Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vkvquITsDmZOMC2koO1fFAuO5Gk.roa
File:                     vkvquITsDmZOMC2koO1fFAuO5Gk.roa (raw, json)
Hash identifier:          T9EbUwK3VEH+5gHNbuM3f4QZIcedGziHiS8UbqpetaQ=
Subject key identifier:   BE:4B:EA:B8:84:EC:0E:66:4E:30:2D:A4:A0:ED:5F:14:0B:8E:E4:69
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF97F869079B61D6034C2255E6660CD
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vkvquITsDmZOMC2koO1fFAuO5Gk.roa
Signing time:             Mon 02 Jan 2023 00:55:00 +0000
ROA not before:           Mon 02 Jan 2023 00:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197897
IP address blocks:        88.203.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:7f:86:90:79:b6:1d:60:34:c2:25:5e:66:60:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be4beab884ec0e664e302da4a0ed5f140b8ee469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:14:71:a9:8a:cf:23:c9:32:26:90:3d:32:
                    d8:2a:a8:fc:b7:3a:4e:8a:4a:e2:b6:b5:8c:85:a6:
                    d0:1f:95:f0:e0:76:c3:ca:a9:27:28:8d:fa:6f:bb:
                    a8:75:61:9f:bb:fb:ea:7a:5c:73:95:75:63:53:d9:
                    2c:f0:52:53:27:c7:5a:6a:9c:d9:f3:6d:63:bc:4a:
                    93:eb:82:d4:5d:32:df:ef:a2:71:f6:57:57:3e:30:
                    3f:d4:a9:62:d8:a1:16:17:67:48:22:22:a2:83:11:
                    95:57:1e:a3:c7:c0:aa:00:41:aa:4e:ad:74:91:af:
                    48:e6:fd:d6:2e:60:37:cc:2f:9d:9b:30:de:8c:0a:
                    c8:9c:a3:32:18:e5:0a:c4:a8:76:d0:26:ba:80:0b:
                    14:26:9c:6f:4b:1a:32:fd:23:5d:ce:cf:7c:d5:70:
                    5b:d2:af:2a:86:df:a8:9c:17:df:c1:ad:15:3f:11:
                    65:64:00:da:73:30:0a:c5:5e:3a:28:c5:8e:ea:7a:
                    ca:2f:80:4f:e9:e9:77:75:b2:5b:19:1b:0e:50:33:
                    22:02:59:bb:87:46:e7:ab:d1:9e:44:0e:c8:aa:35:
                    33:44:e1:fa:0d:05:3b:67:c3:06:70:be:fc:4c:f0:
                    13:93:d6:4e:8b:e1:72:b1:15:5c:ad:1d:91:20:46:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4B:EA:B8:84:EC:0E:66:4E:30:2D:A4:A0:ED:5F:14:0B:8E:E4:69
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vkvquITsDmZOMC2koO1fFAuO5Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.203.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:92:db:a6:95:c4:6f:f4:c7:bd:57:b2:9e:22:e5:f8:60:3f:
         63:5f:76:8f:ea:2d:34:21:8f:b7:01:9e:89:90:c0:50:0d:49:
         6c:a9:9d:cf:f6:81:cb:f7:68:9f:f0:d9:d7:95:6e:40:4f:7b:
         eb:25:88:31:a2:a0:6f:70:e1:b0:41:cd:3b:4f:97:0d:e7:71:
         8d:d8:b1:40:cf:52:41:11:42:7f:5d:4d:37:e5:d3:fc:14:03:
         0b:e3:0e:b1:57:3c:41:4f:f6:2d:f5:20:e5:d1:20:7e:2d:95:
         3f:42:f9:25:f1:3a:98:99:c2:a7:cf:c2:64:73:59:90:61:29:
         8a:6b:86:3b:c5:44:24:92:62:bf:2c:46:da:7e:9a:8a:fe:be:
         39:f6:1e:e7:28:a7:6d:33:13:86:d9:e8:10:8e:c7:c4:4f:d0:
         e3:e4:3f:b2:1c:88:95:4e:3a:d9:ee:a4:2b:be:bd:62:a0:59:
         b0:51:29:f7:64:a9:c8:ec:be:ee:d2:b7:79:21:31:e4:28:da:
         ae:3a:7f:96:bd:e2:da:66:68:5e:8d:0d:5c:03:9c:c9:8a:84:
         af:a1:09:e5:17:4e:18:ac:4f:a3:c9:48:7e:4a:b8:b9:cd:34:
         84:10:9b:98:6a:ff:ab:07:fd:4b:95:9e:23:2f:58:e2:87:a2:
         24:51:bb:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+X+GkHm2HWA0wiVeZmDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTRiZWFiODg0ZWMwZTY2NGUzMDJkYTRhMGVkNWYxNDBiOGVlNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4AUcamKzyPJMiaQPTLYKqj8tzpO
ikritrWMhabQH5Xw4HbDyqknKI36b7uodWGfu/vqelxzlXVjU9ks8FJTJ8daapzZ
821jvEqT64LUXTLf76Jx9ldXPjA/1Kli2KEWF2dIIiKigxGVVx6jx8CqAEGqTq10
ka9I5v3WLmA3zC+dmzDejArInKMyGOUKxKh20Ca6gAsUJpxvSxoy/SNdzs981XBb
0q8qht+onBffwa0VPxFlZADaczAKxV46KMWO6nrKL4BP6el3dbJbGRsOUDMiAlm7
h0bnq9GeRA7IqjUzROH6DQU7Z8MGcL78TPATk9ZOi+FysRVcrR2RIEahkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL5L6riE7A5mTjAtpKDtXxQLjuRpMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvdmt2cXVJVHNEbVpPTUMya29PMWZGQXVPNUdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWMv4MA0G
CSqGSIb3DQEBCwUAA4IBAQAjktumlcRv9Me9V7KeIuX4YD9jX3aP6i00IY+3AZ6J
kMBQDUlsqZ3P9oHL92if8NnXlW5AT3vrJYgxoqBvcOGwQc07T5cN53GN2LFAz1JB
EUJ/XU035dP8FAML4w6xVzxBT/Yt9SDl0SB+LZU/Qvkl8TqYmcKnz8Jkc1mQYSmK
a4Y7xUQkkmK/LEbafpqK/r459h7nKKdtMxOG2egQjsfET9Dj5D+yHIiVTjrZ7qQr
vr1ioFmwUSn3ZKnI7L7u0rd5ITHkKNquOn+WveLaZmhejQ1cA5zJioSvoQnlF04Y
rE+jyUh+Sri5zTSEEJuYav+rB/1LlZ4jL1jih6IkUbvs
-----END CERTIFICATE-----