Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/R72Svig3PYBIcQLugjYEQX6-zb4.roa
File:                     R72Svig3PYBIcQLugjYEQX6-zb4.roa (raw, json)
Hash identifier:          2+Fl9UtK/+CXWSCJkrlvAN9uD7AjHtihA0s5OEaZVO8=
Subject key identifier:   47:BD:92:BE:28:37:3D:80:48:71:02:EE:82:36:04:41:7E:BE:CD:BE
Certificate issuer:       /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial:       0186D52D7BCF0805FAFFD31B256CD6D55282
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/R72Svig3PYBIcQLugjYEQX6-zb4.roa
Signing time:             Sun 12 Mar 2023 09:36:13 +0000
ROA not before:           Sun 12 Mar 2023 09:36:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204394
IP address blocks:        185.250.100.0/22 maxlen: 22
                          2a0e:e580::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d5:2d:7b:cf:08:05:fa:ff:d3:1b:25:6c:d6:d5:52:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
        Validity
            Not Before: Mar 12 09:36:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47bd92be28373d80487102ee823604417ebecdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:19:36:f5:ae:fb:bb:81:c2:7c:62:43:37:
                    f9:06:b9:2a:be:97:8c:9d:43:a1:aa:57:dc:cf:2f:
                    0f:a5:cd:62:65:33:f1:36:20:7e:58:79:ae:fe:4d:
                    b2:d6:dc:fe:4d:0b:e3:90:74:cf:a5:f1:61:6b:9b:
                    0b:cf:dd:03:2d:3f:b1:0e:43:6e:f2:c4:6c:9e:a1:
                    b5:21:d7:ea:d4:da:15:55:21:99:20:81:87:a2:8a:
                    9f:af:7a:9c:fd:04:99:b4:e1:55:cb:74:5a:3c:91:
                    a8:6a:ca:9f:10:21:0a:99:ea:ae:91:96:79:cc:6e:
                    01:bb:e2:63:4f:1d:94:70:30:02:4e:88:35:99:15:
                    02:f6:43:6e:76:30:9c:20:10:33:98:17:87:fa:0e:
                    3b:5a:0d:71:42:ec:ec:78:89:35:e4:26:9b:65:a7:
                    09:cb:2e:07:07:20:c4:06:44:70:b6:8b:ad:2d:c5:
                    3f:56:e8:5e:b8:32:e2:1f:90:ca:75:b8:c1:1f:5d:
                    3a:a2:4b:eb:58:46:b6:9c:f6:ed:f3:31:aa:1e:2a:
                    1e:f3:86:d6:a3:4a:fe:95:81:9d:7d:b8:9b:97:2a:
                    9b:a0:db:e1:c9:ad:9a:65:3a:12:ed:86:25:1c:4c:
                    f7:f9:06:19:a5:40:48:44:a4:a6:da:a6:00:09:79:
                    32:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BD:92:BE:28:37:3D:80:48:71:02:EE:82:36:04:41:7E:BE:CD:BE
            X509v3 Authority Key Identifier:
                keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/R72Svig3PYBIcQLugjYEQX6-zb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.100.0/22
                IPv6:
                  2a0e:e580::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:49:72:42:10:92:7d:de:33:b1:30:9e:c8:4b:7d:59:ad:
         bb:18:fd:c0:59:48:e0:b4:95:44:d5:6a:c4:f4:9f:fe:9a:34:
         a8:72:e0:0c:ea:a9:a9:9a:c4:ce:4a:c6:1f:9f:5b:2d:3b:4e:
         28:2e:3f:c5:c0:7c:53:78:5e:7d:f4:1b:db:b8:94:b8:c0:54:
         f6:74:63:23:75:3d:b1:a6:1d:44:8e:31:52:58:1f:b6:6a:03:
         70:a5:d8:c1:4f:6a:62:a8:a4:05:7b:70:22:ee:cb:c7:3d:07:
         5c:67:7b:78:f4:79:c2:3a:a9:ff:80:5d:97:bb:f6:ae:32:7f:
         b8:fd:06:26:3c:f1:db:dd:0a:e6:c4:e4:2c:23:3e:f3:1b:1a:
         5d:c4:63:d3:79:95:b4:f9:56:ff:46:ba:82:59:9c:d4:58:71:
         6e:a8:98:77:d4:fc:99:3c:c5:0f:31:c5:0d:17:86:d9:22:65:
         63:d7:eb:5a:2a:8b:06:11:c2:91:1c:da:25:75:0b:a4:fc:b1:
         68:33:8c:16:e6:ca:e2:ad:88:0d:9a:c9:be:e0:1d:a9:d3:dc:
         cf:50:e1:ee:7c:c6:b4:9f:1b:46:8a:f1:43:00:72:bf:24:e3:
         de:fc:c6:cd:f4:eb:19:09:55:67:2c:7a:63:1e:28:fd:67:f5:
         3d:3b:6e:d1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbVLXvPCAX6/9MbJWzW1VKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Yzg3NDY5OTc4MDk1ZDhhZmY2MzI3MjgwNGJiMmYzNWQx
NDkxMDMwHhcNMjMwMzEyMDkzNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2JkOTJiZTI4MzczZDgwNDg3MTAyZWU4MjM2MDQ0MTdlYmVjZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMUZNvWu+7uBwnxiQzf5BrkqvpeM
nUOhqlfczy8Ppc1iZTPxNiB+WHmu/k2y1tz+TQvjkHTPpfFha5sLz90DLT+xDkNu
8sRsnqG1Idfq1NoVVSGZIIGHooqfr3qc/QSZtOFVy3RaPJGoasqfECEKmequkZZ5
zG4Bu+JjTx2UcDACTog1mRUC9kNudjCcIBAzmBeH+g47Wg1xQuzseIk15CabZacJ
yy4HByDEBkRwtoutLcU/VuheuDLiH5DKdbjBH106okvrWEa2nPbt8zGqHioe84bW
o0r+lYGdfbiblyqboNvhya2aZToS7YYlHEz3+QYZpUBIRKSm2qYACXky9wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEe9kr4oNz2ASHEC7oI2BEF+vs2+MB8GA1UdIwQY
MBaAFOnIdGmXgJXYr/YycoBLsvNdFJEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMt
MGNjM2I0Y2FmNjgzLzEvUjcyU3ZpZzNQWUJJY1FMdWdqWUVRWDYtemI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YWQ5ZGMtYjg0Yy00YTU5LWJiMWMtMGNjM2I0Y2FmNjgz
LzEvNmNoMGFaZUFsZGl2OWpKeWdFdXk4MTBVa1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufpkMA0E
AgACMAcDBQMqDuWAMA0GCSqGSIb3DQEBCwUAA4IBAQB5xUlyQhCSfd4zsTCeyEt9
Wa27GP3AWUjgtJVE1WrE9J/+mjSocuAM6qmpmsTOSsYfn1stO04oLj/FwHxTeF59
9BvbuJS4wFT2dGMjdT2xph1EjjFSWB+2agNwpdjBT2piqKQFe3Ai7svHPQdcZ3t4
9HnCOqn/gF2Xu/auMn+4/QYmPPHb3QrmxOQsIz7zGxpdxGPTeZW0+Vb/RrqCWZzU
WHFuqJh31PyZPMUPMcUNF4bZImVj1+taKosGEcKRHNoldQuk/LFoM4wW5srirYgN
msm+4B2p09zPUOHufMa0nxtGivFDAHK/JOPe/MbN9OsZCVVnLHpjHij9Z/U9O27R
-----END CERTIFICATE-----