Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/uUzCBZKimHZyVSxUiZFxjhgDc04.roa
File:                     uUzCBZKimHZyVSxUiZFxjhgDc04.roa (raw, json)
Hash identifier:          SvXD7k+v42eOfPA2d8ZicsibU6o92bCxP8xgucqxZiY=
Subject key identifier:   B9:4C:C2:05:92:A2:98:76:72:55:2C:54:89:91:71:8E:18:03:73:4E
Certificate issuer:       /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial:       01867393E42F3CD64E503407724A90D18C25
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/uUzCBZKimHZyVSxUiZFxjhgDc04.roa
Signing time:             Tue 21 Feb 2023 10:45:17 +0000
ROA not before:           Tue 21 Feb 2023 10:45:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205449
IP address blocks:        185.218.88.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:73:93:e4:2f:3c:d6:4e:50:34:07:72:4a:90:d1:8c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
        Validity
            Not Before: Feb 21 10:45:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b94cc20592a2987672552c548991718e1803734e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:f7:43:4e:be:9f:0b:43:db:8b:4d:88:db:
                    53:ee:75:f1:ba:a3:e7:a8:f8:79:77:81:8a:c3:c9:
                    d8:c0:e5:70:c5:0f:81:94:57:15:02:e3:fb:52:7d:
                    f9:ac:bc:08:97:be:f1:6c:d7:b5:a7:6f:e5:9c:f7:
                    c1:e9:61:c3:ce:84:a2:2b:ce:86:39:22:2e:45:85:
                    7a:dc:a7:d0:7e:a1:e8:67:03:6f:12:2e:ad:f4:5e:
                    df:11:56:29:00:56:8a:b6:95:84:ac:bf:e4:38:9d:
                    e4:50:dc:2d:12:cd:df:d3:81:e2:bc:e2:c6:43:66:
                    f9:84:ca:72:8a:dc:39:3c:6f:5b:90:b7:3d:f2:e0:
                    81:6f:8a:a1:b0:61:24:c3:47:0f:a0:1e:d9:82:2e:
                    d4:c6:90:ea:18:8d:10:3d:f7:b6:33:f5:c2:9d:cf:
                    a1:f3:7e:bc:00:41:c4:90:39:b0:83:65:0f:e0:51:
                    73:53:fa:da:5b:ac:d4:e2:09:e2:0c:91:ea:65:87:
                    33:a9:1a:a7:10:df:f8:fb:e8:a1:ae:6e:3a:b9:86:
                    72:09:54:f0:1c:92:7f:f3:16:53:ab:21:d7:b7:86:
                    a3:0a:c4:7d:09:3a:c5:cb:0a:e8:6c:0c:ee:4a:98:
                    d0:f3:72:be:5c:2d:bf:84:bb:46:74:a5:9d:9f:01:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:C2:05:92:A2:98:76:72:55:2C:54:89:91:71:8E:18:03:73:4E
            X509v3 Authority Key Identifier:
                keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/uUzCBZKimHZyVSxUiZFxjhgDc04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:54:81:31:9d:49:c6:a9:aa:55:7d:74:c6:d3:f2:0c:29:e8:
         6a:bf:4e:47:24:87:fd:b5:7e:16:ee:58:91:a4:0e:d5:6c:7f:
         b0:74:18:34:97:86:4d:ff:58:6a:86:6a:73:d7:8b:4c:78:a1:
         d9:b7:54:dd:50:d1:58:e6:03:60:6c:38:e3:08:3b:11:4e:f3:
         73:50:6c:62:fd:80:72:b2:63:7a:b2:80:aa:30:de:1f:0a:35:
         df:33:27:2b:03:af:3d:99:02:d3:44:e5:a5:9d:cc:94:a6:2c:
         97:06:bc:c1:e2:b7:93:4a:f6:4f:69:95:d0:97:bc:28:18:b7:
         9d:cc:08:42:98:d8:c7:dc:fc:fd:27:98:30:bf:66:cd:e1:43:
         61:6c:4a:25:1e:a7:5b:9c:08:d6:c1:4c:de:c0:93:13:c9:b0:
         1c:ab:5e:27:e7:2b:fa:b6:2a:1e:4e:36:e5:c3:c7:61:31:33:
         a9:30:da:b5:0e:bd:1c:c0:03:fb:9d:bd:15:b4:e5:bd:d8:6e:
         39:13:ef:37:e7:ea:ea:3e:20:b1:1b:6b:55:48:18:f3:d9:6e:
         83:e9:2d:56:72:af:1e:35:77:85:06:23:3c:34:ae:3c:40:1f:
         72:29:d8:1c:27:68:26:f4:9c:eb:7b:d8:68:46:43:d6:1f:d9:
         af:79:79:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZzk+QvPNZOUDQHckqQ0YwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0
NjVkOTgwHhcNMjMwMjIxMTA0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTRjYzIwNTkyYTI5ODc2NzI1NTJjNTQ4OTkxNzE4ZTE4MDM3MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqH3Q06+nwtD24tNiNtT7nXxuqPn
qPh5d4GKw8nYwOVwxQ+BlFcVAuP7Un35rLwIl77xbNe1p2/lnPfB6WHDzoSiK86G
OSIuRYV63KfQfqHoZwNvEi6t9F7fEVYpAFaKtpWErL/kOJ3kUNwtEs3f04HivOLG
Q2b5hMpyitw5PG9bkLc98uCBb4qhsGEkw0cPoB7Zgi7UxpDqGI0QPfe2M/XCnc+h
8368AEHEkDmwg2UP4FFzU/raW6zU4gniDJHqZYczqRqnEN/4++ihrm46uYZyCVTw
HJJ/8xZTqyHXt4ajCsR9CTrFywrobAzuSpjQ83K+XC2/hLtGdKWdnwHBqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlMwgWSoph2clUsVImRcY4YA3NOMB8GA1UdIwQY
MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt
MWRlMDBiZDg5MTJjLzEvdVV6Q0JaS2ltSFp5VlN4VWlaRnhqaGdEYzA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj
LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudpYMA0G
CSqGSIb3DQEBCwUAA4IBAQA4VIExnUnGqapVfXTG0/IMKehqv05HJIf9tX4W7liR
pA7VbH+wdBg0l4ZN/1hqhmpz14tMeKHZt1TdUNFY5gNgbDjjCDsRTvNzUGxi/YBy
smN6soCqMN4fCjXfMycrA689mQLTROWlncyUpiyXBrzB4reTSvZPaZXQl7woGLed
zAhCmNjH3Pz9J5gwv2bN4UNhbEolHqdbnAjWwUzewJMTybAcq14n5yv6tioeTjbl
w8dhMTOpMNq1Dr0cwAP7nb0VtOW92G45E+835+rqPiCxG2tVSBjz2W6D6S1Wcq8e
NXeFBiM8NK48QB9yKdgcJ2gm9Jzre9hoRkPWH9mveXkV
-----END CERTIFICATE-----