Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8fFmWQkkE4Io6O3OFZswsE5OaZ8.roa
File:                     8fFmWQkkE4Io6O3OFZswsE5OaZ8.roa (raw, json)
Hash identifier:          Oe/vPcvsIHo9sWmo5PfHAHBCTHAgX4TjPdYc3kLNrV8=
Subject key identifier:   F1:F1:66:59:09:24:13:82:28:E8:ED:CE:15:9B:30:B0:4E:4E:69:9F
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E74F9EBCA28BB6EC70D961F4E1512
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8fFmWQkkE4Io6O3OFZswsE5OaZ8.roa
Signing time:             Mon 02 Jan 2023 06:14:59 +0000
ROA not before:           Mon 02 Jan 2023 06:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210360
IP address blocks:        2a0c:b641:2e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:74:f9:eb:ca:28:bb:6e:c7:0d:96:1f:4e:15:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1f166590924138228e8edce159b30b04e4e699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:15:86:43:96:93:4c:d9:9f:ea:2b:b8:9f:
                    3d:16:be:01:51:e5:51:2b:db:36:4e:81:21:6e:fe:
                    e7:9e:d2:66:b1:73:73:c9:55:b3:3f:9c:84:e5:8d:
                    ec:1d:95:2e:ab:c1:6e:2a:e1:0c:d4:db:9b:d6:e3:
                    db:db:50:36:49:da:f8:67:d5:86:11:a5:cd:40:da:
                    e3:58:96:19:61:b1:4c:f8:8e:d9:3e:d3:95:63:4d:
                    40:69:d1:74:d8:1b:cc:60:0a:0a:ce:eb:ae:02:7e:
                    13:d2:78:bb:2d:c2:95:38:08:28:19:24:52:9f:5d:
                    ad:89:8c:1d:06:5b:e4:1d:b9:86:1a:88:a2:bd:fa:
                    95:a1:fd:5b:c0:d7:e4:ee:aa:09:77:d9:c0:a9:5c:
                    72:88:d2:55:00:83:be:fe:bc:9d:68:55:68:aa:de:
                    e1:55:3a:7a:7b:ad:62:22:03:4a:92:ab:94:7a:c6:
                    70:4d:b3:b6:18:0d:84:5a:f9:da:61:31:9e:7c:6e:
                    13:77:67:f6:f2:97:4a:e4:4d:72:b5:b0:40:df:69:
                    ee:41:27:09:5a:74:22:03:5d:90:cf:fb:92:00:1e:
                    a3:20:c7:7f:c2:99:cb:cc:85:22:bc:5f:79:c5:df:
                    33:12:fb:26:a9:e9:75:e0:c1:98:82:f1:f8:f4:18:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:66:59:09:24:13:82:28:E8:ED:CE:15:9B:30:B0:4E:4E:69:9F
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8fFmWQkkE4Io6O3OFZswsE5OaZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:be:20:0b:7e:f5:e1:2b:4e:b6:e0:58:fb:43:cb:61:6e:6b:
         77:bd:c5:94:e5:5d:2a:c0:58:7a:34:25:9c:bb:10:e8:2a:fe:
         90:1f:b0:1d:36:a3:f4:8a:c5:a0:ac:9b:56:94:cf:b8:e2:57:
         6f:41:35:7a:a5:cd:fb:71:5c:65:0f:2d:48:bc:c9:7f:28:0c:
         6b:8d:5d:42:ff:cf:32:63:fd:e0:7f:49:d4:31:b6:76:1c:ac:
         43:9c:b4:86:57:00:49:5d:e6:21:9b:a5:1f:3c:d3:ee:67:94:
         f3:ed:7d:cf:51:65:73:b5:52:79:08:cc:65:ad:0f:3b:83:1e:
         ec:ec:1f:b5:7b:f1:80:9c:b8:dd:6f:d0:db:94:10:f6:4c:5e:
         b2:1f:3a:14:4d:05:a9:07:8a:11:ed:fe:6d:c3:78:78:97:fc:
         65:d4:35:1e:54:4a:20:9c:c4:a5:b6:f9:98:f2:89:c5:8b:67:
         6e:44:f9:09:06:ec:b2:5a:7c:e9:b2:fd:98:de:50:6d:84:ad:
         4d:a1:48:bf:93:36:62:48:05:e4:25:fb:43:0f:91:ea:4e:39:
         da:c6:72:81:af:f6:c3:31:85:ca:22:88:8b:42:3d:eb:e5:27:
         92:23:3c:97:05:51:14:38:3f:0c:f9:b1:41:41:36:0e:f3:60:
         77:6f:3d:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHnT568oou27HDZYfThUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWYxNjY1OTA5MjQxMzgyMjhlOGVkY2UxNTliMzBiMDRlNGU2OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaIVhkOWk0zZn+oruJ89Fr4BUeVR
K9s2ToEhbv7nntJmsXNzyVWzP5yE5Y3sHZUuq8FuKuEM1Nub1uPb21A2Sdr4Z9WG
EaXNQNrjWJYZYbFM+I7ZPtOVY01AadF02BvMYAoKzuuuAn4T0ni7LcKVOAgoGSRS
n12tiYwdBlvkHbmGGoiivfqVof1bwNfk7qoJd9nAqVxyiNJVAIO+/rydaFVoqt7h
VTp6e61iIgNKkquUesZwTbO2GA2EWvnaYTGefG4Td2f28pdK5E1ytbBA32nuQScJ
WnQiA12Qz/uSAB6jIMd/wpnLzIUivF95xd8zEvsmqel14MGYgvH49BjQvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPHxZlkJJBOCKOjtzhWbMLBOTmmfMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvOGZGbVdRa2tFNElvNk8zT0Zac3dzRTVPYVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQLg
MA0GCSqGSIb3DQEBCwUAA4IBAQAyviALfvXhK0624Fj7Q8thbmt3vcWU5V0qwFh6
NCWcuxDoKv6QH7AdNqP0isWgrJtWlM+44ldvQTV6pc37cVxlDy1IvMl/KAxrjV1C
/88yY/3gf0nUMbZ2HKxDnLSGVwBJXeYhm6UfPNPuZ5Tz7X3PUWVztVJ5CMxlrQ87
gx7s7B+1e/GAnLjdb9DblBD2TF6yHzoUTQWpB4oR7f5tw3h4l/xl1DUeVEognMSl
tvmY8onFi2duRPkJBuyyWnzpsv2Y3lBthK1NoUi/kzZiSAXkJftDD5HqTjnaxnKB
r/bDMYXKIoiLQj3r5SeSIzyXBVEUOD8M+bFBQTYO82B3bz1H
-----END CERTIFICATE-----