Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa
File:                     9l-07lAEU29pOAaOmKVyvAKfaXE.roa (raw, json)
Hash identifier:          McoRPkOHsJWTPzpYUBNwf3pabL4I8AuMky7wDe4/88w=
Subject key identifier:   F6:5F:B4:EE:50:04:53:6F:69:38:06:8E:98:A5:72:BC:02:9F:69:71
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       01856D661AA217071002EDFC23539A11B040
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa
Signing time:             Sun 01 Jan 2023 12:54:45 +0000
ROA not before:           Sun 01 Jan 2023 12:54:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198171
IP address blocks:        185.102.76.0/22 maxlen: 22
                          2a00:ca80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:1a:a2:17:07:10:02:ed:fc:23:53:9a:11:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Jan  1 12:54:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f65fb4ee5004536f6938068e98a572bc029f6971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:d9:74:b8:f6:35:31:9f:91:6c:9c:b4:f7:
                    78:22:13:53:e5:c3:bc:d0:b8:b0:52:72:5e:28:6f:
                    46:fb:24:d4:1d:ec:75:e7:c3:c7:8b:1d:21:2f:7b:
                    a9:24:55:73:87:86:e2:ac:af:01:db:87:61:49:85:
                    ac:19:35:78:a6:3e:55:45:8a:99:85:c3:44:a1:28:
                    59:8d:58:44:c9:b5:33:cc:33:51:73:21:34:b4:a8:
                    48:79:01:49:f5:a5:2f:8b:30:f2:4b:6b:6d:ac:7b:
                    9a:ce:7e:9a:15:a9:e6:db:4c:2d:d4:e7:b0:ba:72:
                    f7:44:04:fe:7b:79:46:5b:4a:5c:b1:37:55:2b:f1:
                    e5:22:86:f7:8a:ef:a4:3b:a8:7a:6c:f8:a8:a4:22:
                    20:b9:d7:df:af:1d:02:9a:b9:ee:09:5c:ef:f2:2e:
                    d8:04:fd:11:30:a0:7c:0a:fc:73:4c:19:2c:a3:a4:
                    a8:f8:9f:a3:3a:96:61:a0:a0:dd:f4:89:01:26:5e:
                    ef:d8:79:4f:dd:74:af:33:bb:c9:9c:5b:d8:60:91:
                    d6:5b:85:60:9a:c9:ec:5f:bc:f3:c4:08:4f:a5:65:
                    d7:be:1f:6b:48:ba:b8:bf:3f:58:b4:c4:ec:86:45:
                    97:c0:65:bb:1b:c2:c8:7f:61:97:36:90:81:2c:ea:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:B4:EE:50:04:53:6F:69:38:06:8E:98:A5:72:BC:02:9F:69:71
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/9l-07lAEU29pOAaOmKVyvAKfaXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.102.76.0/22
                IPv6:
                  2a00:ca80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:b6:90:0f:5e:e5:53:10:71:fa:46:51:b5:a5:f3:55:5a:c1:
         f0:84:73:17:47:20:62:8c:0f:c9:16:b5:f2:6f:c7:b4:7d:2f:
         b2:aa:d5:fb:c4:60:12:18:f7:74:05:5f:79:a9:94:bc:d5:68:
         10:74:46:8f:5a:50:a5:41:d0:a5:3d:a3:7d:c7:02:35:cc:28:
         fb:2d:db:0f:c5:0f:26:0d:42:b2:6f:d9:3d:2f:82:65:33:41:
         37:c5:38:31:2c:22:f1:ad:f7:07:f4:d6:28:82:5a:f9:df:04:
         30:81:7b:5b:39:0b:96:1d:4e:af:86:15:4c:70:16:04:79:df:
         33:df:42:8e:7a:3d:8d:69:b1:20:56:1b:55:16:89:6a:b6:98:
         20:0b:e0:20:26:1e:20:e5:44:6c:ee:19:e7:04:68:fe:f3:66:
         6f:b6:a1:3a:bd:d7:0c:2d:a0:f9:7c:ea:a1:bb:39:47:c3:ac:
         77:7a:28:60:03:38:b5:ce:0c:04:67:c8:11:a3:7f:1a:58:f5:
         22:8b:33:07:6c:6e:4a:8c:d9:09:8f:31:98:ea:3b:cc:33:e1:
         5a:37:a2:1b:10:39:55:c4:8a:d5:54:0d:f8:a5:8c:09:ef:99:
         0d:a6:56:d7:d8:ca:48:dd:af:e6:ff:75:b5:13:63:24:b5:ce:
         57:ec:a7:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtZhqiFwcQAu38I1OaEbBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjMwMTAxMTI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjVmYjRlZTUwMDQ1MzZmNjkzODA2OGU5OGE1NzJiYzAyOWY2OTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswzZdLj2NTGfkWyctPd4IhNT5cO8
0LiwUnJeKG9G+yTUHex158PHix0hL3upJFVzh4birK8B24dhSYWsGTV4pj5VRYqZ
hcNEoShZjVhEybUzzDNRcyE0tKhIeQFJ9aUvizDyS2ttrHuazn6aFanm20wt1Oew
unL3RAT+e3lGW0pcsTdVK/HlIob3iu+kO6h6bPiopCIgudffrx0CmrnuCVzv8i7Y
BP0RMKB8CvxzTBkso6So+J+jOpZhoKDd9IkBJl7v2HlP3XSvM7vJnFvYYJHWW4Vg
msnsX7zzxAhPpWXXvh9rSLq4vz9YtMTshkWXwGW7G8LIf2GXNpCBLOrhUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPZftO5QBFNvaTgGjpilcrwCn2lxMB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvOWwtMDdsQUVVMjlwT0FhT21LVnl2QUtmYVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWZMMA0E
AgACMAcDBQAqAMqAMA0GCSqGSIb3DQEBCwUAA4IBAQDEtpAPXuVTEHH6RlG1pfNV
WsHwhHMXRyBijA/JFrXyb8e0fS+yqtX7xGASGPd0BV95qZS81WgQdEaPWlClQdCl
PaN9xwI1zCj7LdsPxQ8mDUKyb9k9L4JlM0E3xTgxLCLxrfcH9NYoglr53wQwgXtb
OQuWHU6vhhVMcBYEed8z30KOej2NabEgVhtVFolqtpggC+AgJh4g5URs7hnnBGj+
82ZvtqE6vdcMLaD5fOqhuzlHw6x3eihgAzi1zgwEZ8gRo38aWPUiizMHbG5KjNkJ
jzGY6jvMM+FaN6IbEDlVxIrVVA34pYwJ75kNplbX2MpI3a/m/3W1E2Mktc5X7Kfs
-----END CERTIFICATE-----