Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa
File:                     m6In-mYsamtiDJZA69UmFP_dbFY.roa (raw, json)
Hash identifier:          R/rBwKuaAq1G9b8eMGWveDDXuEXkmBVe4U/Cmo79siU=
Subject key identifier:   9B:A2:27:FA:66:2C:6A:6B:62:0C:96:40:EB:D5:26:14:FF:DD:6C:56
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D81ED9C05367FBB1234ABF768F49500
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa
Signing time:             Sun 01 Jan 2023 13:25:09 +0000
ROA not before:           Sun 01 Jan 2023 13:25:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47748
IP address blocks:        2a00:1728:19::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:ed:9c:05:36:7f:bb:12:34:ab:f7:68:f4:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ba227fa662c6a6b620c9640ebd52614ffdd6c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:e2:b6:e6:da:1e:86:09:81:6a:04:31:38:
                    ce:fd:7d:63:c1:da:63:21:0d:54:d1:fe:94:38:1b:
                    e0:0f:db:0d:26:8c:37:9f:89:48:de:af:d8:8d:81:
                    fe:40:a0:23:b8:33:b6:60:92:9e:5b:86:19:2d:6a:
                    2b:96:bc:08:a4:a4:f2:b8:ad:a2:d8:de:f6:fc:df:
                    e3:ed:7a:ef:71:d2:5e:5e:7d:35:97:3c:e4:4e:fc:
                    b4:b8:26:21:1d:1f:d5:af:b9:78:aa:3d:64:72:f1:
                    2d:77:03:01:0c:db:6d:aa:1b:01:d8:d1:95:f0:aa:
                    f8:dd:6e:dc:7f:48:38:5e:0f:a3:a4:46:23:a9:50:
                    83:aa:71:02:ad:89:0a:47:49:6b:78:ee:4a:6b:a5:
                    36:4e:f3:74:f1:a0:09:1e:6a:a6:6f:b7:20:d1:2b:
                    50:fc:45:1d:16:1d:89:90:ba:01:08:78:09:f1:76:
                    da:e5:db:48:90:39:5c:ee:69:f4:94:f2:e1:cf:67:
                    21:c4:d9:a8:bd:af:a3:b6:cc:de:70:80:d6:87:2c:
                    f7:42:06:c1:f8:92:5b:1d:3a:44:df:b8:82:e3:ce:
                    25:ab:aa:db:13:96:4c:9f:3f:81:e5:9b:7d:31:16:
                    df:d7:42:7c:b4:72:39:e5:27:60:a4:ad:53:e4:4b:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:27:FA:66:2C:6A:6B:62:0C:96:40:EB:D5:26:14:FF:DD:6C:56
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6In-mYsamtiDJZA69UmFP_dbFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1728:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:0e:c5:73:9f:7a:23:e3:19:21:29:fe:44:e5:50:b8:37:
         10:67:34:4c:28:b3:7a:c8:18:61:a5:76:ae:bf:16:90:a5:c8:
         4c:18:a7:23:a0:13:db:f7:4e:f4:12:33:69:d0:31:61:fd:b4:
         4a:5f:c1:78:e4:d3:cb:3d:3a:b2:d5:cc:8a:1b:f5:55:ff:be:
         8a:a4:c9:e0:7c:12:ab:2d:18:b7:18:c4:25:82:83:fd:7a:3a:
         42:53:10:52:e5:f0:62:70:6c:71:d8:10:4f:ab:ed:a6:83:01:
         2e:c1:bf:01:d8:f5:98:8b:a1:ee:54:1f:fa:b4:a8:d8:9b:3c:
         76:ef:c1:7d:42:03:21:3a:ce:2f:8f:6c:03:35:72:f5:f3:f6:
         10:c7:b6:45:8c:20:1d:74:52:e9:e6:e0:e7:2b:9d:41:df:4c:
         8e:f1:f3:3f:a0:88:0e:d9:7d:b2:a9:d3:5d:35:36:47:3d:85:
         83:e3:d9:57:d2:aa:ae:3b:35:5d:b0:69:57:a7:1b:88:11:38:
         20:b6:9e:5d:f0:b5:aa:ca:dc:d6:6a:cb:f9:08:ef:ad:6f:f3:
         bd:ec:0c:1b:cf:cd:9e:e0:4f:3a:81:08:03:64:41:03:2b:a6:
         86:7e:dd:ca:ab:ba:b4:e6:5a:0c:ef:6f:8d:22:0f:4e:46:b3:
         83:86:d2:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtge2cBTZ/uxI0q/do9JUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmEyMjdmYTY2MmM2YTZiNjIwYzk2NDBlYmQ1MjYxNGZmZGQ2YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ritubaHoYJgWoEMTjO/X1jwdpj
IQ1U0f6UOBvgD9sNJow3n4lI3q/YjYH+QKAjuDO2YJKeW4YZLWorlrwIpKTyuK2i
2N72/N/j7XrvcdJeXn01lzzkTvy0uCYhHR/Vr7l4qj1kcvEtdwMBDNttqhsB2NGV
8Kr43W7cf0g4Xg+jpEYjqVCDqnECrYkKR0lreO5Ka6U2TvN08aAJHmqmb7cg0StQ
/EUdFh2JkLoBCHgJ8Xba5dtIkDlc7mn0lPLhz2chxNmova+jtszecIDWhyz3QgbB
+JJbHTpE37iC484lq6rbE5ZMnz+B5Zt9MRbf10J8tHI55SdgpK1T5EsljwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJuiJ/pmLGprYgyWQOvVJhT/3WxWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbTZJbi1tWXNhbXRpREpaQTY5VW1GUF9kYkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAXKAAZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAuzA7Fc596I+MZISn+ROVQuDcQZzRMKLN6yBhh
pXauvxaQpchMGKcjoBPb9070EjNp0DFh/bRKX8F45NPLPTqy1cyKG/VV/76KpMng
fBKrLRi3GMQlgoP9ejpCUxBS5fBicGxx2BBPq+2mgwEuwb8B2PWYi6HuVB/6tKjY
mzx278F9QgMhOs4vj2wDNXL18/YQx7ZFjCAddFLp5uDnK51B30yO8fM/oIgO2X2y
qdNdNTZHPYWD49lX0qquOzVdsGlXpxuIETggtp5d8LWqytzWasv5CO+tb/O97Awb
z82e4E86gQgDZEEDK6aGft3Kq7q05loM72+NIg9ORrODhtKB
-----END CERTIFICATE-----