Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/sgO6myJFXuLpAMimbRjwxUJuMQQ.roa
File:                     sgO6myJFXuLpAMimbRjwxUJuMQQ.roa (raw, json)
Hash identifier:          PY8v5tKvvrBUNlWJMJ3+5fzzjKO+fEhlYRo4f4zURDA=
Subject key identifier:   B2:03:BA:9B:22:45:5E:E2:E9:00:C8:A6:6D:18:F0:C5:42:6E:31:04
Certificate issuer:       /CN=e02a93acae2cea321b7caa4ec551675ab9907b56
Certificate serial:       0185A63452A74850643FF2936B4DF99F2F5B
Authority key identifier: E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/sgO6myJFXuLpAMimbRjwxUJuMQQ.roa
Signing time:             Thu 12 Jan 2023 13:38:44 +0000
ROA not before:           Thu 12 Jan 2023 13:38:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16247
IP address blocks:        2a12:be00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a6:34:52:a7:48:50:64:3f:f2:93:6b:4d:f9:9f:2f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02a93acae2cea321b7caa4ec551675ab9907b56
        Validity
            Not Before: Jan 12 13:38:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b203ba9b22455ee2e900c8a66d18f0c5426e3104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:60:75:a9:a5:16:82:fc:32:2c:ff:e8:a2:
                    89:f6:c5:a8:11:e3:d2:87:31:04:e3:99:fb:30:6d:
                    4e:41:68:c6:79:5b:0a:e6:d3:8e:ea:bb:f6:2d:0a:
                    0e:8d:bc:f5:64:32:98:a4:00:f3:71:e4:af:81:24:
                    c3:19:a2:78:95:9e:86:83:37:5e:1d:8d:4f:7c:68:
                    b6:92:9e:e7:40:75:3f:04:ad:76:ef:03:4f:0c:84:
                    a4:30:1d:3d:ab:50:39:7a:65:88:6f:f2:d9:27:2f:
                    31:eb:4c:6b:18:11:6c:0a:80:ba:9e:5c:ed:e1:f4:
                    57:a8:1c:df:25:8a:69:fe:c5:7f:b5:1c:d0:5d:86:
                    6b:33:9f:f4:9b:86:08:5c:e5:2b:72:9b:28:44:a6:
                    3b:3a:82:32:04:2c:46:0e:72:fe:12:3f:b3:ff:5b:
                    3d:3a:b1:83:5b:f1:56:b5:8e:70:94:5f:99:ed:76:
                    35:84:6b:5c:e4:34:e0:b7:5d:3a:cc:09:ca:c9:f6:
                    8d:53:2b:77:0e:e2:c6:f3:a0:b8:97:5b:0a:e7:33:
                    90:33:90:72:10:de:2c:3a:33:7e:22:d7:51:7f:a1:
                    51:d8:8d:c3:c6:ef:3b:e6:f8:2b:81:f8:c7:f3:0e:
                    f7:0b:77:79:cf:d2:c0:0c:7b:4e:bb:d5:de:bd:10:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:BA:9B:22:45:5E:E2:E9:00:C8:A6:6D:18:F0:C5:42:6E:31:04
            X509v3 Authority Key Identifier:
                keyid:E0:2A:93:AC:AE:2C:EA:32:1B:7C:AA:4E:C5:51:67:5A:B9:90:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/sgO6myJFXuLpAMimbRjwxUJuMQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/66b9ba-e96d-4028-b13a-2b8252a917f2/1/4CqTrK4s6jIbfKpOxVFnWrmQe1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:be00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:3e:6a:03:d8:87:bf:4d:4c:39:0a:71:6f:f1:d1:fb:91:
