a2:2e:c1:88:9b:4a:6e:7a:f3:f0:86:ae:19:
         67:23:9d:9e:35:3f:39:38:2f:96:e5:fb:6a:c5:5e:03:ed:8f:
         3d:f2:91:61:1a:58:58:e6:6e:7a:ea:9d:91:ed:f0:e1:74:1a:
         38:24:c8:f4:ed:fa:7c:ad:68:20:e6:36:47:5b:5f:91:b2:5a:
         b2:bb:78:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVzFbwnmQfmeGjfhwckPOcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhODQ2MDA2Y2Y4YjllMzg4ZjMxNDUxMzU4MDkyNTAyY2Vj
YzExMzYwHhcNMjMwMTAyMTUyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTQzMGZjMTZmNDQ1MjMyNmQ0OWE2Y2ZiZjdiNGQ1N2MwZDU5NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMEDWn9LX9tn+wlFqg/vB5vejrsl
XWiNPsxiIbIDJrHy4x8DTChlyqvVpwsq/GxP89eoFdlFGSWdzjLvbMrAQ1PJI6n1
S6lHu3c850Qv/vOJCX9zfKRAavYnIU3gCdnsi+Pkco7AI8cdLP7H4YOoJFsz+yPk
zXkKRYODPaZWdBcXGk8JQJVRNVFJxUfbjwzhYz61jT/z0ywiPSfUQY9IaPzWGYuS
hkad3Lg1owEEI8A0rtbUdXfY4s0oPg7YVV2SzWOp+hkp6beYSZQHzJQgNQ/HDjuG
0jvyUrZqitZ/HAUds9uEMzaEPBJyp80BfUMYre2LeHKd06/gipwgMn1eeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLpDD8FvRFIybUmmz797TVfA1ZWDMB8GA1UdIwQY
MBaAFOqEYAbPi544jzFFE1gJJQLOzBE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEt
Zjc0Y2NjYzRlMGExLzEvdWtNUHdXOUVVakp0U2FiUHYzdE5WOERWbFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMWNkNzctMWVjYS00NmI5LTlhYmEtZjc0Y2NjYzRlMGEx
LzEvNm9SZ0JzLUxuamlQTVVVVFdBa2xBczdNRVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8U3MA8E
AgACMAkDBwMqBorAAAAwDQYJKoZIhvcNAQELBQADggEBAHiO6y5ny9MktgoVR/AY
J2apyA4KtznkVK5WvFKKrlK/S/9oZ3FqvMrPWSVvpm8barXftoq1/NIDQEPnw9Eq
rcvUG+25KOka2wBTqn+2YjJd71ijW24Gy1MoBvTpj8S6OJ4EDVv2sq09FGULs4Bb
8rYHi1HSyz2sE0Cf6QypuMQL/2FDiINsJhUgzV5ZER+yYP6Vjp/J8ZsB5rqE7488
7OxiwMpg2JjjTvUwB2uva/3jzuNs7lIH/0fboi7BiJtKbnrz8IauGWcjnZ41Pzk4
L5bl+2rFXgPtjz3ykWEaWFjmbnrqnZHt8OF0GjgkyPTt+nytaCDmNkdbX5GyWrK7
eP0=
-----END CERTIFICATE-----