Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/cRo2jX90hLlmt4y-c2fcli00StE.roa
File:                     cRo2jX90hLlmt4y-c2fcli00StE.roa (raw, json)
Hash identifier:          eumuVlgd9JAq0NVPIQG9RKSxET+cNF4KWjXCxQLsExM=
Subject key identifier:   71:1A:36:8D:7F:74:84:B9:66:B7:8C:BE:73:67:DC:96:2D:34:4A:D1
Certificate issuer:       /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial:       0186A2EDA7D8C2AE97627599166C9AE9D6D3
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/cRo2jX90hLlmt4y-c2fcli00StE.roa
Signing time:             Thu 02 Mar 2023 15:25:29 +0000
ROA not before:           Thu 02 Mar 2023 15:25:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49505
IP address blocks:        2001:67c:12d4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a2:ed:a7:d8:c2:ae:97:62:75:99:16:6c:9a:e9:d6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
        Validity
            Not Before: Mar  2 15:25:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=711a368d7f7484b966b78cbe7367dc962d344ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:06:93:4e:3f:57:8f:fb:92:d8:d5:4f:e8:
                    ad:8d:88:d5:de:b4:7b:4e:21:3b:d8:f2:fb:ef:06:
                    f5:d3:c8:b7:a9:85:79:f1:cb:8d:7c:ef:79:af:90:
                    51:b7:e9:b0:26:33:81:4b:1d:28:2e:45:b8:7f:e2:
                    f7:b8:59:22:19:bb:b9:0e:a6:25:37:c4:d7:bf:2f:
                    28:05:1c:5b:76:20:6b:34:74:c3:26:1b:c0:7d:5b:
                    d2:05:64:a5:f3:11:5a:b9:c3:f7:38:56:c6:23:13:
                    21:f6:f6:fd:75:e5:e3:14:c5:42:5e:52:87:0a:db:
                    32:bf:82:bd:77:76:7d:f0:fc:ad:8e:62:0a:83:83:
                    71:d4:88:7c:5e:8d:18:f7:69:d2:85:d6:27:07:b0:
                    53:60:75:82:38:0d:4a:0b:5f:38:4d:4d:18:9d:5f:
                    f8:68:62:36:15:d4:81:85:e8:4d:01:9b:8f:56:e7:
                    31:4c:c8:0c:eb:d2:61:d7:92:e0:01:83:23:30:ce:
                    1f:c9:bf:6e:c4:40:fe:9c:23:54:4d:32:79:e5:b5:
                    17:df:3d:2e:54:f0:f0:77:70:f0:d2:f3:06:f9:72:
                    d0:74:ce:c3:30:5c:22:28:d4:f2:61:1e:46:c2:8d:
                    4f:83:bb:18:e7:d4:e6:4c:bd:aa:3e:cd:1b:85:21:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:36:8D:7F:74:84:B9:66:B7:8C:BE:73:67:DC:96:2D:34:4A:D1
            X509v3 Authority Key Identifier:
                keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/cRo2jX90hLlmt4y-c2fcli00StE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:12d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:fd:2d:b4:a2:05:1e:ab:c3:61:59:07:65:a8:7e:41:fa:
         5a:db:99:e2:a8:85:0e:ed:f7:8d:02:8b:29:78:9c:76:79:27:
         3b:0d:a6:f0:2b:c2:9e:f2:3e:14:ab:31:0d:fd:ff:be:9f:1a:
         93:36:22:6b:cd:3f:bd:cb:6e:01:b0:81:43:14:4f:90:df:4b:
         70:24:ac:11:25:f2:c1:51:05:a3:50:05:6c:33:08:a4:89:cf:
         d9:cb:57:bf:91:14:c9:47:74:cf:4f:1d:20:2f:99:e7:d0:f5:
         43:17:64:4e:97:a8:06:96:1f:ce:35:a5:f5:c8:e2:5a:ad:e2:
         5e:2e:f0:25:fc:4b:45:fb:3a:83:9c:57:67:74:9f:67:9a:13:
         37:e9:c0:7f:8f:a0:8a:a9:e8:76:b4:00:b7:62:4d:8a:63:9b:
         cd:55:73:70:ab:61:90:c8:1a:bc:02:9b:3c:13:28:68:c0:87:
         f3:75:af:b7:c9:ac:5f:28:68:27:99:be:a4:ad:39:fd:a2:c0:
         9c:96:63:f2:68:75:3f:3d:66:88:23:7c:4f:b5:fb:10:5d:eb:
         c8:9b:4e:77:2c:2f:10:df:74:0e:35:1f:4a:93:5b:a2:41:18:
         63:01:8d:1b:7f:14:2b:f2:99:2b:a5:63:ff:e6:8f:8f:ba:61:
         c1:0d:75:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYai7afYwq6XYnWZFmya6dbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl
NmE1YmUwHhcNMjMwMzAyMTUyNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTFhMzY4ZDdmNzQ4NGI5NjZiNzhjYmU3MzY3ZGM5NjJkMzQ0YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo8Gk04/V4/7ktjVT+itjYjV3rR7
TiE72PL77wb108i3qYV58cuNfO95r5BRt+mwJjOBSx0oLkW4f+L3uFkiGbu5DqYl
N8TXvy8oBRxbdiBrNHTDJhvAfVvSBWSl8xFaucP3OFbGIxMh9vb9deXjFMVCXlKH
Ctsyv4K9d3Z98PytjmIKg4Nx1Ih8Xo0Y92nShdYnB7BTYHWCOA1KC184TU0YnV/4
aGI2FdSBhehNAZuPVucxTMgM69Jh15LgAYMjMM4fyb9uxED+nCNUTTJ55bUX3z0u
VPDwd3Dw0vMG+XLQdM7DMFwiKNTyYR5Gwo1Pg7sY59TmTL2qPs0bhSE8zQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHEaNo1/dIS5ZreMvnNn3JYtNErRMB8GA1UdIwQY
MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt
YmEzOTQ3YzliMjJiLzEvY1JvMmpYOTBoTGxtdDR5LWMyZmNsaTAwU3RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi
LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBLU
MA0GCSqGSIb3DQEBCwUAA4IBAQAu4v0ttKIFHqvDYVkHZah+Qfpa25niqIUO7feN
AospeJx2eSc7DabwK8Ke8j4UqzEN/f++nxqTNiJrzT+9y24BsIFDFE+Q30twJKwR
JfLBUQWjUAVsMwikic/Zy1e/kRTJR3TPTx0gL5nn0PVDF2ROl6gGlh/ONaX1yOJa
reJeLvAl/EtF+zqDnFdndJ9nmhM36cB/j6CKqeh2tAC3Yk2KY5vNVXNwq2GQyBq8
Aps8EyhowIfzda+3yaxfKGgnmb6krTn9osCclmPyaHU/PWaII3xPtfsQXevIm053
LC8Q33QONR9Kk1uiQRhjAY0bfxQr8pkrpWP/5o+PumHBDXUT
-----END CERTIFICATE-----