Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VLrQHavdQass6MMbnr4Bgzxyy5A.roa
File:                     VLrQHavdQass6MMbnr4Bgzxyy5A.roa (raw, json)
Hash identifier:          2xTXfL6NC3axNqEEoI5q4nnZMPbLuQX7nTIXi7eqaco=
Subject key identifier:   54:BA:D0:1D:AB:DD:41:AB:2C:E8:C3:1B:9E:BE:01:83:3C:72:CB:90
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018C9B6BBCF44CDF9A7AB744799435B52AE5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VLrQHavdQass6MMbnr4Bgzxyy5A.roa
Signing time:             Sun 24 Dec 2023 10:42:58 +0000
ROA not before:           Sun 24 Dec 2023 10:42:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48147
IP address blocks:        212.80.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:9b:6b:bc:f4:4c:df:9a:7a:b7:44:79:94:35:b5:2a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Dec 24 10:42:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54bad01dabdd41ab2ce8c31b9ebe01833c72cb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:3e:b9:41:25:e4:2e:dc:d9:83:74:5f:09:
                    77:fa:3d:87:91:60:6e:41:1b:8d:42:5e:d3:d3:44:
                    bd:fb:ed:1d:6a:f7:cc:4a:51:db:a4:94:36:5a:fc:
                    e3:d0:e3:d6:a9:43:94:8c:a7:f8:0f:78:df:91:be:
                    03:04:13:34:7f:b1:fa:f0:a1:5b:f1:c0:64:4e:76:
                    d2:62:d4:9f:a9:5c:c1:16:4e:e4:eb:96:27:8f:f2:
                    07:65:cc:0b:01:b5:65:f2:0a:b9:88:8b:33:36:7a:
                    88:36:5a:49:76:cb:3f:75:b9:47:d9:5d:15:e2:01:
                    f2:fa:09:8b:52:6b:07:ce:ff:fc:f3:c8:14:f6:ae:
                    68:d9:c3:a6:5f:32:9c:05:fe:d0:8b:36:69:83:a0:
                    e5:de:55:cb:1b:50:aa:d0:ab:cd:28:57:af:3f:81:
                    aa:95:45:81:ac:9f:56:cb:76:a1:db:b3:f7:05:ce:
                    37:01:67:82:6a:e6:aa:1e:28:ed:07:09:fe:12:be:
                    48:20:84:8e:a8:bc:0a:4d:f1:21:d2:45:a1:92:34:
                    37:cf:63:43:ce:f6:69:10:16:d8:c7:5c:26:83:4c:
                    8c:90:44:46:44:a2:b6:de:b4:3f:fc:be:c0:85:7e:
                    b1:44:ac:91:c9:57:ac:29:a9:8b:b2:ac:17:20:5d:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BA:D0:1D:AB:DD:41:AB:2C:E8:C3:1B:9E:BE:01:83:3C:72:CB:90
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VLrQHavdQass6MMbnr4Bgzxyy5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:76:53:23:f8:a2:af:19:4d:9f:17:fb:b9:30:75:89:91:c7:
         ad:f2:00:9a:b9:72:c8:4b:f9:2c:94:b0:67:68:30:1a:6a:7f:
         53:7a:0b:14:61:55:39:d1:d3:a2:eb:15:94:d8:fc:d6:34:eb:
         35:7c:93:49:7a:3d:9d:d5:ec:ae:1a:31:ed:5f:27:f7:bd:6f:
         13:33:f7:a0:27:63:5e:fd:9e:09:0a:a3:10:d5:fc:7e:fe:b4:
         69:3c:23:c7:c7:81:88:4b:f8:ae:32:c0:79:c5:33:b5:94:19:
         0a:77:ad:af:bd:6f:61:8f:3d:34:1a:35:d1:7e:91:48:3b:1b:
         9e:4b:bd:4a:8b:f7:48:88:93:3b:00:92:a8:05:a3:23:d0:58:
         af:3b:2a:c7:5d:7d:2a:a0:69:a4:63:2f:f6:b3:ca:95:9c:80:
         49:66:ce:07:7c:b4:1c:a5:a4:3a:71:fb:d1:83:51:26:62:90:
         d3:58:d2:3c:a6:b7:fe:5a:75:a2:c2:d1:a4:0c:3e:ff:45:f3:
         24:d1:18:3e:88:9e:48:8f:46:83:d3:03:33:00:c5:d1:30:17:
         50:31:a5:3e:48:ed:bb:ef:22:b2:78:ad:f3:72:55:66:82:ca:
         2d:de:ed:3d:cb:a2:6c:43:43:b0:63:ce:fd:87:75:e1:52:a1:
         4c:3c:16:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyba7z0TN+aerdEeZQ1tSrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjMxMjI0MTA0MjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGJhZDAxZGFiZGQ0MWFiMmNlOGMzMWI5ZWJlMDE4MzNjNzJjYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopQ+uUEl5C7c2YN0Xwl3+j2HkWBu
QRuNQl7T00S9++0davfMSlHbpJQ2Wvzj0OPWqUOUjKf4D3jfkb4DBBM0f7H68KFb
8cBkTnbSYtSfqVzBFk7k65Ynj/IHZcwLAbVl8gq5iIszNnqINlpJdss/dblH2V0V
4gHy+gmLUmsHzv/888gU9q5o2cOmXzKcBf7QizZpg6Dl3lXLG1Cq0KvNKFevP4Gq
lUWBrJ9Wy3ah27P3Bc43AWeCauaqHijtBwn+Er5IIISOqLwKTfEh0kWhkjQ3z2ND
zvZpEBbYx1wmg0yMkERGRKK23rQ//L7AhX6xRKyRyVesKamLsqwXIF0G1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFS60B2r3UGrLOjDG56+AYM8csuQMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvVkxyUUhhdmRRYXNzNk1NYm5yNEJnenh5eTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1FASMA0G
CSqGSIb3DQEBCwUAA4IBAQADdlMj+KKvGU2fF/u5MHWJkcet8gCauXLIS/kslLBn
aDAaan9TegsUYVU50dOi6xWU2PzWNOs1fJNJej2d1eyuGjHtXyf3vW8TM/egJ2Ne
/Z4JCqMQ1fx+/rRpPCPHx4GIS/iuMsB5xTO1lBkKd62vvW9hjz00GjXRfpFIOxue
S71Ki/dIiJM7AJKoBaMj0FivOyrHXX0qoGmkYy/2s8qVnIBJZs4HfLQcpaQ6cfvR
g1EmYpDTWNI8prf+WnWiwtGkDD7/RfMk0Rg+iJ5Ij0aD0wMzAMXRMBdQMaU+SO27
7yKyeK3zclVmgsot3u09y6JsQ0OwY879h3XhUqFMPBb8
-----END CERTIFICATE-----