Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa
File:                     7et-0_EUHUCUVFZW-8FT4CfUCA8.roa (raw, json)
Hash identifier:          7hWAqYhH+fcdz7OUYDrvFzAu9rZOz7JHcYFVrHGrnjY=
Subject key identifier:   ED:EB:7E:D3:F1:14:1D:40:94:54:56:56:FB:C1:53:E0:27:D4:08:0F
Certificate issuer:       /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial:       01857094DF75BAF9E394173F73FA17ED2D52
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa
Signing time:             Mon 02 Jan 2023 03:44:42 +0000
ROA not before:           Mon 02 Jan 2023 03:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204096
IP address blocks:        185.114.232.0/22 maxlen: 24
                          2a06:7280::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:94:df:75:ba:f9:e3:94:17:3f:73:fa:17:ed:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
        Validity
            Not Before: Jan  2 03:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edeb7ed3f1141d4094545656fbc153e027d4080f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:82:81:e8:3c:c2:6d:42:32:8d:5b:a9:e2:
                    d5:76:93:3c:fe:a2:bf:67:75:62:36:58:2f:89:39:
                    2e:f0:5f:bd:78:34:6a:31:a5:c8:a0:2f:da:43:b4:
                    8e:19:cc:8b:f3:95:52:61:86:a6:40:cc:38:e7:8a:
                    8a:fb:d3:56:c4:c9:2a:fd:79:5a:96:01:72:16:47:
                    82:10:86:0a:5b:9c:c3:e5:e9:4d:70:d3:a8:aa:43:
                    74:ef:6c:cc:ae:fb:42:f9:08:98:84:0f:c8:6e:18:
                    d7:f0:63:c9:0b:81:9b:0c:a7:50:7e:1b:9e:ca:f6:
                    b1:46:6e:af:9d:ff:d0:90:05:6d:cb:13:be:ae:e6:
                    12:b0:01:91:be:4d:51:ff:89:2a:e5:43:65:34:c5:
                    74:8b:e9:f7:d8:07:9f:00:27:93:e5:c0:cc:88:8f:
                    06:b5:8a:3f:f0:fa:83:e4:da:b1:e8:e5:38:c1:c7:
                    30:ed:93:7b:32:75:9a:47:6b:e7:a4:1d:bb:dd:e1:
                    49:aa:d5:6f:4e:6f:31:89:ef:a5:92:6e:7c:b1:42:
                    25:c3:e9:c0:77:7c:f1:ed:41:78:1f:4d:e8:03:55:
                    6c:7f:64:23:18:f0:8c:b7:0b:02:70:a2:76:a8:57:
                    1f:00:c9:8a:39:ec:be:ef:d7:7b:6b:f7:f4:f1:eb:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:7E:D3:F1:14:1D:40:94:54:56:56:FB:C1:53:E0:27:D4:08:0F
            X509v3 Authority Key Identifier:
                keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/7et-0_EUHUCUVFZW-8FT4CfUCA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.114.232.0/22
                IPv6:
                  2a06:7280::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:c1:4a:74:66:44:af:9e:fb:85:39:0e:03:cd:ec:db:8d:68:
         a3:9a:8e:7c:67:52:59:bf:a8:df:aa:31:27:5b:50:3a:49:b3:
         3f:f6:7c:ec:0e:b7:4e:c7:c8:46:d5:b4:81:fc:53:3c:2d:fa:
         7d:28:00:1a:b3:ae:c7:40:7d:fa:1c:8c:78:e0:48:e6:a3:fc:
         0f:14:ed:86:65:b2:62:6a:7c:1a:d0:cc:b0:54:31:ae:93:29:
         1f:5c:a0:b4:a6:40:f8:f6:d3:32:eb:0e:92:ff:2e:85:71:c4:
         ab:c1:b6:da:3f:06:84:4a:2c:47:7a:6f:a3:40:8d:5d:57:c9:
         18:a8:d0:c5:2d:e4:d2:9c:dc:08:a6:41:7b:8b:86:95:63:3e:
         22:67:23:08:c0:dc:9f:4f:c5:fb:b9:58:67:8f:04:29:99:68:
         9d:ca:34:bc:ba:ca:32:8d:27:62:7e:0d:5b:61:27:67:da:d7:
         fa:ad:7e:00:2b:b2:38:cb:67:8a:3b:4f:22:b4:05:b2:0a:4d:
         3c:a0:3b:aa:70:9b:1e:49:a4:30:a1:91:75:a9:30:6d:f5:a5:
         2e:40:c3:46:fc:e0:0a:c0:9f:fb:c2:60:e2:5d:e6:ab:d4:56:
         09:b0:28:94:4a:0e:db:d4:dc:96:d7:ff:d6:93:bc:6f:04:8a:
         8c:e3:d2:05
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwlN91uvnjlBc/c/oX7S1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjMwMTAyMDM0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGViN2VkM2YxMTQxZDQwOTQ1NDU2NTZmYmMxNTNlMDI3ZDQwODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk32Cgeg8wm1CMo1bqeLVdpM8/qK/
Z3ViNlgviTku8F+9eDRqMaXIoC/aQ7SOGcyL85VSYYamQMw454qK+9NWxMkq/Xla
lgFyFkeCEIYKW5zD5elNcNOoqkN072zMrvtC+QiYhA/IbhjX8GPJC4GbDKdQfhue
yvaxRm6vnf/QkAVtyxO+ruYSsAGRvk1R/4kq5UNlNMV0i+n32AefACeT5cDMiI8G
tYo/8PqD5Nqx6OU4wccw7ZN7MnWaR2vnpB273eFJqtVvTm8xie+lkm58sUIlw+nA
d3zx7UF4H03oA1Vsf2QjGPCMtwsCcKJ2qFcfAMmKOey+79d7a/f08euq4wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO3rftPxFB1AlFRWVvvBU+An1AgPMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvN2V0LTBfRVVIVUNVVkZaVy04RlQ0Q2ZVQ0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXLoMA0E
AgACMAcDBQMqBnKAMA0GCSqGSIb3DQEBCwUAA4IBAQCmwUp0ZkSvnvuFOQ4Dzezb
jWijmo58Z1JZv6jfqjEnW1A6SbM/9nzsDrdOx8hG1bSB/FM8Lfp9KAAas67HQH36
HIx44Ejmo/wPFO2GZbJianwa0MywVDGukykfXKC0pkD49tMy6w6S/y6FccSrwbba
PwaESixHem+jQI1dV8kYqNDFLeTSnNwIpkF7i4aVYz4iZyMIwNyfT8X7uVhnjwQp
mWidyjS8usoyjSdifg1bYSdn2tf6rX4AK7I4y2eKO08itAWyCk08oDuqcJseSaQw
oZF1qTBt9aUuQMNG/OAKwJ/7wmDiXear1FYJsCiUSg7b1NyW1//Wk7xvBIqM49IF
-----END CERTIFICATE-----