Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5XAZyG0aom9_JfnIom8VUFX6IoU.roa
File:                     5XAZyG0aom9_JfnIom8VUFX6IoU.roa (raw, json)
Hash identifier:          5jxxhwxSYE50OgiumQSQP81sRcvGN45pjMDjcQDQH/E=
Subject key identifier:   E5:70:19:C8:6D:1A:A2:6F:7F:25:F9:C8:A2:6F:15:50:55:FA:22:85
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       0185728C907A8A8B1556C35F683142549365
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5XAZyG0aom9_JfnIom8VUFX6IoU.roa
Signing time:             Mon 02 Jan 2023 12:54:52 +0000
ROA not before:           Mon 02 Jan 2023 12:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201248
IP address blocks:        185.80.240.0/22 maxlen: 22
                          2a05:83c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:90:7a:8a:8b:15:56:c3:5f:68:31:42:54:93:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: Jan  2 12:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e57019c86d1aa26f7f25f9c8a26f155055fa2285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:40:01:7f:4e:60:cf:0d:cb:6e:e6:a0:8e:
                    2e:48:e6:d5:56:3e:60:15:d5:26:76:f2:cb:70:f4:
                    dc:7e:c9:a6:72:6f:fe:e9:27:3a:f0:7a:5b:09:68:
                    82:93:4e:0f:8b:82:e0:c3:9d:90:49:d7:a4:5f:af:
                    77:c1:fc:55:e6:8b:5a:da:04:6a:e0:1e:e8:44:27:
                    9e:e9:3e:b1:8a:56:ef:8a:10:10:1e:65:18:d2:12:
                    02:1d:8a:90:fc:db:96:c7:2a:b3:b0:c3:6a:00:a0:
                    02:7a:b8:e0:3b:cf:1e:0c:27:9a:ce:07:65:58:38:
                    e9:6b:19:95:f4:98:25:fd:1a:7e:8e:17:84:70:7a:
                    59:33:70:00:69:3b:6c:48:8c:5a:7c:04:92:70:a2:
                    38:d6:e1:02:94:11:80:65:e2:db:a0:cf:e9:91:76:
                    07:3d:da:91:03:9a:26:d5:8a:3a:ab:5c:5c:59:d8:
                    13:19:f8:d5:c1:25:03:e6:51:37:32:98:e8:67:c8:
                    3b:67:30:e0:44:59:89:63:98:e4:51:21:86:f0:3f:
                    d8:65:44:fe:2d:d6:76:86:c9:b7:35:1e:ee:be:a0:
                    f0:9c:2e:40:47:11:52:ac:5d:51:6e:75:15:24:c4:
                    a4:f9:75:05:dc:d1:e8:63:02:6f:fe:1e:6c:a4:48:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:19:C8:6D:1A:A2:6F:7F:25:F9:C8:A2:6F:15:50:55:FA:22:85
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/5XAZyG0aom9_JfnIom8VUFX6IoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.240.0/22
                IPv6:
                  2a05:83c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:9e:96:c1:dd:29:6d:ca:a8:95:15:1b:f4:01:0b:3c:d0:
         43:d9:79:d2:30:ed:de:e9:b3:b3:e6:d3:fc:a7:2b:57:78:04:
         f3:c1:90:63:83:f0:3e:0c:06:2c:ca:37:fa:16:5f:ff:22:c9:
         b0:50:6c:c3:e2:48:38:ba:2b:b4:59:7c:15:64:ce:af:e9:0f:
         e1:ce:2a:44:d2:2c:0c:1f:98:4c:9a:18:19:73:78:97:8e:a8:
         c5:10:11:d7:e8:d4:f7:94:13:34:92:8e:31:72:4c:8c:6c:75:
         bb:41:ad:a6:71:85:6a:46:8c:71:78:79:0d:1d:1b:72:8c:13:
         6d:d9:a5:87:47:bb:6f:0d:b5:14:67:30:31:5f:07:56:e5:04:
         e7:4c:8d:32:b1:39:c6:23:35:1c:ef:34:5f:96:33:f7:9a:cb:
         cb:05:b8:da:4b:cd:06:ae:23:e8:ed:fe:84:77:2a:84:f3:fb:
         5d:fb:d7:44:d8:49:83:62:30:a0:4e:ee:01:44:b0:cf:a3:31:
         e1:6c:20:24:f2:fc:91:2a:09:b7:15:84:6e:19:b3:b8:b6:0e:
         fc:27:02:7f:b5:d4:d6:f4:56:00:39:e7:45:06:5a:c0:95:ee:
         c9:bf:e8:49:cd:64:c8:53:4b:74:6c:6e:f2:82:06:c5:6e:e9:
         64:32:45:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyjJB6iosVVsNfaDFCVJNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDQyZjFjZmM3NWVkMTEwMDEzODc3OTMwYTI5ZDg2Zjg5
ZWJiYjYwHhcNMjMwMTAyMTI1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTcwMTljODZkMWFhMjZmN2YyNWY5YzhhMjZmMTU1MDU1ZmEyMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1AAX9OYM8Ny27moI4uSObVVj5g
FdUmdvLLcPTcfsmmcm/+6Sc68HpbCWiCk04Pi4Lgw52QSdekX693wfxV5ota2gRq
4B7oRCee6T6xilbvihAQHmUY0hICHYqQ/NuWxyqzsMNqAKACerjgO88eDCeazgdl
WDjpaxmV9Jgl/Rp+jheEcHpZM3AAaTtsSIxafASScKI41uEClBGAZeLboM/pkXYH
PdqRA5om1Yo6q1xcWdgTGfjVwSUD5lE3MpjoZ8g7ZzDgRFmJY5jkUSGG8D/YZUT+
LdZ2hsm3NR7uvqDwnC5ARxFSrF1RbnUVJMSk+XUF3NHoYwJv/h5spEghBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOVwGchtGqJvfyX5yKJvFVBV+iKFMB8GA1UdIwQY
MBaAFJJELxz8de0RABOHeTCinYb4nru2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWIt
MDBmOTZmZmNmNzM0LzEvNVhBWnlHMGFvbTlfSmZuSW9tOFZVRlg2SW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YWY4ODEtYmEwZC00NTFkLWE2OWItMDBmOTZmZmNmNzM0
LzEva2tRdkhQeDE3UkVBRTRkNU1LS2RodmlldTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVDwMA0E
AgACMAcDBQMqBYPAMA0GCSqGSIb3DQEBCwUAA4IBAQAE7Z6Wwd0pbcqolRUb9AEL
PNBD2XnSMO3e6bOz5tP8pytXeATzwZBjg/A+DAYsyjf6Fl//IsmwUGzD4kg4uiu0
WXwVZM6v6Q/hzipE0iwMH5hMmhgZc3iXjqjFEBHX6NT3lBM0ko4xckyMbHW7Qa2m
cYVqRoxxeHkNHRtyjBNt2aWHR7tvDbUUZzAxXwdW5QTnTI0ysTnGIzUc7zRfljP3
msvLBbjaS80GriPo7f6EdyqE8/td+9dE2EmDYjCgTu4BRLDPozHhbCAk8vyRKgm3
FYRuGbO4tg78JwJ/tdTW9FYAOedFBlrAle7Jv+hJzWTIU0t0bG7yggbFbulkMkUj
-----END CERTIFICATE-----