Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/boPSWwxCxPqZlnmiXYtvMhejrVA.roa
File:                     boPSWwxCxPqZlnmiXYtvMhejrVA.roa (raw, json)
Hash identifier:          btyxP9L5e0Hm6D2L5SguLckRDzPcM+9uPhBZBwreUMQ=
Subject key identifier:   6E:83:D2:5B:0C:42:C4:FA:99:96:79:A2:5D:8B:6F:32:17:A3:AD:50
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0188C449B1231CE57371EEB506005EA477F6
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/boPSWwxCxPqZlnmiXYtvMhejrVA.roa
Signing time:             Fri 16 Jun 2023 12:59:03 +0000
ROA not before:           Fri 16 Jun 2023 12:59:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14576
IP address blocks:        193.93.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c4:49:b1:23:1c:e5:73:71:ee:b5:06:00:5e:a4:77:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jun 16 12:59:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e83d25b0c42c4fa999679a25d8b6f3217a3ad50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:77:24:c5:1a:fa:35:62:5b:96:ed:90:00:
                    ac:3d:da:be:00:47:13:79:8c:cf:d1:12:cd:25:7c:
                    17:5a:12:6b:e9:ed:fa:6b:24:c4:9d:c6:74:de:93:
                    45:cf:5e:38:25:6d:2a:f2:d9:37:c0:16:b4:1a:e4:
                    4e:c5:dd:91:cc:9c:d3:bd:6b:2b:4c:a5:47:4a:9a:
                    24:d8:bc:aa:f2:e4:3b:e0:b1:5b:81:13:4c:a2:ae:
                    b9:b8:c0:5c:fc:6e:f2:3f:52:20:90:f3:24:d9:d3:
                    3b:d9:05:44:b1:f0:98:6b:79:ef:59:66:5f:63:5e:
                    3a:af:99:e4:ee:50:f1:f7:c8:0a:ed:d1:90:1c:55:
                    7f:2c:7b:00:cc:29:f6:e6:b7:2e:77:ff:cd:69:b7:
                    1e:a7:ec:6c:38:ed:18:0c:fa:a7:f2:0c:62:c8:1a:
                    4f:72:25:5c:bc:8a:72:03:03:a1:65:0a:2e:c9:24:
                    ba:b0:75:a6:02:ea:36:a9:5c:68:c5:60:f1:1d:6f:
                    ba:a5:4e:47:e5:6d:73:ac:99:82:5a:a2:4d:83:cf:
                    39:ed:aa:0a:40:85:a5:45:de:62:34:00:00:19:37:
                    19:f7:18:af:73:b9:63:09:a3:be:e9:b8:0d:85:1e:
                    b9:8a:e4:95:e1:c2:d1:37:fc:17:76:65:66:29:5c:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:D2:5B:0C:42:C4:FA:99:96:79:A2:5D:8B:6F:32:17:A3:AD:50
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/boPSWwxCxPqZlnmiXYtvMhejrVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:ed:60:34:ff:0d:1e:2b:28:80:03:37:cb:01:66:b9:95:87:
         0e:8d:de:c7:26:31:c6:41:f1:37:03:2f:c8:6a:40:48:f0:4f:
         cb:a6:b7:ed:46:ec:98:5d:25:12:59:84:e0:a9:dc:8a:e0:c5:
         e9:bb:91:70:ec:27:ee:fd:33:60:9e:0c:d5:e9:aa:08:be:8c:
         ef:b2:e9:37:e2:64:c4:37:2c:0d:84:6b:33:ec:94:3e:e9:e6:
         a8:ec:08:c1:e8:ba:3a:03:b5:3a:b3:a1:cd:f8:f1:12:55:d2:
         83:86:f0:0f:68:a0:15:6a:60:a2:91:12:ab:c1:95:2f:80:cf:
         1b:24:0b:85:b6:3f:66:d4:37:fe:07:0e:2e:1e:e2:55:70:d3:
         a1:a2:b6:33:4b:54:25:12:96:fb:96:bb:3c:60:c5:9d:6a:12:
         3d:bb:b8:b4:c5:2a:50:b9:81:a3:5c:c2:85:6c:ea:08:cf:4a:
         e1:65:2a:9b:47:b5:84:65:a1:a7:36:2e:0c:b9:2f:af:0b:30:
         ad:f6:b1:ec:e9:16:7d:b8:89:10:01:8e:cb:2a:32:68:e8:8c:
         01:bf:8d:97:ca:9d:84:a2:ad:da:49:22:97:3a:a3:67:d7:28:
         3d:16:3f:ad:9f:98:c2:cc:60:f1:69:64:ed:cc:0d:71:69:db:
         9c:d0:77:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjESbEjHOVzce61BgBepHf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMwNjE2MTI1OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTgzZDI1YjBjNDJjNGZhOTk5Njc5YTI1ZDhiNmYzMjE3YTNhZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKF3JMUa+jViW5btkACsPdq+AEcT
eYzP0RLNJXwXWhJr6e36ayTEncZ03pNFz144JW0q8tk3wBa0GuROxd2RzJzTvWsr
TKVHSpok2Lyq8uQ74LFbgRNMoq65uMBc/G7yP1IgkPMk2dM72QVEsfCYa3nvWWZf
Y146r5nk7lDx98gK7dGQHFV/LHsAzCn25rcud//Nabcep+xsOO0YDPqn8gxiyBpP
ciVcvIpyAwOhZQouySS6sHWmAuo2qVxoxWDxHW+6pU5H5W1zrJmCWqJNg8857aoK
QIWlRd5iNAAAGTcZ9xivc7ljCaO+6bgNhR65iuSV4cLRN/wXdmVmKVzlBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6D0lsMQsT6mZZ5ol2LbzIXo61QMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvYm9QU1d3eEN4UHFabG5taVhZdHZNaGVqclZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV3AMA0G
CSqGSIb3DQEBCwUAA4IBAQC+7WA0/w0eKyiAAzfLAWa5lYcOjd7HJjHGQfE3Ay/I
akBI8E/LprftRuyYXSUSWYTgqdyK4MXpu5Fw7Cfu/TNgngzV6aoIvozvsuk34mTE
NywNhGsz7JQ+6eao7AjB6Lo6A7U6s6HN+PESVdKDhvAPaKAVamCikRKrwZUvgM8b
JAuFtj9m1Df+Bw4uHuJVcNOhorYzS1QlEpb7lrs8YMWdahI9u7i0xSpQuYGjXMKF
bOoIz0rhZSqbR7WEZaGnNi4MuS+vCzCt9rHs6RZ9uIkQAY7LKjJo6IwBv42Xyp2E
oq3aSSKXOqNn1yg9Fj+tn5jCzGDxaWTtzA1xaduc0Hel
-----END CERTIFICATE-----