         2c:6a:8f:84:64:6a:8d:b0:b4:32:dc:85:06:f7:28:8a:1d:a5:
         88:86:9b:54:3a:62:bf:65:a8:9a:f6:1e:05:88:2e:dd:72:df:
         38:2a:5e:88:d2:46:5e:2b:ba:cc:36:7b:2c:ae:9c:0e:2f:dc:
         bd:c6:90:3c:71:4e:7a:cf:c0:3f:bc:71:9a:f4:32:f5:3e:ef:
         33:37:ab:02:c7:9a:0b:8f:d9:f3:ce:50:76:47:ec:1e:b1:16:
         a0:4b:b3:5b:2b:5d:96:60:fe:d3:fb:e5:70:e5:2f:df:7c:d9:
         31:c2:7c:ff:2b:b1:4b:13:30:9d:42:1b:28:b1:7f:4d:58:e0:
         cd:80:15:db:e8:71:1a:46:51:e8:d1:b6:f7:6f:54:d0:18:a5:
         ad:fd:72:74:53:6c:2e:82:81:f5:b9:d9:65:64:07:fb:a8:c8:
         13:dc:ad:4b:5a:fa:19:eb:f3:14:3f:9f:7f:1b:65:d4:d1:2a:
         1b:a6:90:32:7d:a9:3b:e5:b7:22:7c:80:40:37:b1:63:11:4c:
         21:4a:b0:b1:2e:d5:fa:95:f4:a5:a9:61:68:89:48:5c:7d:2e:
         6d:5d:0c:84:6a:5a:14:4d:7a:87:b4:04:d9:d9:27:9b:b8:30:
         06:45:53:3a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYWmNFKnSFBkP/KTa035ny9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmE5M2FjYWUyY2VhMzIxYjdjYWE0ZWM1NTE2NzVhYjk5
MDdiNTYwHhcNMjMwMTEyMTMzODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjAzYmE5YjIyNDU1ZWUyZTkwMGM4YTY2ZDE4ZjBjNTQyNmUzMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMtgdamlFoL8Miz/6KKJ9sWoEePS
hzEE45n7MG1OQWjGeVsK5tOO6rv2LQoOjbz1ZDKYpADzceSvgSTDGaJ4lZ6Ggzde
HY1PfGi2kp7nQHU/BK127wNPDISkMB09q1A5emWIb/LZJy8x60xrGBFsCoC6nlzt
4fRXqBzfJYpp/sV/tRzQXYZrM5/0m4YIXOUrcpsoRKY7OoIyBCxGDnL+Ej+z/1s9
OrGDW/FWtY5wlF+Z7XY1hGtc5DTgt106zAnKyfaNUyt3DuLG86C4l1sK5zOQM5By
EN4sOjN+ItdRf6FR2I3Dxu875vgrgfjH8w73C3d5z9LADHtOu9XevRB4hwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLIDupsiRV7i6QDIpm0Y8MVCbjEEMB8GA1UdIwQY
MBaAFOAqk6yuLOoyG3yqTsVRZ1q5kHtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENxVHJLNHM2akliZktwT3hWRm5Xcm1RZTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82NmI5YmEtZTk2ZC00MDI4LWIxM2Et
MmI4MjUyYTkxN2YyLzEvc2dPNm15SkZYdUxwQU1pbWJSand4VUp1TVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82NmI5YmEtZTk2ZC00MDI4LWIxM2EtMmI4MjUyYTkxN2Yy
LzEvNENxVHJLNHM2akliZktwT3hWRm5Xcm1RZTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhK+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAXq4+agPYh79NTDkKcW/x0fuRLGqPhGRqjbC0MtyF
Bvcoih2liIabVDpiv2WomvYeBYgu3XLfOCpeiNJGXiu6zDZ7LK6cDi/cvcaQPHFO
es/AP7xxmvQy9T7vMzerAseaC4/Z885QdkfsHrEWoEuzWytdlmD+0/vlcOUv33zZ
McJ8/yuxSxMwnUIbKLF/TVjgzYAV2+hxGkZR6NG2929U0Bilrf1ydFNsLoKB9bnZ
ZWQH+6jIE9ytS1r6GevzFD+ffxtl1NEqG6aQMn2pO+W3InyAQDexYxFMIUqwsS7V
+pX0palhaIlIXH0ubV0MhGpaFE16h7QE2dknm7gwBkVTOg==
-----END CERTIFICATE-----