Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa
File:                     N_Qt4BAuMNW6C723GaaA82mLWGg.roa (raw, json)
Hash identifier:          GpHO65kgjwI69jvvNdCm4CBCt3+m7SgomsdUMqJxuJ4=
Subject key identifier:   37:F4:2D:E0:10:2E:30:D5:BA:0B:BD:B7:19:A6:80:F3:69:8B:58:68
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185744D5EDCD4797E1484F40A462B0A6D90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa
Signing time:             Mon 02 Jan 2023 21:05:05 +0000
ROA not before:           Mon 02 Jan 2023 21:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203790
IP address blocks:        194.50.111.0/24 maxlen: 24
                          2a0e:97c0:460::/44 maxlen: 48
                          2a0e:b107:12a0::/44 maxlen: 48
                          2a10:cc40:1d0::/44 maxlen: 48
                          2a0e:b101::/32 maxlen: 48
                          2a10:cc41:110::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:74:4d:5e:dc:d4:79:7e:14:84:f4:0a:46:2b:0a:6d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 21:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37f42de0102e30d5ba0bbdb719a680f3698b5868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:05:bb:ca:5d:50:9f:53:aa:e3:25:8e:60:
                    b3:6a:c7:09:40:7b:b7:48:45:34:5e:31:5a:6b:4c:
                    6b:bb:16:bd:c7:5c:81:2b:04:55:42:07:94:74:15:
                    ff:1c:16:cb:1f:85:1e:09:80:11:98:2b:c8:8d:3c:
                    b7:11:c8:76:03:0a:6c:ac:f4:d2:cb:9e:d9:88:27:
                    9d:4d:ec:ff:00:26:52:fb:65:25:41:82:14:2e:ee:
                    0b:5c:a3:68:e0:25:72:5c:bb:76:14:25:10:9f:33:
                    0d:71:30:5e:b3:ae:a1:2f:aa:3f:e6:09:6c:79:aa:
                    ff:4a:02:65:24:4a:29:29:fa:b3:2e:32:53:c7:c2:
                    ce:30:8b:0d:71:fb:16:43:1c:83:8f:d9:0e:f0:0c:
                    cc:3b:91:14:4c:a6:a8:fe:74:b6:7d:3c:c4:51:77:
                    30:e2:33:68:4a:b7:bd:5c:a9:86:ef:96:87:22:97:
                    b4:c4:96:f2:d4:ec:56:1c:f5:a6:aa:40:b8:05:99:
                    0f:35:05:f5:1b:46:69:20:86:cf:be:80:13:2d:85:
                    5a:30:07:fb:0d:bf:e1:ad:5a:35:91:13:3d:9e:18:
                    aa:94:fc:1d:7f:16:38:a7:e3:7c:2d:cb:87:d9:e4:
                    8a:ab:d6:bb:97:3f:9d:3b:41:d8:36:b1:6d:17:65:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:2D:E0:10:2E:30:D5:BA:0B:BD:B7:19:A6:80:F3:69:8B:58:68
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.111.0/24
                IPv6:
                  2a0e:97c0:460::/44
                  2a0e:b101::/32
                  2a0e:b107:12a0::/44
                  2a10:cc40:1d0::/44
                  2a10:cc41:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:23:4c:dd:23:89:22:b1:78:87:df:22:c0:90:31:6d:68:4f:
         a0:6a:52:2e:1b:ea:27:03:c9:17:a2:e7:2d:c3:70:86:2b:31:
         f6:69:89:46:4e:36:6c:c2:b0:e1:d6:e7:a8:58:37:20:94:5a:
         07:3f:01:83:47:4e:20:e9:2c:78:d1:68:f5:f6:c8:79:73:51:
         0d:d9:bf:55:de:58:9d:1f:35:71:13:3b:a8:e4:73:78:59:5c:
         60:90:83:b4:dc:c9:75:85:3a:aa:5e:28:e9:36:99:30:52:1e:
         c8:da:6b:d9:76:43:35:20:61:c0:2a:8a:05:26:fe:84:7c:39:
         a7:70:5d:a0:75:15:f6:1d:70:91:44:02:da:90:95:dc:bf:3b:
         d5:42:2a:be:cb:56:e8:42:dd:1a:14:5c:e3:3c:2a:97:93:05:
         9f:02:55:9a:3b:6b:50:ad:c5:fc:be:89:83:c8:86:01:53:6d:
         6a:61:19:e6:47:5b:15:d5:48:2d:82:7d:d9:61:5d:36:25:2b:
         ec:76:df:df:7b:02:8f:ab:fb:36:d3:36:12:7d:40:62:b2:e6:
         71:e1:b4:f3:c9:3e:0e:6d:5b:c6:bf:30:f9:a6:50:44:7b:60:
         ea:30:c0:6a:6d:32:be:40:fa:da:42:c9:44:3c:93:b9:be:77:
         51:62:c2:80
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYV0TV7c1Hl+FIT0CkYrCm2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMjEwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y0MmRlMDEwMmUzMGQ1YmEwYmJkYjcxOWE2ODBmMzY5OGI1ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7AFu8pdUJ9TquMljmCzascJQHu3
SEU0XjFaa0xruxa9x1yBKwRVQgeUdBX/HBbLH4UeCYARmCvIjTy3Ech2AwpsrPTS
y57ZiCedTez/ACZS+2UlQYIULu4LXKNo4CVyXLt2FCUQnzMNcTBes66hL6o/5gls
ear/SgJlJEopKfqzLjJTx8LOMIsNcfsWQxyDj9kO8AzMO5EUTKao/nS2fTzEUXcw
4jNoSre9XKmG75aHIpe0xJby1OxWHPWmqkC4BZkPNQX1G0ZpIIbPvoATLYVaMAf7
Db/hrVo1kRM9nhiqlPwdfxY4p+N8LcuH2eSKq9a7lz+dO0HYNrFtF2XOiwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFDf0LeAQLjDVugu9txmmgPNpi1hoMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTl9RdDRCQXVNTlc2QzcyM0dhYUE4Mm1MV0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAMBAIAATAGAwQAwjJvMDEE
AgACMCsDBwQqDpfABGADBQAqDrEBAwcEKg6xBxKgAwcEKhDMQAHQAwcEKhDMQQEQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBGI0zdI4kisXiH3yLAkDFtaE+galIuG+onA8kX
ouctw3CGKzH2aYlGTjZswrDh1ueoWDcglFoHPwGDR04g6Sx40Wj19sh5c1EN2b9V
3lidHzVxEzuo5HN4WVxgkIO03Ml1hTqqXijpNpkwUh7I2mvZdkM1IGHAKooFJv6E
fDmncF2gdRX2HXCRRALakJXcvzvVQiq+y1boQt0aFFzjPCqXkwWfAlWaO2tQrcX8
vomDyIYBU21qYRnmR1sV1Ugtgn3ZYV02JSvsdt/fewKPq/s20zYSfUBisuZx4bTz
yT4ObVvGvzD5plBEe2DqMMBqbTK+QPraQslEPJO5vndRYsKA
-----END CERTIFICATE-----