Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/1-mM7dACQQE8Gkaz-G3e89Ew5NE8.roa
File:                     1-mM7dACQQE8Gkaz-G3e89Ew5NE8.roa (raw, json)
Hash identifier:          KccyuozNvnR25X09i2K7B+9BlvLiNvDBT6Qj1rk8MU4=
Subject key identifier:   FA:63:3B:74:00:90:40:4F:06:91:AC:FE:1B:77:BC:F4:4C:39:34:4F
Certificate issuer:       /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial:       01857368538C4D8FF8E266E1319B61EE8E4F
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/1-mM7dACQQE8Gkaz-G3e89Ew5NE8.roa
Signing time:             Mon 02 Jan 2023 16:54:54 +0000
ROA not before:           Mon 02 Jan 2023 16:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60167
IP address blocks:        185.192.48.0/22 maxlen: 22
                          2a0a:22c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:68:53:8c:4d:8f:f8:e2:66:e1:31:9b:61:ee:8e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
        Validity
            Not Before: Jan  2 16:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa633b740090404f0691acfe1b77bcf44c39344f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:55:34:56:db:d9:d7:ba:76:6a:47:e7:55:
                    61:9c:1f:a8:86:ea:9c:6a:72:0a:ac:86:f8:fb:20:
                    76:52:7d:a1:46:e8:93:a7:ca:df:e2:4d:1c:a9:35:
                    30:58:91:15:8e:72:3a:d6:e1:bb:62:71:12:69:5f:
                    9e:99:e7:92:58:9b:1f:e1:4d:d6:f7:f4:1c:ea:17:
                    f3:bd:e8:2d:ff:4c:9d:d6:a9:dc:88:26:9c:0b:43:
                    60:c5:e4:1f:b5:fa:75:44:99:8b:bc:b7:f0:1b:a7:
                    8b:28:48:01:04:a6:18:ed:37:d8:d8:5c:4f:9b:29:
                    36:ee:2c:a4:7e:da:51:51:7e:5d:c2:a7:c7:13:8f:
                    ff:49:30:20:a0:b7:17:60:97:b6:e5:b7:00:e2:0a:
                    97:e6:b0:47:d8:53:87:07:87:ae:b8:b1:1d:de:00:
                    22:aa:0a:83:6a:c2:b8:64:70:10:a9:c5:7d:e5:8b:
                    24:bf:6a:60:e6:17:06:99:4c:84:95:97:7c:57:aa:
                    d7:34:5e:72:12:f6:18:b6:06:03:42:82:d8:af:69:
                    ef:37:c3:5a:53:8e:99:89:66:71:2d:5a:09:21:48:
                    c4:64:4e:7d:18:e7:6e:e2:f0:f9:c1:b3:eb:ee:43:
                    53:f6:86:ee:cc:8c:15:9f:5b:96:3b:e6:c0:8a:f0:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:3B:74:00:90:40:4F:06:91:AC:FE:1B:77:BC:F4:4C:39:34:4F
            X509v3 Authority Key Identifier:
                keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/1-mM7dACQQE8Gkaz-G3e89Ew5NE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.48.0/22
                IPv6:
                  2a0a:22c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:b9:04:f9:0a:24:3e:fa:07:77:e2:0a:36:19:f6:aa:ae:
         7e:e8:bb:07:ce:c9:17:27:95:bb:df:ef:31:e0:3a:c0:b6:3e:
         f6:4a:62:d3:4a:f7:52:ec:47:5a:14:e0:42:23:4e:46:16:e0:
         30:20:a7:3e:64:33:8f:53:68:34:15:2c:86:2e:bf:ff:d5:06:
         ac:a0:fe:4d:16:2f:7a:90:4e:d7:53:ba:0d:0d:69:88:d4:5b:
         7c:5d:96:09:f7:15:0d:dc:ac:07:fa:a0:1c:e6:e2:15:fd:b5:
         a2:0e:da:bd:9d:3b:33:0f:4d:12:7f:e2:35:8b:c9:6d:95:22:
         5d:f1:37:af:9d:e1:8e:b1:16:96:b8:54:c2:70:5d:8c:4a:74:
         1c:bf:18:dc:a2:76:27:66:ce:06:cf:45:d2:66:cb:36:dc:f2:
         7b:cd:51:2b:99:96:46:c6:0e:26:92:d5:ed:01:03:7c:4a:07:
         e4:de:7a:fc:da:f8:c9:70:a5:30:9a:82:55:1e:41:cc:d2:a5:
         20:20:cc:bd:5c:95:7b:ab:cb:4e:e5:f4:b2:8c:41:10:6c:b3:
         c5:7a:70:74:71:51:56:87:c4:06:31:cf:c1:88:9f:53:c5:ee:
         e2:d5:05:eb:f5:be:0f:1b:50:d6:aa:8d:08:56:d2:6f:68:a4:
         81:62:25:76
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYVzaFOMTY/44mbhMZth7o5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjMwMTAyMTY1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTYzM2I3NDAwOTA0MDRmMDY5MWFjZmUxYjc3YmNmNDRjMzkzNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArolVNFbb2de6dmpH51VhnB+ohuqc
anIKrIb4+yB2Un2hRuiTp8rf4k0cqTUwWJEVjnI61uG7YnESaV+emeeSWJsf4U3W
9/Qc6hfzvegt/0yd1qnciCacC0NgxeQftfp1RJmLvLfwG6eLKEgBBKYY7TfY2FxP
myk27iykftpRUX5dwqfHE4//STAgoLcXYJe25bcA4gqX5rBH2FOHB4euuLEd3gAi
qgqDasK4ZHAQqcV95Yskv2pg5hcGmUyElZd8V6rXNF5yEvYYtgYDQoLYr2nvN8Na
U46ZiWZxLVoJIUjEZE59GOdu4vD5wbPr7kNT9obuzIwVn1uWO+bAivDkxQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPpjO3QAkEBPBpGs/ht3vPRMOTRPMB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvMS1tTTdkQUNRUUU4R2thei1HM2U4OUV3NU5FOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzEvMWYwMWUzLTc3ZDMtNGNmNy1hZWE4LTEyMmZlZWNkZTNl
YS8xLzVfMlpDZEZycnhITGxZeU5KMDRrN0psSFFpOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnAMDAN
BAIAAjAHAwUDKgoiwDANBgkqhkiG9w0BAQsFAAOCAQEAbfS5BPkKJD76B3fiCjYZ
9qqufui7B87JFyeVu9/vMeA6wLY+9kpi00r3UuxHWhTgQiNORhbgMCCnPmQzj1No
NBUshi6//9UGrKD+TRYvepBO11O6DQ1piNRbfF2WCfcVDdysB/qgHObiFf21og7a
vZ07Mw9NEn/iNYvJbZUiXfE3r53hjrEWlrhUwnBdjEp0HL8Y3KJ2J2bOBs9F0mbL
Ntzye81RK5mWRsYOJpLV7QEDfEoH5N56/Nr4yXClMJqCVR5BzNKlICDMvVyVe6vL
TuX0soxBEGyzxXpwdHFRVofEBjHPwYifU8Xu4tUF6/W+DxtQ1qqNCFbSb2ikgWIl
dg==
-----END CERTIFICATE-----