Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/E-biTinr4aL5LADm2YYXjtqoZ0I.roa
File:                     E-biTinr4aL5LADm2YYXjtqoZ0I.roa (raw, json)
Hash identifier:          bV8pu0khz/nlgtrcz+W0aVCODCGL2ABXJ264HcElLxI=
Subject key identifier:   13:E6:E2:4E:29:EB:E1:A2:F9:2C:00:E6:D9:86:17:8E:DA:A8:67:42
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       0186DDCA16305138062CC970EFB7C2B0C97C
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/E-biTinr4aL5LADm2YYXjtqoZ0I.roa
Signing time:             Tue 14 Mar 2023 01:44:14 +0000
ROA not before:           Tue 14 Mar 2023 01:44:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209372
IP address blocks:        31.204.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dd:ca:16:30:51:38:06:2c:c9:70:ef:b7:c2:b0:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Mar 14 01:44:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13e6e24e29ebe1a2f92c00e6d986178edaa86742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:30:e4:8f:66:64:37:5e:e1:24:ef:3c:32:
                    63:0c:5d:d8:05:d9:89:c4:38:bb:c0:db:f1:5c:a9:
                    3c:ee:52:30:3d:4a:a7:69:3e:5b:96:d5:f9:0c:91:
                    7d:7d:54:66:ab:cc:fe:3c:0e:8c:78:d4:99:8f:ad:
                    0d:65:3c:f4:44:81:c5:5a:3a:19:f6:be:15:e5:97:
                    b9:f4:3f:5f:a7:8e:43:85:36:a1:eb:bf:18:b5:2f:
                    46:01:1c:24:84:40:9a:f1:e8:e5:61:21:10:45:a8:
                    ff:6a:b9:31:09:3e:20:36:9e:50:e8:53:fd:11:aa:
                    ce:ae:fd:82:10:f0:0f:7b:03:53:78:65:60:bd:68:
                    1a:18:aa:f1:93:4c:58:11:17:30:45:2c:4b:bb:84:
                    57:14:d4:eb:e6:56:79:c6:b2:e0:64:cc:73:01:bc:
                    39:62:ca:c5:9c:fd:ef:d2:58:b4:c4:ed:6c:76:4c:
                    c3:b7:73:82:dc:a6:69:1a:cb:e2:1e:e1:50:a2:a8:
                    b0:e9:df:2c:b2:cd:44:db:07:af:b2:d9:49:92:9f:
                    79:de:d9:e0:b0:f2:2b:eb:d5:06:1c:4f:66:8c:79:
                    a5:cc:fb:d0:53:01:c6:ca:26:7f:07:09:1a:7f:e3:
                    8d:bc:91:42:3f:02:01:b1:e4:47:b4:db:21:65:e0:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:E2:4E:29:EB:E1:A2:F9:2C:00:E6:D9:86:17:8E:DA:A8:67:42
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/E-biTinr4aL5LADm2YYXjtqoZ0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.204.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:84:27:46:80:34:46:d0:10:fa:e6:1a:38:b3:6b:5d:30:
         66:5c:8d:98:9f:d8:fb:9f:0b:1a:9a:27:fb:b1:cd:c5:16:2b:
         b1:cb:14:4b:e4:96:4c:af:42:70:10:16:4d:18:d7:83:cc:a5:
         0f:b0:42:96:34:e4:24:d2:68:30:12:fb:72:8d:a6:e2:14:70:
         2d:39:f0:34:21:c5:69:ac:48:f3:21:98:b3:e1:6f:24:9c:d8:
         99:0f:e4:48:ce:73:4c:47:bb:db:0b:b9:e2:4e:a1:de:97:48:
         5b:e6:90:ef:6f:a5:ee:c2:b6:80:39:ff:cb:6e:ea:aa:2f:9d:
         24:39:9b:d2:76:a1:3d:3a:b8:b4:b9:e5:65:5a:6e:13:6b:29:
         a4:63:64:b9:50:64:1e:df:0f:39:7f:51:50:92:38:26:e1:f4:
         59:1a:64:36:07:99:08:66:7b:12:fa:9b:55:78:44:56:b5:81:
         e7:48:15:1a:e4:91:52:29:79:67:f2:d1:c7:ab:47:53:32:32:
         dd:75:dd:69:bc:a3:95:f3:94:d8:42:57:16:d8:4c:a9:d4:01:
         eb:47:38:b5:f6:69:6c:65:ad:99:f2:aa:85:85:98:a2:bf:14:
         0a:63:b8:06:76:51:82:18:b3:a1:1e:86:0e:9a:63:ba:67:02:
         ac:29:af:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbdyhYwUTgGLMlw77fCsMl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl
YWZjOWQwHhcNMjMwMzE0MDE0NDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2U2ZTI0ZTI5ZWJlMWEyZjkyYzAwZTZkOTg2MTc4ZWRhYTg2NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq4w5I9mZDde4STvPDJjDF3YBdmJ
xDi7wNvxXKk87lIwPUqnaT5bltX5DJF9fVRmq8z+PA6MeNSZj60NZTz0RIHFWjoZ
9r4V5Ze59D9fp45DhTah678YtS9GARwkhECa8ejlYSEQRaj/arkxCT4gNp5Q6FP9
EarOrv2CEPAPewNTeGVgvWgaGKrxk0xYERcwRSxLu4RXFNTr5lZ5xrLgZMxzAbw5
YsrFnP3v0li0xO1sdkzDt3OC3KZpGsviHuFQoqiw6d8sss1E2wevstlJkp953tng
sPIr69UGHE9mjHmlzPvQUwHGyiZ/Bwkaf+ONvJFCPwIBseRHtNshZeCk7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPm4k4p6+Gi+SwA5tmGF47aqGdCMB8GA1UdIwQY
MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt
NGE1ZWVkMWVlNWJjLzEvRS1iaVRpbnI0YUw1TEFEbTJZWVhqdHFvWjBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj
LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH8waMA0G
CSqGSIb3DQEBCwUAA4IBAQCkCoQnRoA0RtAQ+uYaOLNrXTBmXI2Yn9j7nwsamif7
sc3FFiuxyxRL5JZMr0JwEBZNGNeDzKUPsEKWNOQk0mgwEvtyjabiFHAtOfA0IcVp
rEjzIZiz4W8knNiZD+RIznNMR7vbC7niTqHel0hb5pDvb6XuwraAOf/LbuqqL50k
OZvSdqE9Ori0ueVlWm4TaymkY2S5UGQe3w85f1FQkjgm4fRZGmQ2B5kIZnsS+ptV
eERWtYHnSBUa5JFSKXln8tHHq0dTMjLddd1pvKOV85TYQlcW2Eyp1AHrRzi19mls
Za2Z8qqFhZiivxQKY7gGdlGCGLOhHoYOmmO6ZwKsKa/8
-----END CERTIFICATE-----