Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/TzW6hu_vxhegv2tm0Dr4jMYCYj4.roa
File:                     TzW6hu_vxhegv2tm0Dr4jMYCYj4.roa (raw, json)
Hash identifier:          T91vTECE+GQRB//p+mh+h+tR7JdEzhtU/yg+O5vMG7Y=
Subject key identifier:   4F:35:BA:86:EF:EF:C6:17:A0:BF:6B:66:D0:3A:F8:8C:C6:02:62:3E
Certificate issuer:       /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial:       018572959D08573EAD49A7BB99DBFAD4AECB
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/TzW6hu_vxhegv2tm0Dr4jMYCYj4.roa
Signing time:             Mon 02 Jan 2023 13:04:45 +0000
ROA not before:           Mon 02 Jan 2023 13:04:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202523
IP address blocks:        185.91.240.0/22 maxlen: 22
                          2a05:ee80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:9d:08:57:3e:ad:49:a7:bb:99:db:fa:d4:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
        Validity
            Not Before: Jan  2 13:04:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f35ba86efefc617a0bf6b66d03af88cc602623e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:74:28:df:78:20:45:8b:4b:93:26:49:93:
                    5c:eb:01:a2:c8:62:1e:86:bc:d1:b8:28:f9:75:e6:
                    41:5f:66:23:2b:fa:8f:09:08:94:ef:3e:ae:d5:b6:
                    d5:f7:36:41:7d:6a:04:63:fb:58:4b:44:61:76:e2:
                    5b:6b:bd:f6:89:5a:15:b2:f3:22:0a:20:41:ce:0c:
                    7b:4d:6c:0e:a3:ef:3a:b9:00:f8:b2:6f:39:b4:15:
                    64:38:d4:18:29:8a:d7:56:b9:8f:32:27:5a:ad:54:
                    ff:7b:f7:2e:f0:cf:83:e5:b1:a7:95:0b:7f:0c:4e:
                    f3:97:f7:d9:36:24:57:77:64:d2:5b:16:cd:1f:48:
                    3b:70:b0:94:d6:c0:eb:ca:29:9f:23:9c:6b:fe:a4:
                    90:ce:3a:f4:18:13:62:59:f2:a4:e1:63:b9:32:6a:
                    57:3c:9e:5f:c9:94:dc:44:54:d3:79:21:e9:0e:ea:
                    b9:84:76:a3:d6:8b:5c:55:86:41:2c:54:8a:52:95:
                    4f:12:9a:03:87:90:3b:94:14:9c:2b:a4:c1:88:d1:
                    14:9a:95:7b:75:07:ef:50:14:3c:f7:bd:e1:02:78:
                    b9:31:1a:d0:ff:4e:00:52:5f:b3:d5:e4:81:ef:cc:
                    2e:35:b4:84:23:36:1e:3d:a0:06:7e:2a:66:e9:2a:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:BA:86:EF:EF:C6:17:A0:BF:6B:66:D0:3A:F8:8C:C6:02:62:3E
            X509v3 Authority Key Identifier:
                keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/TzW6hu_vxhegv2tm0Dr4jMYCYj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.91.240.0/22
                IPv6:
                  2a05:ee80::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:7c:5d:ba:29:56:82:54:69:dd:03:1d:38:44:2a:08:4f:
         a8:9d:b3:3d:64:1a:80:0a:f3:89:67:aa:b3:50:c7:f5:47:38:
         82:98:e1:c0:ad:b1:4c:dd:b0:0f:f6:44:28:0c:a3:bc:84:80:
         6b:21:09:c9:02:c2:29:24:51:01:16:3a:4b:be:ce:be:21:af:
         ca:ee:6e:88:f1:98:cb:e3:e6:72:9b:5b:a5:fe:3a:c7:6c:5d:
         a8:b6:b7:d9:6f:c1:1c:29:80:c8:31:00:20:94:a3:bd:fe:d6:
         27:c4:9b:1e:6a:db:8a:ab:b4:18:65:06:28:fa:6e:41:d9:44:
         d8:b8:5e:a4:ed:31:53:32:69:be:5b:2f:aa:b7:e3:74:d1:41:
         dd:5d:d9:b0:ca:14:53:9e:a0:84:a8:d8:6c:72:60:31:b3:3b:
         89:11:42:5e:18:1a:49:b2:29:48:8d:82:74:5e:4c:42:f2:8e:
         bd:91:19:0e:89:95:13:b7:61:1e:8c:5b:fc:c2:b3:5d:cc:c3:
         30:f5:48:f6:77:28:7e:41:ad:d6:17:a7:be:61:c7:f9:11:42:
         a5:73:a3:fe:e3:9d:ff:cd:37:b6:b9:e3:e9:5b:25:43:be:05:
         95:11:7e:29:67:42:2b:53:d1:d2:e7:6b:2e:80:fb:7b:94:bc:
         e4:6b:5b:e5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVylZ0IVz6tSae7mdv61K7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi
NTI3YTMwHhcNMjMwMTAyMTMwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjM1YmE4NmVmZWZjNjE3YTBiZjZiNjZkMDNhZjg4Y2M2MDI2MjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK10KN94IEWLS5MmSZNc6wGiyGIe
hrzRuCj5deZBX2YjK/qPCQiU7z6u1bbV9zZBfWoEY/tYS0RhduJba732iVoVsvMi
CiBBzgx7TWwOo+86uQD4sm85tBVkONQYKYrXVrmPMidarVT/e/cu8M+D5bGnlQt/
DE7zl/fZNiRXd2TSWxbNH0g7cLCU1sDryimfI5xr/qSQzjr0GBNiWfKk4WO5MmpX
PJ5fyZTcRFTTeSHpDuq5hHaj1otcVYZBLFSKUpVPEpoDh5A7lBScK6TBiNEUmpV7
dQfvUBQ8973hAni5MRrQ/04AUl+z1eSB78wuNbSEIzYePaAGfipm6SoRnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE81uobv78YXoL9rZtA6+IzGAmI+MB8GA1UdIwQY
MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt
OTVjNGU5NGFkMGE5LzEvVHpXNmh1X3Z4aGVndjJ0bTBEcjRqTVlDWWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5
LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVvwMA0E
AgACMAcDBQMqBe6AMA0GCSqGSIb3DQEBCwUAA4IBAQBr2XxduilWglRp3QMdOEQq
CE+onbM9ZBqACvOJZ6qzUMf1RziCmOHArbFM3bAP9kQoDKO8hIBrIQnJAsIpJFEB
FjpLvs6+Ia/K7m6I8ZjL4+Zym1ul/jrHbF2otrfZb8EcKYDIMQAglKO9/tYnxJse
atuKq7QYZQYo+m5B2UTYuF6k7TFTMmm+Wy+qt+N00UHdXdmwyhRTnqCEqNhscmAx
szuJEUJeGBpJsilIjYJ0XkxC8o69kRkOiZUTt2EejFv8wrNdzMMw9Uj2dyh+Qa3W
F6e+Ycf5EUKlc6P+453/zTe2uePpWyVDvgWVEX4pZ0IrU9HS52sugPt7lLzka1vl
-----END CERTIFICATE-----