Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa
File:                     tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa (raw, json)
Hash identifier:          Z1cuxuFDEVZFWU5JkCHCv88C6yIqCffQQ2BMojQjQ0s=
Subject key identifier:   B5:84:14:64:7A:B3:3B:D7:F5:93:21:5F:04:7A:9D:29:28:99:7E:98
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E4C536C27E4A5C073E7D59C97CD92
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa
Signing time:             Mon 02 Jan 2023 06:14:49 +0000
ROA not before:           Mon 02 Jan 2023 06:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200293
IP address blocks:        2a0c:b641:8e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:4c:53:6c:27:e4:a5:c0:73:e7:d5:9c:97:cd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b58414647ab33bd7f593215f047a9d2928997e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:fc:6d:a6:91:39:cd:5e:f6:ee:d6:ef:ec:
                    cf:98:14:dd:3f:92:71:a6:52:49:6c:c2:0a:76:a0:
                    3f:85:28:b5:2f:a8:06:a7:63:8a:2d:bd:0c:e2:86:
                    c2:76:7b:79:99:87:88:51:bc:8f:68:ca:52:d7:a7:
                    17:ed:1a:9d:09:1c:60:ef:53:2d:b5:2c:73:9b:98:
                    91:7e:13:f0:36:98:25:23:b7:4c:c5:d3:7f:25:c4:
                    4d:30:75:dd:3b:66:b2:1a:08:ee:2d:3f:4e:fb:d7:
                    7b:eb:c0:3d:6c:87:c6:ef:59:1b:ed:66:22:a6:ec:
                    68:f4:72:89:36:3b:01:89:75:11:4b:86:cd:b0:d5:
                    ac:4e:5a:d0:2d:c5:c6:d9:5e:d0:1b:aa:38:1b:72:
                    f8:20:50:f8:22:d1:ce:81:fd:a9:df:fe:8b:b1:65:
                    83:6b:bc:d4:14:4c:6e:60:6d:d4:77:ce:06:f2:5d:
                    8e:1e:f0:1d:0d:1b:2e:d7:c2:e0:62:94:55:7e:2d:
                    32:a5:7f:3d:1d:6c:7b:31:f1:3b:68:84:30:38:31:
                    6c:80:4d:f6:c9:2c:1b:cb:ab:11:a3:19:3b:75:11:
                    32:13:cb:7a:5a:22:93:4e:6a:80:aa:c3:d1:ed:9d:
                    9a:ca:0d:e7:08:47:41:4a:28:6c:cb:30:cc:60:f9:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:84:14:64:7A:B3:3B:D7:F5:93:21:5F:04:7A:9D:29:28:99:7E:98
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:8e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:44:19:d3:54:93:b3:33:dc:8a:07:09:62:3f:dc:3f:7b:
         65:20:31:78:c1:80:fa:90:ee:b1:13:d4:c5:a1:dc:74:78:99:
         e2:09:48:8a:6d:8e:96:53:93:96:c1:87:bf:e9:c3:33:a3:c1:
         2d:77:83:4a:f3:0f:a5:1d:6e:48:24:55:f2:16:91:9e:43:53:
         1a:26:79:63:2b:56:45:2b:a4:46:8b:70:dd:56:d4:93:7b:ce:
         9e:f3:77:5c:e4:8f:ee:7c:3f:c2:ad:2a:59:c6:f5:b0:cf:cf:
         76:dd:83:f8:20:aa:60:35:a1:e9:3e:93:89:c5:4a:65:03:e0:
         e8:d3:f3:0c:23:5a:c8:a6:91:f5:e6:87:f7:39:d9:e0:80:0e:
         3d:9a:93:99:75:78:39:54:fd:b3:96:3b:37:0b:e6:f9:10:1b:
         d1:60:05:ab:11:e1:b8:63:b3:5f:31:c7:0a:73:0b:26:be:31:
         98:aa:f8:66:14:22:f5:e7:e3:c0:e8:24:53:ae:6e:6d:93:09:
         ee:5e:38:8b:b1:53:a2:8b:27:d5:b4:aa:45:80:d3:e1:7a:72:
         07:c9:d1:44:5f:5c:04:7e:d8:b6:f8:ba:1b:76:db:54:bb:c4:
         4f:6a:96:0e:5d:9b:09:5a:b1:2f:d1:2d:48:48:77:53:2b:53:
         21:58:21:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHkxTbCfkpcBz59Wcl82SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTg0MTQ2NDdhYjMzYmQ3ZjU5MzIxNWYwNDdhOWQyOTI4OTk3ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnP8baaROc1e9u7W7+zPmBTdP5Jx
plJJbMIKdqA/hSi1L6gGp2OKLb0M4obCdnt5mYeIUbyPaMpS16cX7RqdCRxg71Mt
tSxzm5iRfhPwNpglI7dMxdN/JcRNMHXdO2ayGgjuLT9O+9d768A9bIfG71kb7WYi
puxo9HKJNjsBiXURS4bNsNWsTlrQLcXG2V7QG6o4G3L4IFD4ItHOgf2p3/6LsWWD
a7zUFExuYG3Ud84G8l2OHvAdDRsu18LgYpRVfi0ypX89HWx7MfE7aIQwODFsgE32
ySwby6sRoxk7dREyE8t6WiKTTmqAqsPR7Z2ayg3nCEdBSihsyzDMYPnHGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLWEFGR6szvX9ZMhXwR6nSkomX6YMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdFlRVVpIcXpPOWYxa3lGZkJIcWRLU2laZnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQjg
MA0GCSqGSIb3DQEBCwUAA4IBAQBkfUQZ01STszPcigcJYj/cP3tlIDF4wYD6kO6x
E9TFodx0eJniCUiKbY6WU5OWwYe/6cMzo8Etd4NK8w+lHW5IJFXyFpGeQ1MaJnlj
K1ZFK6RGi3DdVtSTe86e83dc5I/ufD/CrSpZxvWwz8923YP4IKpgNaHpPpOJxUpl
A+Do0/MMI1rIppH15of3OdnggA49mpOZdXg5VP2zljs3C+b5EBvRYAWrEeG4Y7Nf
MccKcwsmvjGYqvhmFCL15+PA6CRTrm5tkwnuXjiLsVOiiyfVtKpFgNPhenIHydFE
X1wEfti2+LobdttUu8RPapYOXZsJWrEv0S1ISHdTK1MhWCGO
-----END CERTIFICATE-----