Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ti4nDHmOEUQ9ujBGu9yJ9xwIDJE.roa
File:                     Ti4nDHmOEUQ9ujBGu9yJ9xwIDJE.roa (raw, json)
Hash identifier:          oWek39Ek+rJegTjHFu5YLMpiKFCEO884ZwdK5rUHyrU=
Subject key identifier:   4E:2E:27:0C:79:8E:11:44:3D:BA:30:46:BB:DC:89:F7:1C:08:0C:91
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189C2BF36C015EEF9D6B10D8373C776CD75
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ti4nDHmOEUQ9ujBGu9yJ9xwIDJE.roa
Signing time:             Fri 04 Aug 2023 22:50:58 +0000
ROA not before:           Fri 04 Aug 2023 22:50:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203790
IP address blocks:        194.50.111.0/24 maxlen: 24
                          2a0e:97c0:460::/44 maxlen: 48
                          2a0e:b107:12a0::/44 maxlen: 48
                          2a0e:b101::/32 maxlen: 48
                          2a10:cc41:110::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c2:bf:36:c0:15:ee:f9:d6:b1:0d:83:73:c7:76:cd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  4 22:50:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e2e270c798e11443dba3046bbdc89f71c080c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:dd:a8:1c:4d:e8:d8:f1:a8:2c:71:a6:d5:
                    64:af:1f:7f:b7:e1:97:fd:ce:27:8e:ab:0d:79:ef:
                    cb:37:52:e5:a3:3d:82:fc:e7:ab:e4:65:2b:fd:54:
                    a0:92:20:dc:94:06:69:f0:78:e6:51:ee:56:2f:2b:
                    8a:32:6c:06:cd:74:08:17:92:a4:ec:dc:e6:b6:a5:
                    33:10:7b:31:ce:bf:77:c5:9f:d3:66:4c:d2:8e:c9:
                    7e:92:08:ac:70:f0:89:2a:6e:07:fa:21:ea:80:52:
                    1e:0b:73:47:fc:1a:38:91:4c:24:4d:fc:62:c9:c0:
                    7f:8a:01:fb:84:06:4f:e5:4c:39:8f:ee:97:5e:22:
                    37:74:0c:92:18:e0:a4:d9:fc:8e:ac:d8:92:12:60:
                    38:7b:bb:06:3e:f3:e9:a9:49:20:05:ce:62:e2:5a:
                    8d:b2:b5:33:47:d4:05:ed:c2:03:02:00:8f:bb:2b:
                    77:24:53:1d:17:d7:6a:e6:4e:62:b9:20:5f:ed:45:
                    b7:f7:3c:4f:f5:b9:96:b0:3a:4e:c5:5d:5b:f9:e7:
                    59:3a:9d:84:ba:01:58:3a:b7:d5:35:4d:64:61:5b:
                    19:b4:c5:97:55:e3:94:db:17:c5:09:95:1c:e1:be:
                    a2:d9:65:1e:fb:9f:95:0a:d2:0c:2a:06:b5:19:f1:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:27:0C:79:8E:11:44:3D:BA:30:46:BB:DC:89:F7:1C:08:0C:91
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ti4nDHmOEUQ9ujBGu9yJ9xwIDJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.111.0/24
                IPv6:
                  2a0e:97c0:460::/44
                  2a0e:b101::/32
                  2a0e:b107:12a0::/44
                  2a10:cc41:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:97:35:41:50:4c:b7:b4:4c:20:1d:10:60:74:32:ea:a8:
         e6:6b:76:57:90:00:07:7b:9d:ae:d4:61:47:23:01:f9:bb:cb:
         4d:9a:00:a5:de:c4:7a:b3:e5:82:84:ff:04:3b:29:0e:a2:84:
         3e:42:14:f7:9a:c7:49:ef:a7:a6:62:4f:28:a3:5a:fe:55:97:
         78:68:20:03:f0:5d:20:8f:df:d5:1e:71:6b:80:6e:c4:1c:47:
         b0:57:75:df:cf:e5:33:56:1c:76:1c:7c:8a:92:b4:8d:c3:6c:
         10:3f:42:9a:8f:9c:c7:e4:45:71:e5:a6:2d:df:ad:96:62:7e:
         ee:47:64:60:4c:1d:b4:b7:10:02:e3:8c:03:0b:ee:a2:dc:28:
         9c:ae:33:a6:47:92:53:09:b6:7a:07:89:ee:1c:74:ec:06:96:
         1d:a7:13:91:6f:2b:13:2a:29:f5:84:2c:06:a7:e8:35:f9:c6:
         9d:ff:05:a3:76:26:fe:6c:da:cb:11:4a:52:9f:15:75:6a:9b:
         1c:88:b4:0c:93:29:10:e0:89:70:ae:3c:b6:a1:83:a5:99:b7:
         a1:e4:84:8f:ed:a2:de:22:f7:71:80:a6:c1:21:75:0c:c7:de:
         f3:d7:b4:f5:ec:95:32:fe:d3:69:a7:85:cd:b5:25:44:73:f7:
         34:b7:51:81
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYnCvzbAFe751rENg3PHds11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODA0MjI1MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJlMjcwYzc5OGUxMTQ0M2RiYTMwNDZiYmRjODlmNzFjMDgwYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXrdqBxN6NjxqCxxptVkrx9/t+GX
/c4njqsNee/LN1Lloz2C/Oer5GUr/VSgkiDclAZp8HjmUe5WLyuKMmwGzXQIF5Kk
7NzmtqUzEHsxzr93xZ/TZkzSjsl+kgiscPCJKm4H+iHqgFIeC3NH/Bo4kUwkTfxi
ycB/igH7hAZP5Uw5j+6XXiI3dAySGOCk2fyOrNiSEmA4e7sGPvPpqUkgBc5i4lqN
srUzR9QF7cIDAgCPuyt3JFMdF9dq5k5iuSBf7UW39zxP9bmWsDpOxV1b+edZOp2E
ugFYOrfVNU1kYVsZtMWXVeOU2xfFCZUc4b6i2WUe+5+VCtIMKga1GfE9GQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFE4uJwx5jhFEPbowRrvcifccCAyRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVGk0bkRIbU9FVVE5dWpCR3U5eUo5eHdJREpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAMBAIAATAGAwQAwjJvMCgE
AgACMCIDBwQqDpfABGADBQAqDrEBAwcEKg6xBxKgAwcEKhDMQQEQMA0GCSqGSIb3
DQEBCwUAA4IBAQB5epc1QVBMt7RMIB0QYHQy6qjma3ZXkAAHe52u1GFHIwH5u8tN
mgCl3sR6s+WChP8EOykOooQ+QhT3msdJ76emYk8oo1r+VZd4aCAD8F0gj9/VHnFr
gG7EHEewV3Xfz+UzVhx2HHyKkrSNw2wQP0Kaj5zH5EVx5aYt362WYn7uR2RgTB20
txAC44wDC+6i3CicrjOmR5JTCbZ6B4nuHHTsBpYdpxORbysTKin1hCwGp+g1+cad
/wWjdib+bNrLEUpSnxV1apsciLQMkykQ4Ilwrjy2oYOlmbeh5ISP7aLeIvdxgKbB
IXUMx97z17T17JUy/tNpp4XNtSVEc/c0t1GB
-----END CERTIFICATE-----