Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa
File:                     5FVTc4atg0dv7XrtIR86xDnR9Lo.roa (raw, json)
Hash identifier:          ty+vLbWhi6nupMBrUzrP8OunMG+0JEmeXpdFB7oZGy4=
Subject key identifier:   E4:55:53:73:86:AD:83:47:6F:ED:7A:ED:21:1F:3A:C4:39:D1:F4:BA
Certificate issuer:       /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial:       018570F0A7E2FEFB1E5357B9886E8EEB27A7
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa
Signing time:             Mon 02 Jan 2023 05:24:57 +0000
ROA not before:           Mon 02 Jan 2023 05:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211501
IP address blocks:        194.26.238.0/24 maxlen: 24
                          2a11:75c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:a7:e2:fe:fb:1e:53:57:b9:88:6e:8e:eb:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
        Validity
            Not Before: Jan  2 05:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e455537386ad83476fed7aed211f3ac439d1f4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:a3:64:e9:25:0c:44:14:37:7f:ca:d6:4c:
                    ba:a2:d0:bb:65:39:14:45:1f:6c:88:b4:32:a9:37:
                    50:25:42:0d:d5:4f:38:9a:10:4d:57:4f:7c:b2:85:
                    d5:41:e3:d0:43:3e:74:5b:a8:70:46:26:2a:0c:df:
                    6d:54:07:09:b7:37:58:4d:e3:69:bb:91:fa:6c:f2:
                    ac:ca:ac:ef:77:28:2c:2e:4d:ca:9e:fc:85:ac:e1:
                    5f:0b:79:b3:af:05:91:d0:4a:f1:9f:ad:b2:e1:43:
                    76:7e:22:09:3d:96:1d:7b:17:ce:c2:ff:5e:2a:0b:
                    d2:fe:0d:66:b2:8a:04:54:ca:f8:c9:7b:55:a5:c4:
                    c6:fa:7e:2f:d6:6d:4a:2d:a3:76:61:d5:5c:5f:17:
                    f1:2b:88:fb:63:58:17:ea:58:71:40:ae:57:40:77:
                    61:f9:0c:0d:03:58:31:42:b1:e5:5a:60:de:cf:d4:
                    46:37:f6:4a:17:d2:c5:6f:bd:39:81:0a:a0:9d:be:
                    11:8c:c9:7d:e9:84:af:69:b4:a8:d9:be:af:ca:0c:
                    ae:80:da:4e:24:b1:45:46:f5:2e:bf:95:72:0f:1c:
                    f1:82:8d:41:8a:18:57:1c:c0:6c:a2:1a:f8:4e:68:
                    d4:2c:69:e8:e7:03:d1:2e:6e:86:c0:44:34:c8:94:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:53:73:86:AD:83:47:6F:ED:7A:ED:21:1F:3A:C4:39:D1:F4:BA
            X509v3 Authority Key Identifier:
                keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/5FVTc4atg0dv7XrtIR86xDnR9Lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.238.0/24
                IPv6:
                  2a11:75c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:45:ef:93:52:38:a4:93:ea:71:91:78:30:08:90:02:f4:
         6d:fb:a0:c6:98:d2:e0:af:1c:07:60:f8:c9:50:05:dd:cc:87:
         61:ed:6a:73:04:18:78:df:ae:5b:f4:ae:5d:29:d7:b6:1a:8c:
         0e:06:fb:68:3f:12:72:c5:3b:d4:96:ca:7e:c9:b4:56:40:99:
         5b:fb:cd:e9:64:ee:21:c8:2b:2b:56:5f:b8:3b:e2:60:b9:82:
         ca:b3:f8:bb:56:36:d4:cb:39:be:bc:a3:4e:51:98:4c:78:b2:
         61:e3:4b:d3:bb:e1:e3:a1:6a:12:82:ab:12:79:f7:34:8e:58:
         f6:fc:e8:bd:5a:bc:f6:a1:f2:4d:aa:28:34:72:8d:ca:53:a9:
         ec:bd:eb:5c:33:20:81:da:7e:69:2f:08:f8:1b:98:f9:e2:ee:
         bc:8b:f7:9d:de:15:36:62:35:b3:58:46:cc:04:92:8b:a1:7e:
         03:46:db:40:d3:9b:60:5a:7c:8a:05:93:bc:72:a2:cd:eb:c3:
         56:7e:74:c0:65:66:30:89:4c:40:49:a8:2e:82:31:7c:cc:7f:
         2b:95:03:45:4e:74:d8:8e:3c:4d:57:10:7b:ef:56:83:26:ef:
         1e:93:6b:43:73:bb:59:44:8b:2e:db:82:f6:1d:92:f9:94:44:
         33:5d:e8:a7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVw8Kfi/vseU1e5iG6O6yenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjMwMTAyMDUyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDU1NTM3Mzg2YWQ4MzQ3NmZlZDdhZWQyMTFmM2FjNDM5ZDFmNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLyjZOklDEQUN3/K1ky6otC7ZTkU
RR9siLQyqTdQJUIN1U84mhBNV098soXVQePQQz50W6hwRiYqDN9tVAcJtzdYTeNp
u5H6bPKsyqzvdygsLk3KnvyFrOFfC3mzrwWR0Erxn62y4UN2fiIJPZYdexfOwv9e
KgvS/g1msooEVMr4yXtVpcTG+n4v1m1KLaN2YdVcXxfxK4j7Y1gX6lhxQK5XQHdh
+QwNA1gxQrHlWmDez9RGN/ZKF9LFb705gQqgnb4RjMl96YSvabSo2b6vygyugNpO
JLFFRvUuv5VyDxzxgo1BihhXHMBsohr4TmjULGno5wPRLm6GwEQ0yJQlFQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFORVU3OGrYNHb+167SEfOsQ50fS6MB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvNUZWVGM0YXRnMGR2N1hydElSODZ4RG5SOUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwhruMA0E
AgACMAcDBQMqEXXAMA0GCSqGSIb3DQEBCwUAA4IBAQAIS0Xvk1I4pJPqcZF4MAiQ
AvRt+6DGmNLgrxwHYPjJUAXdzIdh7WpzBBh4365b9K5dKde2GowOBvtoPxJyxTvU
lsp+ybRWQJlb+83pZO4hyCsrVl+4O+JguYLKs/i7VjbUyzm+vKNOUZhMeLJh40vT
u+HjoWoSgqsSefc0jlj2/Oi9Wrz2ofJNqig0co3KU6nsvetcMyCB2n5pLwj4G5j5
4u68i/ed3hU2YjWzWEbMBJKLoX4DRttA05tgWnyKBZO8cqLN68NWfnTAZWYwiUxA
SagugjF8zH8rlQNFTnTYjjxNVxB771aDJu8ek2tDc7tZRIsu24L2HZL5lEQzXein
-----END CERTIFICATE-----