Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/9PQ8g9SEdz07C3JLWhW66zaQkt8.roa
File:                     9PQ8g9SEdz07C3JLWhW66zaQkt8.roa (raw, json)
Hash identifier:          2oA50ynPan9M1fEk/X3jrZQURp2Mx/OcH0NrCwVEcwY=
Subject key identifier:   F4:F4:3C:83:D4:84:77:3D:3B:0B:72:4B:5A:15:BA:EB:36:90:92:DF
Certificate issuer:       /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial:       0185710BE539D796C3B92256737F059CB532
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/9PQ8g9SEdz07C3JLWhW66zaQkt8.roa
Signing time:             Mon 02 Jan 2023 05:54:43 +0000
ROA not before:           Mon 02 Jan 2023 05:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199819
IP address blocks:        193.8.197.0/24 maxlen: 24
                          2001:678:75c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0b:e5:39:d7:96:c3:b9:22:56:73:7f:05:9c:b5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
        Validity
            Not Before: Jan  2 05:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4f43c83d484773d3b0b724b5a15baeb369092df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:ef:fc:9a:7e:e0:83:01:8f:45:14:52:e3:
                    93:f6:93:e2:72:e5:a0:6e:02:ad:eb:e5:a8:16:78:
                    01:42:79:f5:44:5f:75:70:7e:d6:d2:37:6f:34:ce:
                    63:a7:83:98:b8:3c:b5:dd:3a:8b:b6:8e:9f:8d:54:
                    88:46:4d:be:d0:99:13:af:60:c8:ce:f2:8d:79:60:
                    c4:cc:6a:ae:d9:a9:fb:6b:a2:c6:be:1d:0f:06:a0:
                    5d:55:3b:b2:89:07:51:69:5e:8e:94:e3:b9:7c:a0:
                    c4:99:dc:64:a0:0c:3e:bb:cd:33:96:76:85:1b:f2:
                    85:15:05:bc:8c:49:3b:4c:c8:f5:3a:52:bc:02:8f:
                    e6:5f:a0:06:ab:06:74:ab:ce:82:50:04:8e:aa:0b:
                    c7:6b:53:72:fa:6b:fe:cf:3d:37:d1:27:11:ab:5f:
                    26:ea:a9:89:71:0e:2c:c0:94:38:8f:64:b8:e0:8c:
                    25:a1:05:9e:21:dd:c9:3d:83:4c:f9:41:93:40:2b:
                    f9:4b:de:62:33:65:45:2d:0c:6a:04:4e:de:ae:e4:
                    51:96:fe:db:c9:ee:4d:c1:3b:82:7a:0d:12:11:d0:
                    ca:a7:78:e3:fd:6f:3c:66:1e:0c:2a:81:28:9b:e4:
                    fd:ce:64:1b:0f:49:e0:ce:3f:cd:1a:36:3f:d5:15:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:3C:83:D4:84:77:3D:3B:0B:72:4B:5A:15:BA:EB:36:90:92:DF
            X509v3 Authority Key Identifier:
                keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/9PQ8g9SEdz07C3JLWhW66zaQkt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.197.0/24
                IPv6:
                  2001:678:75c::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:53:43:2f:62:1a:b5:fc:18:49:b3:87:e7:dd:2f:eb:6d:
         fa:f8:55:46:50:49:e5:ca:e8:62:93:4c:8e:26:ad:a4:86:4c:
         e6:41:ea:7f:c2:66:6a:58:73:b8:25:07:80:ef:98:d2:5c:38:
         2d:f4:21:b6:d5:41:43:5c:9e:d7:47:2b:10:78:8e:d4:60:bc:
         7f:a8:0e:a6:6a:7d:59:a4:12:fd:4e:7b:bb:85:ff:2c:6f:bf:
         f2:be:89:c0:41:b2:22:23:03:56:b2:4c:74:63:ea:c7:60:74:
         b8:f9:95:46:29:48:c5:87:90:de:53:5c:16:18:44:34:14:b2:
         44:dc:5e:24:90:ad:5c:fe:72:c6:0e:43:d6:5d:73:ba:bd:3c:
         0c:92:e7:03:b7:7c:47:d8:a1:ba:25:b6:bc:76:8f:8a:9f:12:
         89:26:cd:ae:59:45:99:0c:5e:9c:d7:a4:b1:4b:9c:db:59:08:
         b2:c8:c0:c5:a2:ef:2f:1c:24:2a:cf:c8:89:f5:d1:6f:5f:ed:
         21:7e:84:b9:1e:df:72:da:6b:79:cc:96:b9:e5:16:70:e7:1e:
         ec:b1:dd:c7:65:70:2d:79:b7:d8:bd:7e:e4:5c:2a:f7:38:1e:
         fd:c4:ed:d1:85:34:0a:a4:8e:2e:ae:89:11:75:87:7d:13:88:
         5c:ea:f2:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxC+U515bDuSJWc38FnLUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTlhYWQ1ZDRiMjJmNDg3M2UwOTQ3YmM3ZjQyZmExZGQ1
YzFmNDEwHhcNMjMwMTAyMDU1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY0M2M4M2Q0ODQ3NzNkM2IwYjcyNGI1YTE1YmFlYjM2OTA5MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFrv/Jp+4IMBj0UUUuOT9pPicuWg
bgKt6+WoFngBQnn1RF91cH7W0jdvNM5jp4OYuDy13TqLto6fjVSIRk2+0JkTr2DI
zvKNeWDEzGqu2an7a6LGvh0PBqBdVTuyiQdRaV6OlOO5fKDEmdxkoAw+u80zlnaF
G/KFFQW8jEk7TMj1OlK8Ao/mX6AGqwZ0q86CUASOqgvHa1Ny+mv+zz030ScRq18m
6qmJcQ4swJQ4j2S44IwloQWeId3JPYNM+UGTQCv5S95iM2VFLQxqBE7eruRRlv7b
ye5NwTuCeg0SEdDKp3jj/W88Zh4MKoEom+T9zmQbD0ngzj/NGjY/1RUycQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPT0PIPUhHc9OwtyS1oVuus2kJLfMB8GA1UdIwQY
MBaAFBcZqtXUsi9Ic+CUe8f0L6HdXB9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYt
MzMxZDRhMGQxNDI3LzEvOVBROGc5U0VkejA3QzNKTFdoVzY2emFRa3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yOTBmZWMtMjhmMy00NGIwLTljZmYtMzMxZDRhMGQxNDI3
LzEvRnhtcTFkU3lMMGh6NEpSN3hfUXZvZDFjSDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQjFMA8E
AgACMAkDBwAgAQZ4B1wwDQYJKoZIhvcNAQELBQADggEBAFfdU0MvYhq1/BhJs4fn
3S/rbfr4VUZQSeXK6GKTTI4mraSGTOZB6n/CZmpYc7glB4DvmNJcOC30IbbVQUNc
ntdHKxB4jtRgvH+oDqZqfVmkEv1Oe7uF/yxvv/K+icBBsiIjA1ayTHRj6sdgdLj5
lUYpSMWHkN5TXBYYRDQUskTcXiSQrVz+csYOQ9Zdc7q9PAyS5wO3fEfYoboltrx2
j4qfEokmza5ZRZkMXpzXpLFLnNtZCLLIwMWi7y8cJCrPyIn10W9f7SF+hLke33La
a3nMlrnlFnDnHuyx3cdlcC15t9i9fuRcKvc4Hv3E7dGFNAqkji6uiRF1h30TiFzq
8rg=
-----END CERTIFICATE-----