Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/PvdeOG_K5008QNCv0HdruvodUEI.roa
File:                     PvdeOG_K5008QNCv0HdruvodUEI.roa (raw, json)
Hash identifier:          uf6EiAmK+8S/gYC2ydBf9trw/a5h/j+8V3WwlBvvm8Y=
Subject key identifier:   3E:F7:5E:38:6F:CA:E7:4D:3C:40:D0:AF:D0:77:6B:BA:FA:1D:50:42
Certificate issuer:       /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial:       01856BC0F5A7BEDB839E94D7F5ABD27584AD
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/PvdeOG_K5008QNCv0HdruvodUEI.roa
Signing time:             Sun 01 Jan 2023 05:14:45 +0000
ROA not before:           Sun 01 Jan 2023 05:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207424
IP address blocks:        2001:67c:2fc0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c0:f5:a7:be:db:83:9e:94:d7:f5:ab:d2:75:84:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
        Validity
            Not Before: Jan  1 05:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ef75e386fcae74d3c40d0afd0776bbafa1d5042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:aa:9c:39:73:b5:99:df:d8:27:98:5c:17:
                    c3:8a:84:1c:ab:73:fe:de:d3:b6:ee:43:e7:4f:cd:
                    d8:f2:8f:50:56:5c:f2:f7:9d:fa:fc:3d:54:dc:5e:
                    5f:0a:5e:f9:2c:1e:63:3e:e5:7a:29:09:1e:5a:46:
                    d2:01:27:b5:3c:00:e7:a1:65:af:bb:e7:5a:2d:15:
                    6c:0a:89:d0:d4:d4:3b:96:62:f0:9f:c4:3e:38:4e:
                    02:aa:cf:79:c8:cb:d3:eb:aa:01:49:ce:63:11:e7:
                    76:34:b6:f4:a8:a3:3b:21:e3:da:9f:5d:ca:06:cf:
                    7c:87:c6:0f:e3:01:cc:9d:12:df:1a:7e:8c:1b:63:
                    15:dc:33:e3:93:56:a1:9f:f5:1e:59:35:8e:2c:18:
                    27:6e:d9:9f:b5:7c:85:c1:46:9e:92:d9:71:f7:06:
                    1d:dc:cb:2b:fb:63:9f:d6:49:87:9e:cb:69:a9:1c:
                    b3:0d:d8:10:fb:ea:8b:83:ec:0d:2e:6a:37:87:52:
                    dd:3f:15:82:44:45:a7:9b:5e:1d:f9:73:5f:22:8b:
                    70:88:80:e6:9d:54:b1:6a:99:37:29:40:a3:72:1c:
                    36:c5:97:bf:d3:3f:31:86:3b:0f:c5:ea:13:cf:84:
                    a2:0f:25:b5:3f:93:9c:57:83:cd:07:cb:82:21:70:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:5E:38:6F:CA:E7:4D:3C:40:D0:AF:D0:77:6B:BA:FA:1D:50:42
            X509v3 Authority Key Identifier:
                keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/PvdeOG_K5008QNCv0HdruvodUEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:7b:19:e0:73:0c:56:f5:4f:be:5d:8b:f0:17:5c:1a:9f:
         54:17:a9:fa:99:f1:58:d6:9a:d1:11:3d:38:ed:30:6c:28:00:
         02:38:86:b9:f3:05:d5:83:7e:c3:b1:6f:46:b3:6d:cc:e9:60:
         62:2f:c5:58:23:0f:b4:41:3a:70:27:24:1a:78:dc:90:dd:e0:
         af:6f:f8:56:52:59:a4:bf:6f:77:36:74:77:af:34:2c:3d:5a:
         57:3f:5a:e1:47:9d:68:f8:71:32:27:2d:1b:ae:31:e1:41:90:
         6d:a9:5a:5a:2c:63:5b:7a:2f:cb:d8:1f:3e:f9:cd:ea:df:da:
         24:35:c8:13:35:68:d1:3f:ac:ae:7b:ad:ee:66:e1:e9:a0:e7:
         08:74:75:55:a7:5d:be:c4:27:41:43:11:5d:49:d7:92:92:72:
         30:83:80:00:bf:67:2a:c3:11:8a:54:e7:a1:5a:0b:6a:08:8b:
         1d:be:1f:10:d2:e0:8f:da:fc:dd:77:6d:c6:2a:f6:7a:46:f7:
         9f:8b:d8:82:c5:e3:e5:da:e9:0f:a1:59:ed:cf:13:b9:5b:57:
         77:26:73:9f:d9:93:80:cd:b2:92:59:34:24:b7:5b:9b:b7:48:
         43:ba:c3:7c:f8:29:ca:b3:41:74:3d:d9:9f:c6:9a:cd:57:c7:
         8a:8a:ea:af
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVrwPWnvtuDnpTX9avSdYStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex
ZDg1ZDAwHhcNMjMwMTAxMDUxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWY3NWUzODZmY2FlNzRkM2M0MGQwYWZkMDc3NmJiYWZhMWQ1MDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhneqnDlztZnf2CeYXBfDioQcq3P+
3tO27kPnT83Y8o9QVlzy9536/D1U3F5fCl75LB5jPuV6KQkeWkbSASe1PADnoWWv
u+daLRVsConQ1NQ7lmLwn8Q+OE4Cqs95yMvT66oBSc5jEed2NLb0qKM7IePan13K
Bs98h8YP4wHMnRLfGn6MG2MV3DPjk1ahn/UeWTWOLBgnbtmftXyFwUaektlx9wYd
3Msr+2Of1kmHnstpqRyzDdgQ++qLg+wNLmo3h1LdPxWCREWnm14d+XNfIotwiIDm
nVSxapk3KUCjchw2xZe/0z8xhjsPxeoTz4SiDyW1P5OcV4PNB8uCIXACTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD73XjhvyudNPEDQr9B3a7r6HVBCMB8GA1UdIwQY
MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct
MzM5YzlkNDg3NzRjLzEvUHZkZU9HX0s1MDA4UU5DdjBIZHJ1dm9kVUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj
LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/A
MA0GCSqGSIb3DQEBCwUAA4IBAQCcjnsZ4HMMVvVPvl2L8BdcGp9UF6n6mfFY1prR
ET047TBsKAACOIa58wXVg37DsW9Gs23M6WBiL8VYIw+0QTpwJyQaeNyQ3eCvb/hW
Ulmkv293NnR3rzQsPVpXP1rhR51o+HEyJy0brjHhQZBtqVpaLGNbei/L2B8++c3q
39okNcgTNWjRP6yue63uZuHpoOcIdHVVp12+xCdBQxFdSdeSknIwg4AAv2cqwxGK
VOehWgtqCIsdvh8Q0uCP2vzdd23GKvZ6Rvefi9iCxePl2ukPoVntzxO5W1d3JnOf
2ZOAzbKSWTQkt1ubt0hDusN8+CnKs0F0PdmfxprNV8eKiuqv
-----END CERTIFICATE-----