Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/XEU1-4rwng5He57poEgxaGFhTeI.roa
File:                     XEU1-4rwng5He57poEgxaGFhTeI.roa (raw, json)
Hash identifier:          zxjptkpev1SuCRqJdWNKK+VOggliUEXkOWTRHVzLTvI=
Subject key identifier:   5C:45:35:FB:8A:F0:9E:0E:47:7B:9E:E9:A0:48:31:68:61:61:4D:E2
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       01878FD089F8CE35AEACAFE80D6CA5BBC915
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/XEU1-4rwng5He57poEgxaGFhTeI.roa
Signing time:             Mon 17 Apr 2023 15:23:41 +0000
ROA not before:           Mon 17 Apr 2023 15:23:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        185.162.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8f:d0:89:f8:ce:35:ae:ac:af:e8:0d:6c:a5:bb:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Apr 17 15:23:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c4535fb8af09e0e477b9ee9a048316861614de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:6a:a7:bf:86:ec:cd:f1:02:ce:5c:1d:7e:
                    09:01:84:49:9f:e3:78:2e:cc:7d:b1:ea:ed:4e:08:
                    c7:45:e7:bc:87:eb:a6:5d:6c:de:da:0b:df:ea:b8:
                    7a:a3:cd:8a:1d:e4:9e:b9:e8:d4:d1:3d:9b:7e:49:
                    78:44:9f:3f:00:d3:a7:a3:24:7c:35:40:72:f7:62:
                    a5:57:53:83:40:c3:32:bd:0f:44:df:5c:fd:8c:d4:
                    66:10:e6:58:dd:d6:11:7b:94:3a:29:36:32:af:d2:
                    f5:0f:82:62:09:03:b2:99:e3:71:e5:f0:85:13:52:
                    a7:fd:35:57:5e:ee:69:77:fd:54:f2:df:a1:1e:cf:
                    09:87:3c:9a:13:79:66:35:fd:31:53:f8:72:69:c5:
                    d3:ba:6f:9f:33:74:1f:53:46:ef:d1:22:d6:08:7b:
                    19:bf:e3:61:1c:1b:fa:b8:ea:26:5c:9f:f7:12:80:
                    ee:cb:a1:0a:cc:c5:e9:51:af:d4:29:de:ab:75:06:
                    03:38:c9:12:a6:9a:2a:f4:d6:ba:bf:19:50:5f:fc:
                    7c:17:ee:a0:dd:b2:18:b7:0c:85:b2:3e:57:8e:a0:
                    e9:2f:11:9b:d7:c0:0d:e9:71:a4:72:53:96:8b:1b:
                    2c:6e:c2:f1:09:d1:c1:a7:ac:e8:6d:d1:94:47:dc:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:45:35:FB:8A:F0:9E:0E:47:7B:9E:E9:A0:48:31:68:61:61:4D:E2
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/XEU1-4rwng5He57poEgxaGFhTeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:ac:38:64:51:f8:b5:fd:ce:ca:53:9f:3a:32:28:85:50:
         9b:c7:6b:0f:85:c9:a5:d4:1b:fa:05:3f:84:1a:21:54:b2:77:
         bd:01:65:7e:a8:f4:9b:2b:53:a3:32:f4:d2:41:77:d6:40:04:
         4b:9d:0c:f4:67:bf:fe:9f:5f:6d:37:45:b5:dd:8a:e5:0a:44:
         5b:d3:85:28:57:34:09:14:ce:30:50:f7:c4:99:0b:9d:b2:6b:
         2e:ac:a0:e7:4d:b0:fd:40:67:19:55:e4:07:aa:f5:55:70:21:
         aa:fe:84:2e:7e:c3:f0:7d:ff:24:c7:74:3c:e2:16:b4:70:de:
         29:2d:b5:3a:e6:17:45:4f:7d:a3:b9:64:e5:f7:f4:90:99:65:
         69:44:6f:26:b5:f5:75:04:c7:0a:91:15:06:da:59:01:c9:cf:
         65:27:6e:ca:9e:80:c0:36:62:15:e3:a9:8d:7d:3a:39:97:52:
         d9:ed:c6:97:b4:9a:ac:18:6d:86:7e:ad:b2:5d:9d:b2:7b:bd:
         61:48:d2:80:92:c6:67:51:69:9c:a3:ae:b6:59:f3:14:d0:13:
         26:ac:3a:c3:59:3b:be:6e:80:f2:70:cb:5d:1a:40:ca:ff:9a:
         3c:ba:30:04:6e:1a:43:f4:81:66:0b:b9:d8:3a:68:1d:05:53:
         bb:f4:e7:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeP0In4zjWurK/oDWylu8kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2
ODQ3NjkwHhcNMjMwNDE3MTUyMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzQ1MzVmYjhhZjA5ZTBlNDc3YjllZTlhMDQ4MzE2ODYxNjE0ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWxqp7+G7M3xAs5cHX4JAYRJn+N4
Lsx9sertTgjHRee8h+umXWze2gvf6rh6o82KHeSeuejU0T2bfkl4RJ8/ANOnoyR8
NUBy92KlV1ODQMMyvQ9E31z9jNRmEOZY3dYRe5Q6KTYyr9L1D4JiCQOymeNx5fCF
E1Kn/TVXXu5pd/1U8t+hHs8JhzyaE3lmNf0xU/hyacXTum+fM3QfU0bv0SLWCHsZ
v+NhHBv6uOomXJ/3EoDuy6EKzMXpUa/UKd6rdQYDOMkSppoq9Na6vxlQX/x8F+6g
3bIYtwyFsj5XjqDpLxGb18AN6XGkclOWixssbsLxCdHBp6zobdGUR9y9YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxFNfuK8J4OR3ue6aBIMWhhYU3iMB8GA1UdIwQY
MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt
OWY5NTM2YmIyYzM3LzEvWEVVMS00cnduZzVIZTU3cG9FZ3hhR0ZoVGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3
LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaJQMA0G
CSqGSIb3DQEBCwUAA4IBAQBraKw4ZFH4tf3OylOfOjIohVCbx2sPhcml1Bv6BT+E
GiFUsne9AWV+qPSbK1OjMvTSQXfWQARLnQz0Z7/+n19tN0W13YrlCkRb04UoVzQJ
FM4wUPfEmQudsmsurKDnTbD9QGcZVeQHqvVVcCGq/oQufsPwff8kx3Q84ha0cN4p
LbU65hdFT32juWTl9/SQmWVpRG8mtfV1BMcKkRUG2lkByc9lJ27KnoDANmIV46mN
fTo5l1LZ7caXtJqsGG2Gfq2yXZ2ye71hSNKAksZnUWmco662WfMU0BMmrDrDWTu+
boDycMtdGkDK/5o8ujAEbhpD9IFmC7nYOmgdBVO79OeI
-----END CERTIFICATE-----