Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/TRFUTe1QC6tAtb60WDYqvOCWnro.roa
File:                     TRFUTe1QC6tAtb60WDYqvOCWnro.roa (raw, json)
Hash identifier:          7Fx40jkKKfumOjCK+psQM9FKNoGBcF7DzjiExAT2o0c=
Subject key identifier:   4D:11:54:4D:ED:50:0B:AB:40:B5:BE:B4:58:36:2A:BC:E0:96:9E:BA
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       01856C1391330274BE7CD53C6FD1BA9E60B7
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/TRFUTe1QC6tAtb60WDYqvOCWnro.roa
Signing time:             Sun 01 Jan 2023 06:44:59 +0000
ROA not before:           Sun 01 Jan 2023 06:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44417
IP address blocks:        46.166.192.0/21 maxlen: 21
                          46.166.200.0/21 maxlen: 21
                          2a04:3800::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:91:33:02:74:be:7c:d5:3c:6f:d1:ba:9e:60:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jan  1 06:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d11544ded500bab40b5beb458362abce0969eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:b4:b4:76:a0:90:75:71:32:93:4a:1d:74:
                    b6:0c:84:78:b3:c2:d0:9d:a9:c7:02:ec:0e:5b:59:
                    94:1b:e5:28:5a:33:60:08:5b:98:11:16:cd:ca:93:
                    70:28:32:4b:a3:8c:49:dd:78:ae:39:51:76:07:5d:
                    64:7b:99:d2:dc:f4:fb:5b:39:e2:50:22:63:5a:79:
                    73:64:46:59:08:75:61:56:bc:9b:22:79:da:3f:e3:
                    ff:c5:1d:d7:7d:c3:7d:5d:fc:f2:73:95:44:95:0d:
                    e0:17:75:3e:c2:7b:ca:6a:1e:f0:53:da:df:a6:09:
                    8f:c8:91:74:c9:54:a2:ac:16:4a:ba:a9:32:25:1c:
                    f0:b4:c1:18:d2:9f:80:99:28:1a:a8:23:3a:e1:30:
                    b6:a9:43:4b:3b:35:85:54:e3:6e:da:35:22:7b:cd:
                    68:c1:39:ce:8e:b6:ff:ef:94:dd:1b:b7:e0:a5:a4:
                    b3:fc:6b:ac:58:a9:d0:4c:78:e7:36:18:2b:df:a4:
                    1d:cd:0c:28:33:a7:25:5b:06:ae:89:ec:b9:66:72:
                    94:6c:da:0c:d8:13:ee:3e:0f:53:27:8a:64:55:f9:
                    48:9a:e6:db:fa:7c:bc:b3:26:f0:93:04:8c:d6:01:
                    b3:29:f7:40:f5:6c:5a:63:a2:fb:cb:c5:fe:83:12:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:54:4D:ED:50:0B:AB:40:B5:BE:B4:58:36:2A:BC:E0:96:9E:BA
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/TRFUTe1QC6tAtb60WDYqvOCWnro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.166.192.0/20
                IPv6:
                  2a04:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:5c:fc:62:3d:e6:5e:42:64:b8:dc:66:3e:7a:58:78:f8:42:
         95:2c:a7:17:32:7c:3b:98:00:63:00:76:70:1b:39:01:7a:54:
         b0:f4:8a:ee:f4:40:63:ed:bd:39:ea:db:76:f8:3e:d9:6f:62:
         cb:8c:2c:07:c2:4d:c6:9a:28:23:42:20:32:04:7a:c5:62:75:
         a3:d0:8b:0d:e0:b6:a8:fc:2b:e4:11:e5:45:8d:97:9a:10:ed:
         f0:e2:b4:5d:fa:0b:08:d7:4b:76:f1:9c:d1:2f:12:d1:df:4e:
         2f:0d:17:ce:d7:a9:8f:68:87:47:78:f1:51:e9:63:6c:eb:36:
         9e:70:1f:1f:8f:75:ca:b5:20:27:c9:87:ca:8b:c9:f1:ec:da:
         e3:8f:93:2b:6a:cd:bc:3e:29:a5:d8:fc:f7:58:f2:cb:b0:7b:
         55:35:3d:c7:6e:71:96:db:73:07:b2:29:f4:cf:d9:bc:0a:70:
         48:aa:cc:7e:ee:f4:4e:e3:71:c5:5f:00:8b:7d:29:0c:94:9f:
         4e:3e:9d:44:2a:2f:93:a2:4e:38:88:f7:c8:fe:71:60:cc:ac:
         a4:2d:15:f2:58:c3:99:f4:5b:cb:16:9a:26:f7:66:c6:de:25:
         33:35:9b:57:1d:22:15:f2:8e:09:1c:96:e9:e0:03:a9:e1:c9:
         f2:ae:43:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVsE5EzAnS+fNU8b9G6nmC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjMwMTAxMDY0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDExNTQ0ZGVkNTAwYmFiNDBiNWJlYjQ1ODM2MmFiY2UwOTY5ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCi0tHagkHVxMpNKHXS2DIR4s8LQ
nanHAuwOW1mUG+UoWjNgCFuYERbNypNwKDJLo4xJ3XiuOVF2B11ke5nS3PT7Wzni
UCJjWnlzZEZZCHVhVrybInnaP+P/xR3XfcN9Xfzyc5VElQ3gF3U+wnvKah7wU9rf
pgmPyJF0yVSirBZKuqkyJRzwtMEY0p+AmSgaqCM64TC2qUNLOzWFVONu2jUie81o
wTnOjrb/75TdG7fgpaSz/GusWKnQTHjnNhgr36QdzQwoM6clWwauiey5ZnKUbNoM
2BPuPg9TJ4pkVflImubb+ny8sybwkwSM1gGzKfdA9WxaY6L7y8X+gxKnzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE0RVE3tUAurQLW+tFg2Krzglp66MB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvVFJGVVRlMVFDNnRBdGI2MFdEWXF2T0NXbnJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQELqbAMA8E
AgACMAkDBwAqBDgAAAAwDQYJKoZIhvcNAQELBQADggEBAARc/GI95l5CZLjcZj56
WHj4QpUspxcyfDuYAGMAdnAbOQF6VLD0iu70QGPtvTnq23b4PtlvYsuMLAfCTcaa
KCNCIDIEesVidaPQiw3gtqj8K+QR5UWNl5oQ7fDitF36CwjXS3bxnNEvEtHfTi8N
F87XqY9oh0d48VHpY2zrNp5wHx+Pdcq1ICfJh8qLyfHs2uOPkytqzbw+KaXY/PdY
8suwe1U1PcducZbbcweyKfTP2bwKcEiqzH7u9E7jccVfAIt9KQyUn04+nUQqL5Oi
TjiI98j+cWDMrKQtFfJYw5n0W8sWmib3ZsbeJTM1m1cdIhXyjgkclungA6nhyfKu
Qws=
-----END CERTIFICATE-----