Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/sQoucyoOq_2GjrUnBAQnYHxXzgg.roa
File:                     sQoucyoOq_2GjrUnBAQnYHxXzgg.roa (raw, json)
Hash identifier:          jn5V6rG9ZPfIScruzAPg3Tt0OrjciRTxwzhcNb/57OY=
Subject key identifier:   B1:0A:2E:73:2A:0E:AB:FD:86:8E:B5:27:04:04:27:60:7C:57:CE:08
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       0186EAC866A6E844DDF651CB139353070C2B
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/sQoucyoOq_2GjrUnBAQnYHxXzgg.roa
Signing time:             Thu 16 Mar 2023 14:17:27 +0000
ROA not before:           Thu 16 Mar 2023 14:17:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a04:1f41::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ea:c8:66:a6:e8:44:dd:f6:51:cb:13:93:53:07:0c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: Mar 16 14:17:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b10a2e732a0eabfd868eb527040427607c57ce08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:59:67:18:80:b7:fa:90:7e:6e:6c:8d:49:
                    c8:cc:09:52:17:3d:48:7b:da:61:f7:4a:d6:9c:df:
                    1c:4c:38:88:7c:65:55:8b:fa:4b:0c:dd:e0:51:fc:
                    48:19:e4:16:c5:d7:f7:56:e1:fa:fd:24:ba:8d:e0:
                    e6:32:b2:32:ab:b8:68:70:9d:d8:48:a7:c0:32:22:
                    44:1b:1d:3c:f6:28:fe:84:4e:07:d2:f0:97:d8:9a:
                    d7:0f:e3:19:c6:0f:8b:ba:83:e1:c2:f7:7d:48:0a:
                    a4:5a:07:db:34:bf:5d:a9:eb:69:4e:db:98:df:fc:
                    40:dc:02:c3:84:99:28:0c:4d:84:f6:2e:21:99:54:
                    61:48:59:e9:8d:1b:a0:39:b5:aa:32:a8:df:da:6c:
                    25:41:66:45:71:8d:ab:3b:e5:53:63:df:88:50:e0:
                    c8:99:21:43:10:ae:75:0f:c0:bb:4f:85:4d:44:a3:
                    28:ed:c1:8a:9b:7e:48:ae:f9:53:d4:20:d1:00:03:
                    76:f0:ac:c4:90:4b:1e:97:c9:97:cd:2e:2f:7a:02:
                    5d:fd:62:c0:8b:05:c4:b1:9b:c0:72:e8:fd:20:92:
                    a5:46:27:3b:56:7d:b7:ac:b9:aa:6f:45:3d:e8:6d:
                    ad:b0:84:49:46:a6:5c:36:c3:fe:0c:c7:62:00:3f:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0A:2E:73:2A:0E:AB:FD:86:8E:B5:27:04:04:27:60:7C:57:CE:08
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/sQoucyoOq_2GjrUnBAQnYHxXzgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1f41::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:af:ce:bb:3d:0c:51:f7:7c:d0:f5:80:1b:22:4c:65:e1:35:
         31:2c:97:38:a0:70:90:2f:fe:a0:e0:82:fe:cd:04:bf:f6:c0:
         ef:1e:89:a4:37:35:15:97:8a:56:ad:53:24:fe:21:4b:6b:19:
         aa:d4:8e:04:52:4e:35:c5:ab:e7:f5:8e:05:de:90:90:69:2b:
         0e:a9:d1:a7:ba:3e:e1:d9:99:14:22:0f:12:03:17:55:1e:f0:
         8e:bd:fa:a2:10:1d:ef:d7:43:e1:6d:6a:74:29:96:1d:f9:b5:
         58:8b:cc:72:cc:e9:50:d7:a9:a0:f5:96:c9:c3:36:cf:02:8e:
         d5:b0:23:a9:22:f4:1e:e2:1b:e3:2b:5a:df:d2:08:b6:9d:14:
         37:b9:c4:e9:44:6c:a7:e6:f7:5a:27:7c:03:7f:85:11:30:a3:
         8e:e2:c8:4a:da:04:ab:d1:4d:b9:7a:e8:02:ca:4f:f7:09:82:
         65:8c:af:f9:9d:01:d1:3a:80:9d:73:a8:fd:27:bf:a2:c6:1a:
         de:31:94:10:c9:e7:65:13:2e:17:6c:ce:38:57:5d:e5:b2:91:
         5d:e4:8c:6d:71:7f:95:d6:12:b8:95:77:9e:97:1f:cc:e6:c1:
         b7:7e:89:06:ea:f0:ca:51:44:7d:f0:b5:63:30:6d:ad:5b:75:
         3d:92:de:5a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYbqyGam6ETd9lHLE5NTBwwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjMwMzE2MTQxNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTBhMmU3MzJhMGVhYmZkODY4ZWI1MjcwNDA0Mjc2MDdjNTdjZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxZZxiAt/qQfm5sjUnIzAlSFz1I
e9ph90rWnN8cTDiIfGVVi/pLDN3gUfxIGeQWxdf3VuH6/SS6jeDmMrIyq7hocJ3Y
SKfAMiJEGx089ij+hE4H0vCX2JrXD+MZxg+LuoPhwvd9SAqkWgfbNL9dqetpTtuY
3/xA3ALDhJkoDE2E9i4hmVRhSFnpjRugObWqMqjf2mwlQWZFcY2rO+VTY9+IUODI
mSFDEK51D8C7T4VNRKMo7cGKm35IrvlT1CDRAAN28KzEkEsel8mXzS4vegJd/WLA
iwXEsZvAcuj9IJKlRic7Vn23rLmqb0U96G2tsIRJRqZcNsP+DMdiAD93BQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLEKLnMqDqv9ho61JwQEJ2B8V84IMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvc1FvdWN5b09xXzJHanJVbkJBUW5ZSHhYemdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgQfQTAN
BgkqhkiG9w0BAQsFAAOCAQEAaa/Ouz0MUfd80PWAGyJMZeE1MSyXOKBwkC/+oOCC
/s0Ev/bA7x6JpDc1FZeKVq1TJP4hS2sZqtSOBFJONcWr5/WOBd6QkGkrDqnRp7o+
4dmZFCIPEgMXVR7wjr36ohAd79dD4W1qdCmWHfm1WIvMcszpUNepoPWWycM2zwKO
1bAjqSL0HuIb4yta39IItp0UN7nE6URsp+b3Wid8A3+FETCjjuLIStoEq9FNuXro
AspP9wmCZYyv+Z0B0TqAnXOo/Se/osYa3jGUEMnnZRMuF2zOOFdd5bKRXeSMbXF/
ldYSuJV3npcfzObBt36JBurwylFEffC1YzBtrVt1PZLeWg==
-----END CERTIFICATE-----