Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa
File:                     6AVKsl9NzlNU7yx6cJIhfvycv68.roa (raw, json)
Hash identifier:          8S2M6l7lwQ6PMUrshXQNF+/anQuRoeBuU8wYD4543uo=
Subject key identifier:   E8:05:4A:B2:5F:4D:CE:53:54:EF:2C:7A:70:92:21:7E:FC:9C:BF:AF
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01856D1CD265B1809787B5EA039C71E76327
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa
Signing time:             Sun 01 Jan 2023 11:34:43 +0000
ROA not before:           Sun 01 Jan 2023 11:34:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60602
IP address blocks:        81.31.242.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:1c:d2:65:b1:80:97:87:b5:ea:03:9c:71:e7:63:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan  1 11:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8054ab25f4dce5354ef2c7a7092217efc9cbfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:1a:83:ec:3e:35:c9:e4:47:07:76:d2:47:
                    4c:bf:df:e6:aa:4f:41:96:65:8d:3c:c4:e5:be:17:
                    ee:ef:42:cf:92:dd:48:0e:89:1a:99:62:d6:85:bc:
                    1c:66:c3:e6:ef:5c:56:18:4d:a2:42:fc:59:ed:f3:
                    84:4e:a9:ea:67:70:ba:25:ea:9d:e9:da:b6:63:fc:
                    8b:6b:51:b3:42:dc:f6:37:ec:fc:d6:3b:a7:3e:2a:
                    a7:6e:e1:c7:a9:b3:ed:d0:62:51:7e:f0:4c:ea:ee:
                    73:1a:7c:1b:e4:ba:19:45:f0:6b:ac:5f:07:2b:6b:
                    2a:80:b9:06:30:89:c1:3f:8a:5c:6d:24:13:e4:40:
                    eb:78:23:03:54:a1:bc:1b:1a:e1:2e:fa:bc:79:29:
                    95:13:34:b0:2d:78:85:f8:34:bd:20:c5:70:fa:0c:
                    cc:a1:cc:07:84:1c:20:20:00:ca:c6:04:48:cc:99:
                    ea:3f:68:a9:61:c0:53:2e:47:37:56:43:6c:c6:01:
                    27:41:82:cd:4a:63:d9:9e:af:bd:6d:d0:da:f2:39:
                    2b:1f:a4:da:9c:89:a6:d0:87:5c:ae:88:43:ed:93:
                    bc:b5:ce:82:54:3a:59:2c:44:42:19:a5:46:91:e5:
                    7e:3e:cc:5d:ab:2e:48:62:2f:01:76:f7:5e:ff:31:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:4A:B2:5F:4D:CE:53:54:EF:2C:7A:70:92:21:7E:FC:9C:BF:AF
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f0:73:a2:98:f5:29:b0:1f:a2:16:36:3d:bb:f7:75:7c:89:cb:
         f5:ee:c8:83:be:3d:24:9c:9b:d0:12:96:f9:07:f6:4a:08:94:
         0b:15:17:61:d0:7d:81:a3:b8:3d:ad:df:ec:01:31:60:fb:5d:
         99:5a:23:e0:41:4d:cd:f4:ec:66:24:59:5e:5f:43:88:fd:32:
         4a:66:29:c4:ef:13:81:29:5b:84:66:0f:4a:99:39:5f:63:50:
         55:2f:be:db:d7:de:47:0a:aa:da:e5:1f:62:bf:e7:aa:a1:14:
         b7:c2:24:1b:a0:76:77:d4:75:72:03:ba:cd:30:a6:9f:1b:9f:
         85:b1:02:f6:15:e4:62:8a:f3:da:85:b4:f3:db:10:33:c3:72:
         ec:fe:e6:ab:7a:63:ab:78:bc:2a:70:24:70:47:0e:b3:4d:75:
         fa:d5:97:85:ab:77:d7:a6:84:19:cb:d3:29:31:f0:ba:1f:42:
         2f:61:50:ea:0f:a1:de:bf:32:53:af:d4:e0:b7:5c:26:10:25:
         3c:0c:4c:82:28:f1:c1:15:ba:95:bf:b1:1f:d5:f4:cd:e6:89:
         22:bc:cd:99:38:5b:a1:95:eb:f0:99:3e:7d:65:ce:34:cb:f2:
         ad:fb:5f:c8:de:4d:ba:ab:c3:82:4c:89:87:f4:cc:fa:9a:ef:
         2e:2e:3c:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtHNJlsYCXh7XqA5xx52MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwMTAxMTEzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODA1NGFiMjVmNGRjZTUzNTRlZjJjN2E3MDkyMjE3ZWZjOWNiZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz4ag+w+NcnkRwd20kdMv9/mqk9B
lmWNPMTlvhfu70LPkt1IDokamWLWhbwcZsPm71xWGE2iQvxZ7fOETqnqZ3C6Jeqd
6dq2Y/yLa1GzQtz2N+z81junPiqnbuHHqbPt0GJRfvBM6u5zGnwb5LoZRfBrrF8H
K2sqgLkGMInBP4pcbSQT5EDreCMDVKG8GxrhLvq8eSmVEzSwLXiF+DS9IMVw+gzM
ocwHhBwgIADKxgRIzJnqP2ipYcBTLkc3VkNsxgEnQYLNSmPZnq+9bdDa8jkrH6Ta
nImm0IdcrohD7ZO8tc6CVDpZLERCGaVGkeV+Psxdqy5IYi8Bdvde/zF60wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgFSrJfTc5TVO8senCSIX78nL+vMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvNkFWS3NsOU56bE5VN3l4NmNKSWhmdnljdjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUR/yMA0G
CSqGSIb3DQEBCwUAA4IBAQDwc6KY9SmwH6IWNj2793V8icv17siDvj0knJvQEpb5
B/ZKCJQLFRdh0H2Bo7g9rd/sATFg+12ZWiPgQU3N9OxmJFleX0OI/TJKZinE7xOB
KVuEZg9KmTlfY1BVL77b195HCqra5R9iv+eqoRS3wiQboHZ31HVyA7rNMKafG5+F
sQL2FeRiivPahbTz2xAzw3Ls/uaremOreLwqcCRwRw6zTXX61ZeFq3fXpoQZy9Mp
MfC6H0IvYVDqD6HevzJTr9Tgt1wmECU8DEyCKPHBFbqVv7Ef1fTN5okivM2ZOFuh
levwmT59Zc40y/Kt+1/I3k26q8OCTImH9Mz6mu8uLjwE
-----END CERTIFICATE-----