Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/rtwng23gD5TOth1xWDyQAAZyCco.roa
File:                     rtwng23gD5TOth1xWDyQAAZyCco.roa (raw, json)
Hash identifier:          LsQ8vBO7tmMPGDwBd2KN6HqJOJKGuhzx9LN3sdD2KKI=
Subject key identifier:   AE:DC:27:83:6D:E0:0F:94:CE:B6:1D:71:58:3C:90:00:06:72:09:CA
Certificate issuer:       /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial:       01857315BF3D15C40BD58303B142F236CEC3
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/rtwng23gD5TOth1xWDyQAAZyCco.roa
Signing time:             Mon 02 Jan 2023 15:24:43 +0000
ROA not before:           Mon 02 Jan 2023 15:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200303
IP address blocks:        2001:678:c20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:bf:3d:15:c4:0b:d5:83:03:b1:42:f2:36:ce:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
        Validity
            Not Before: Jan  2 15:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aedc27836de00f94ceb61d71583c9000067209ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:2e:db:2a:18:5e:f2:5e:92:51:39:f5:6a:
                    f6:70:04:db:57:83:6b:24:e7:ee:0d:45:10:0b:b9:
                    d1:a1:95:4d:71:be:62:9d:dd:75:77:f8:5b:b9:65:
                    8f:ad:4f:ff:1e:3b:73:7d:ef:73:e0:76:e8:74:4a:
                    7d:2d:54:d7:60:73:8a:a6:93:64:e1:63:6f:91:91:
                    69:22:7b:3f:70:56:c5:e8:98:7b:b1:41:b7:ef:f3:
                    4f:1c:f9:f5:fe:16:53:87:10:ae:c8:ca:40:08:8f:
                    08:ad:ac:da:50:63:b0:c4:05:55:9b:40:74:0e:55:
                    53:f2:23:72:2b:bc:a9:4a:fa:87:ea:95:03:b1:18:
                    4a:6e:d3:8d:80:37:8b:23:16:86:e9:f0:c1:13:9f:
                    4f:69:48:e3:2a:4f:54:4f:e5:18:12:b5:2c:ef:6c:
                    e9:db:83:27:02:74:a5:33:d2:03:04:cb:f7:dd:4b:
                    84:fe:d9:1a:6a:b8:e9:a9:de:e5:bd:df:35:71:b8:
                    03:ac:07:3a:3c:ac:57:18:4f:dc:59:be:e0:a4:1f:
                    f8:9b:09:89:9a:6e:0f:fb:f2:9b:10:f7:3d:b6:41:
                    dd:c5:f9:2e:80:c9:d4:0b:e3:d1:fd:02:06:91:f0:
                    00:1c:17:e1:f9:63:b9:06:51:63:43:cc:b7:2a:fa:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DC:27:83:6D:E0:0F:94:CE:B6:1D:71:58:3C:90:00:06:72:09:CA
            X509v3 Authority Key Identifier:
                keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/rtwng23gD5TOth1xWDyQAAZyCco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c20::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:d8:71:78:cf:13:e4:a9:f0:5e:0c:01:8f:a7:8e:42:12:
         40:96:69:cb:cf:bc:ff:ac:ce:b7:0e:ca:b8:d2:c4:81:b4:db:
         e9:1f:10:40:a7:99:41:cc:59:bf:b3:53:5b:f8:83:85:6e:8b:
         f2:32:7f:0d:b4:85:1b:9c:3d:5e:5e:ba:80:f7:73:3c:16:2b:
         f9:29:0f:e2:f7:be:24:f0:fe:e6:ee:fd:53:d7:92:f7:77:6c:
         da:7c:b3:4e:1e:eb:d6:5d:eb:a1:cf:d5:e3:bf:0c:d0:ff:d3:
         cc:e0:f1:91:63:b0:48:47:80:19:17:95:82:7f:e7:0b:73:8f:
         83:29:cd:7a:f9:3c:9c:8f:36:54:6a:3e:4a:2d:1d:a0:8b:03:
         a6:32:e4:3e:7f:50:58:e9:1e:64:18:87:d1:23:4a:03:a2:b4:
         6f:15:f5:88:be:f2:72:f8:e8:17:a3:f1:3b:e2:cd:f0:ad:8c:
         c6:bd:1e:b2:e3:8a:b6:e0:8e:a2:5c:ca:f1:04:52:ef:a2:d9:
         a9:8d:40:78:e9:65:e1:49:2f:39:a5:9a:40:6f:8e:8d:fe:b5:
         5e:49:15:79:0b:ad:fe:ee:b6:ca:07:73:e9:7e:79:4f:9a:dc:
         0d:4c:3f:e1:79:13:c9:0c:fb:c8:1c:48:0a:6d:51:48:7a:cb:
         8e:bb:3e:a1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVzFb89FcQL1YMDsULyNs7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYTEyNDRhM2M1N2I5ZmViYjY4ZDY4NGE4MzJiMDY3MWUz
ZTRjODQwHhcNMjMwMTAyMTUyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWRjMjc4MzZkZTAwZjk0Y2ViNjFkNzE1ODNjOTAwMDA2NzIwOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJMu2yoYXvJeklE59Wr2cATbV4Nr
JOfuDUUQC7nRoZVNcb5ind11d/hbuWWPrU//Hjtzfe9z4HbodEp9LVTXYHOKppNk
4WNvkZFpIns/cFbF6Jh7sUG37/NPHPn1/hZThxCuyMpACI8IrazaUGOwxAVVm0B0
DlVT8iNyK7ypSvqH6pUDsRhKbtONgDeLIxaG6fDBE59PaUjjKk9UT+UYErUs72zp
24MnAnSlM9IDBMv33UuE/tkaarjpqd7lvd81cbgDrAc6PKxXGE/cWb7gpB/4mwmJ
mm4P+/KbEPc9tkHdxfkugMnUC+PR/QIGkfAAHBfh+WO5BlFjQ8y3KvomuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK7cJ4Nt4A+UzrYdcVg8kAAGcgnKMB8GA1UdIwQY
MBaAFNGhJEo8V7n+u2jWhKgysGcePkyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGFFa1NqeFh1ZjY3YU5hRXFES3daeDQtVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xNjY4MmEtYWZkNy00N2JlLThmOTAt
YjhiNGNhOTAyZTRjLzEvcnR3bmcyM2dENVRPdGgxeFdEeVFBQVp5Q2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xNjY4MmEtYWZkNy00N2JlLThmOTAtYjhiNGNhOTAyZTRj
LzEvMGFFa1NqeFh1ZjY3YU5hRXFES3daeDQtVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwg
MA0GCSqGSIb3DQEBCwUAA4IBAQByudhxeM8T5KnwXgwBj6eOQhJAlmnLz7z/rM63
Dsq40sSBtNvpHxBAp5lBzFm/s1Nb+IOFbovyMn8NtIUbnD1eXrqA93M8Fiv5KQ/i
974k8P7m7v1T15L3d2zafLNOHuvWXeuhz9XjvwzQ/9PM4PGRY7BIR4AZF5WCf+cL
c4+DKc16+TycjzZUaj5KLR2giwOmMuQ+f1BY6R5kGIfRI0oDorRvFfWIvvJy+OgX
o/E74s3wrYzGvR6y44q24I6iXMrxBFLvotmpjUB46WXhSS85pZpAb46N/rVeSRV5
C63+7rbKB3PpfnlPmtwNTD/heRPJDPvIHEgKbVFIesuOuz6h
-----END CERTIFICATE-----