Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa
File:                     5V_lwmmOftbnq5hDLdh5uW7OK9w.roa (raw, json)
Hash identifier:          X+dq7nvURO5Gm1LEBKprjdN6UEON/aj35LiHx3lfXts=
Subject key identifier:   E5:5F:E5:C2:69:8E:7E:D6:E7:AB:98:43:2D:D8:79:B9:6E:CE:2B:DC
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0186E61F7B5A44A9104595FE132C2445B414
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa
Signing time:             Wed 15 Mar 2023 16:34:28 +0000
ROA not before:           Wed 15 Mar 2023 16:34:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31479
IP address blocks:        80.66.112.0/20 maxlen: 20
                          2001:4030::/32 maxlen: 32
                          2001:4030:16::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e6:1f:7b:5a:44:a9:10:45:95:fe:13:2c:24:45:b4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Mar 15 16:34:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e55fe5c2698e7ed6e7ab98432dd879b96ece2bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:05:e8:54:66:ad:49:f8:28:c5:4a:fe:82:
                    2b:72:07:e1:84:cf:03:1b:99:33:f3:c9:51:e8:36:
                    a6:62:44:78:2a:c2:79:22:70:22:c7:9a:0d:73:04:
                    97:0d:e2:e7:ae:1e:c1:80:a4:3e:53:7f:8b:88:90:
                    e2:7a:03:88:bb:93:ee:d8:08:5d:2d:1d:c7:ef:60:
                    d2:00:e4:a8:ce:73:2d:a3:a3:b0:30:4d:09:dc:c8:
                    ec:72:53:1c:fe:ae:59:a8:ff:48:e9:d0:91:c3:6b:
                    9c:88:38:3a:df:66:0b:59:c4:e4:00:08:7b:9b:b7:
                    55:07:fd:cc:50:66:2c:5c:78:94:1f:96:47:dc:eb:
                    19:8e:e4:6c:7d:88:50:85:aa:20:d8:ab:87:99:30:
                    89:93:88:4a:c0:36:72:49:26:c7:b9:ad:fd:90:24:
                    5b:1b:28:08:d1:c5:ba:59:f6:b9:fb:fa:3b:70:be:
                    52:db:76:b1:18:98:24:a3:ad:67:bb:47:f4:a9:f3:
                    68:b0:66:b3:3e:b6:78:26:cc:7f:fa:55:f5:bb:3b:
                    0a:cc:54:42:b4:37:c1:1b:d3:00:8c:bd:01:4e:c5:
                    a1:f0:4a:48:ab:77:d8:66:76:5b:52:9d:ec:aa:06:
                    fe:f5:67:d0:81:40:27:d7:cf:b4:5e:67:f9:f0:f5:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:E5:C2:69:8E:7E:D6:E7:AB:98:43:2D:D8:79:B9:6E:CE:2B:DC
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5V_lwmmOftbnq5hDLdh5uW7OK9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.112.0/20
                IPv6:
                  2001:4030::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:7a:bc:90:08:a5:02:e8:f9:9f:d6:b6:b7:1b:c2:8b:d5:64:
         c3:31:a8:34:fb:c7:48:ee:e7:03:64:e0:35:f6:f5:89:76:2f:
         69:90:d3:49:aa:10:79:d5:24:fc:3d:47:af:c8:39:96:28:47:
         35:a5:8b:ee:d2:fe:2f:4d:9c:73:d4:a0:8b:89:7b:09:0f:67:
         ed:f1:c9:4d:a5:cb:07:6d:30:6b:10:cc:eb:b1:01:5f:89:54:
         5e:a7:ac:6f:fd:36:69:19:ee:07:eb:d7:41:9c:a8:f8:f6:01:
         4e:02:b1:ef:0b:7d:89:1d:e8:ff:04:49:f3:43:91:1a:70:48:
         73:ed:f9:30:f3:55:21:91:21:54:4a:b9:6c:a2:62:3d:41:f5:
         ac:bd:b1:fd:2b:37:f6:9f:6d:29:32:7a:4b:90:b8:23:f4:7b:
         c4:1f:35:90:34:3d:0a:25:66:ea:ba:e4:18:e7:6b:c0:8a:9c:
         ba:0e:02:8c:1e:df:05:c1:e3:a6:28:9b:77:e6:91:9a:a6:12:
         f8:48:4d:8a:19:10:df:6a:f8:a3:07:59:8c:ed:3b:d4:ab:3e:
         c2:ce:ad:0b:b4:35:ed:b5:38:34:e3:2f:17:fe:c6:58:e0:a8:
         5f:96:7e:ca:49:1d:76:15:a0:0a:65:8f:c7:80:8c:57:ea:00:
         3e:bf:55:05
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYbmH3taRKkQRZX+EywkRbQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMzE1MTYzNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTVmZTVjMjY5OGU3ZWQ2ZTdhYjk4NDMyZGQ4NzliOTZlY2UyYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwUF6FRmrUn4KMVK/oIrcgfhhM8D
G5kz88lR6DamYkR4KsJ5InAix5oNcwSXDeLnrh7BgKQ+U3+LiJDiegOIu5Pu2Ahd
LR3H72DSAOSoznMto6OwME0J3MjsclMc/q5ZqP9I6dCRw2uciDg632YLWcTkAAh7
m7dVB/3MUGYsXHiUH5ZH3OsZjuRsfYhQhaog2KuHmTCJk4hKwDZySSbHua39kCRb
GygI0cW6Wfa5+/o7cL5S23axGJgko61nu0f0qfNosGazPrZ4Jsx/+lX1uzsKzFRC
tDfBG9MAjL0BTsWh8EpIq3fYZnZbUp3sqgb+9WfQgUAn18+0Xmf58PUSFwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOVf5cJpjn7W56uYQy3YebluzivcMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNVZfbHdtbU9mdGJucTVoRExkaDV1VzdPSzl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUEJwMA0E
AgACMAcDBQAgAUAwMA0GCSqGSIb3DQEBCwUAA4IBAQAeeryQCKUC6Pmf1ra3G8KL
1WTDMag0+8dI7ucDZOA19vWJdi9pkNNJqhB51ST8PUevyDmWKEc1pYvu0v4vTZxz
1KCLiXsJD2ft8clNpcsHbTBrEMzrsQFfiVRep6xv/TZpGe4H69dBnKj49gFOArHv
C32JHej/BEnzQ5EacEhz7fkw81UhkSFUSrlsomI9QfWsvbH9Kzf2n20pMnpLkLgj
9HvEHzWQND0KJWbquuQY52vAipy6DgKMHt8FweOmKJt35pGaphL4SE2KGRDfavij
B1mM7TvUqz7Czq0LtDXttTg04y8X/sZY4Khfln7KSR12FaAKZY/HgIxX6gA+v1UF