Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/5_xgBjHE4TqDWtTL0XQBHvHlOxg.roa
File:                     5_xgBjHE4TqDWtTL0XQBHvHlOxg.roa (raw, json)
Hash identifier:          Yb4MNbuNh0sMFnT5xr+N3kKNxsD1Yg81XMB8npklfZQ=
Subject key identifier:   E7:FC:60:06:31:C4:E1:3A:83:5A:D4:CB:D1:74:01:1E:F1:E5:3B:18
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       01856F300B9AD355FC88813DAA7753A8D8E1
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/5_xgBjHE4TqDWtTL0XQBHvHlOxg.roa
Signing time:             Sun 01 Jan 2023 21:14:57 +0000
ROA not before:           Sun 01 Jan 2023 21:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213230
IP address blocks:        5.161.0.0/16 maxlen: 24
                          2a01:4ff::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:0b:9a:d3:55:fc:88:81:3d:aa:77:53:a8:d8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Jan  1 21:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7fc600631c4e13a835ad4cbd174011ef1e53b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:04:01:98:3d:12:74:46:48:da:b4:e5:67:
                    82:c2:cb:16:05:1f:20:56:07:2b:9a:17:d4:47:c9:
                    b7:c0:3c:fb:5e:2b:34:12:5b:3a:57:7d:2f:d8:3f:
                    af:ad:81:f8:d6:f5:bb:84:79:bd:b1:58:82:28:c6:
                    f8:bd:2e:91:79:ba:c3:58:e1:25:36:52:1f:91:bb:
                    9c:18:a0:2c:41:d1:ad:91:79:1e:63:1d:14:ae:33:
                    0c:0f:85:73:2f:71:dc:c2:e5:d2:45:1b:b5:fe:9f:
                    1d:46:f8:08:dd:50:89:b8:37:1c:e0:c9:59:56:b9:
                    3e:48:69:49:56:8b:1b:19:98:d2:75:5e:6d:92:50:
                    2b:a3:90:2a:0f:81:b7:03:09:7b:0d:53:18:0a:18:
                    47:88:4a:c4:b9:1b:80:bb:34:65:da:3f:c8:fc:1c:
                    dd:b7:24:aa:95:52:da:cc:90:2d:4e:ed:c7:cd:f1:
                    20:ed:c7:be:9e:75:01:90:4f:e9:d3:ff:cd:d1:5b:
                    f3:34:e6:81:be:85:85:a6:ea:4e:bf:ac:eb:3d:2d:
                    dc:51:99:09:23:47:62:0d:0c:86:d9:30:c4:f1:55:
                    b7:bb:9a:6d:1a:13:0b:17:78:ee:23:b0:9d:2b:83:
                    62:48:d1:14:dc:dd:eb:88:f3:c8:42:05:f2:fa:d8:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:60:06:31:C4:E1:3A:83:5A:D4:CB:D1:74:01:1E:F1:E5:3B:18
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/5_xgBjHE4TqDWtTL0XQBHvHlOxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.161.0.0/16
                IPv6:
                  2a01:4ff::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:a5:be:ce:15:89:61:d9:f7:bc:c9:02:fa:86:0d:62:c1:
         dc:b0:34:95:f1:cd:6b:51:a3:59:8a:c9:17:5d:09:dc:e9:68:
         9e:7f:d3:38:e3:88:d6:fe:16:7d:9c:9f:f6:1b:78:73:29:cf:
         4b:35:df:2a:63:28:a5:4c:96:14:47:4f:42:83:89:a5:c1:97:
         1d:2b:7b:d2:d9:ca:c6:dc:61:cc:9f:1a:3d:b7:28:9f:26:31:
         09:ab:d5:14:c7:31:22:c7:6b:f9:c1:65:2d:41:5f:e3:00:6e:
         a4:53:c7:ca:57:aa:a9:00:55:e7:e3:d9:82:94:b5:fc:ff:08:
         6f:07:ea:05:b5:d6:71:2a:a4:64:ff:0f:0c:24:75:44:c6:f0:
         18:75:df:d3:54:f6:ca:cd:b6:92:86:ce:34:ab:88:6f:af:fa:
         0b:5c:c7:ec:5a:73:af:bf:26:da:03:7f:3c:93:65:72:2b:d3:
         aa:e9:0a:bd:94:65:e1:9d:cc:df:fc:be:38:92:64:4b:43:4a:
         e3:a8:e0:83:b1:7b:be:dc:32:10:da:39:c8:af:85:9c:2f:ed:
         82:2c:c8:de:f8:aa:a9:60:8c:01:15:94:73:f1:b1:52:d9:d2:
         1d:ba:d4:62:8e:e9:c2:4b:f7:00:52:7f:a5:85:4d:a2:6b:25:
         3a:59:86:d6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvMAua01X8iIE9qndTqNjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjMwMTAxMjExNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2ZjNjAwNjMxYzRlMTNhODM1YWQ0Y2JkMTc0MDExZWYxZTUzYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXoEAZg9EnRGSNq05WeCwssWBR8g
VgcrmhfUR8m3wDz7Xis0Els6V30v2D+vrYH41vW7hHm9sViCKMb4vS6RebrDWOEl
NlIfkbucGKAsQdGtkXkeYx0UrjMMD4VzL3HcwuXSRRu1/p8dRvgI3VCJuDcc4MlZ
Vrk+SGlJVosbGZjSdV5tklAro5AqD4G3Awl7DVMYChhHiErEuRuAuzRl2j/I/Bzd
tySqlVLazJAtTu3HzfEg7ce+nnUBkE/p0//N0VvzNOaBvoWFpupOv6zrPS3cUZkJ
I0diDQyG2TDE8VW3u5ptGhMLF3juI7CdK4NiSNEU3N3riPPIQgXy+tjqLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOf8YAYxxOE6g1rUy9F0AR7x5TsYMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvNV94Z0JqSEU0VHFEV3RUTDBYUUJIdkhsT3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTALBAIAATAFAwMABaEwDgQC
AAIwCAMGACoBBP8AMA0GCSqGSIb3DQEBCwUAA4IBAQC/9qW+zhWJYdn3vMkC+oYN
YsHcsDSV8c1rUaNZiskXXQnc6Wief9M444jW/hZ9nJ/2G3hzKc9LNd8qYyilTJYU
R09Cg4mlwZcdK3vS2crG3GHMnxo9tyifJjEJq9UUxzEix2v5wWUtQV/jAG6kU8fK
V6qpAFXn49mClLX8/whvB+oFtdZxKqRk/w8MJHVExvAYdd/TVPbKzbaShs40q4hv
r/oLXMfsWnOvvybaA388k2VyK9Oq6Qq9lGXhnczf/L44kmRLQ0rjqOCDsXu+3DIQ
2jnIr4WcL+2CLMje+KqpYIwBFZRz8bFS2dIdutRijunCS/cAUn+lhU2iayU6WYbW
-----END CERTIFICATE-----