Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa
File:                     vel3X2gvNJPhR70gna6If0c73z8.roa (raw, json)
Hash identifier:          5P+UtQD3PcWqIXqCLzThh8QXF4B9IT+pnpbOE0s6uC8=
Subject key identifier:   BD:E9:77:5F:68:2F:34:93:E1:47:BD:20:9D:AE:88:7F:47:3B:DF:3F
Certificate issuer:       /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial:       018626E7C9776D37B5EAF041D98503FCA9B3
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa
Signing time:             Mon 06 Feb 2023 13:26:09 +0000
ROA not before:           Mon 06 Feb 2023 13:26:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197898
IP address blocks:        194.48.232.0/22 maxlen: 24
                          2a0c:c740::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:26:e7:c9:77:6d:37:b5:ea:f0:41:d9:85:03:fc:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
        Validity
            Not Before: Feb  6 13:26:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bde9775f682f3493e147bd209dae887f473bdf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:76:9c:8f:7d:2a:48:f2:03:80:e3:51:ac:
                    41:b0:a1:89:a2:fa:72:e3:df:31:50:98:7e:c4:4f:
                    77:33:37:b3:2a:57:15:53:9f:97:b4:ee:fe:1a:3b:
                    5e:34:79:10:0e:34:86:8e:f8:80:c8:59:a3:49:99:
                    f1:d3:15:89:fe:33:80:9b:69:9a:25:63:09:1c:54:
                    db:87:dd:9e:f0:ea:82:c3:0d:85:c4:a9:52:9c:b1:
                    79:93:c4:78:8d:09:70:a4:9f:8f:1c:b2:72:c0:fb:
                    89:fc:4c:49:49:9c:0d:be:ee:b0:9c:a9:cc:7c:7d:
                    9e:74:71:6f:bd:23:0e:15:dc:d2:4e:14:6d:f6:32:
                    33:eb:9a:1d:ce:93:a0:60:8b:44:3b:22:6c:a6:6e:
                    cf:3c:b0:03:a3:65:6c:1c:78:56:1a:d9:41:76:34:
                    1a:08:2b:7f:6b:93:3b:53:ba:bd:ee:90:09:ca:ee:
                    1d:6a:37:62:81:6c:99:2c:2f:7d:b2:25:1a:57:ff:
                    43:2a:a4:a7:9c:c3:7a:e5:2c:b4:77:cc:6b:21:0d:
                    74:a9:2d:ff:ef:5b:47:cd:a5:94:70:ba:64:8e:93:
                    d6:e8:cd:a5:66:67:a4:7f:07:25:5b:9d:78:75:12:
                    3d:ef:40:fc:66:cf:24:45:ce:f4:f7:4a:91:f9:a3:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:77:5F:68:2F:34:93:E1:47:BD:20:9D:AE:88:7F:47:3B:DF:3F
            X509v3 Authority Key Identifier:
                keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/vel3X2gvNJPhR70gna6If0c73z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.232.0/22
                IPv6:
                  2a0c:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:1f:8a:c9:10:55:32:b8:73:4f:6f:78:3a:8a:63:31:4e:
         1f:75:09:69:d8:ac:20:44:40:10:d1:9b:dc:2e:6c:50:c1:ce:
         10:33:ca:07:58:b2:c3:32:b5:44:55:fa:46:2c:81:38:7c:eb:
         b2:ac:6f:8a:d3:ae:0b:1e:28:53:42:3d:c0:f9:e7:da:70:e6:
         a2:e9:1e:7d:c9:c8:a1:d2:f7:1c:e6:f8:24:00:33:98:1e:fe:
         46:94:f8:d9:44:77:78:08:09:56:02:de:e3:97:24:f8:50:0c:
         df:e6:fa:e5:3f:c7:d6:10:33:87:f1:4f:63:34:8e:90:22:47:
         b8:c5:0f:64:e5:c6:b7:60:b2:f4:e1:e8:19:d5:84:45:2f:4e:
         0b:08:e6:72:f4:16:b9:75:d4:c4:02:d6:ab:84:ca:ad:07:0b:
         f7:4c:6b:51:9a:0a:13:96:87:1e:03:c4:23:98:2e:37:e8:0e:
         2e:62:31:a1:f0:a6:50:a8:78:0c:18:30:2a:f1:d9:9a:93:1c:
         fb:0d:c2:05:c9:34:a1:6e:8d:56:18:e6:23:8d:66:e8:57:fa:
         68:6f:05:42:83:ee:a3:7e:c8:05:7b:68:08:e7:08:2f:b0:fb:
         fc:f4:15:30:75:1e:46:3a:95:b8:36:57:9c:41:30:0b:1c:5b:
         4f:e2:08:3b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYm58l3bTe16vBB2YUD/KmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMzM5ZDMwNDQ5OWQwNjlhZWNkOGJkMGU4ZmJhMDJlNTIy
ZjU3NmEwHhcNMjMwMjA2MTMyNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGU5Nzc1ZjY4MmYzNDkzZTE0N2JkMjA5ZGFlODg3ZjQ3M2JkZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeR2nI99KkjyA4DjUaxBsKGJovpy
498xUJh+xE93MzezKlcVU5+XtO7+GjteNHkQDjSGjviAyFmjSZnx0xWJ/jOAm2ma
JWMJHFTbh92e8OqCww2FxKlSnLF5k8R4jQlwpJ+PHLJywPuJ/ExJSZwNvu6wnKnM
fH2edHFvvSMOFdzSThRt9jIz65odzpOgYItEOyJspm7PPLADo2VsHHhWGtlBdjQa
CCt/a5M7U7q97pAJyu4dajdigWyZLC99siUaV/9DKqSnnMN65Sy0d8xrIQ10qS3/
71tHzaWUcLpkjpPW6M2lZmekfwclW514dRI970D8Zs8kRc7090qR+aMu+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL3pd19oLzST4Ue9IJ2uiH9HO98/MB8GA1UdIwQY
MBaAFEAznTBEmdBprs2L0Oj7oC5SL1dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgt
MDMxZTU4OTA1OTIzLzEvdmVsM1gyZ3ZOSlBoUjcwZ25hNklmMGM3M3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgtMDMxZTU4OTA1OTIz
LzEvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwjDoMA0E
AgACMAcDBQAqDMdAMA0GCSqGSIb3DQEBCwUAA4IBAQBN5x+KyRBVMrhzT294Oopj
MU4fdQlp2KwgREAQ0ZvcLmxQwc4QM8oHWLLDMrVEVfpGLIE4fOuyrG+K064LHihT
Qj3A+efacOai6R59ycih0vcc5vgkADOYHv5GlPjZRHd4CAlWAt7jlyT4UAzf5vrl
P8fWEDOH8U9jNI6QIke4xQ9k5ca3YLL04egZ1YRFL04LCOZy9Ba5ddTEAtarhMqt
Bwv3TGtRmgoTloceA8QjmC436A4uYjGh8KZQqHgMGDAq8dmakxz7DcIFyTShbo1W
GOYjjWboV/pobwVCg+6jfsgFe2gI5wgvsPv89BUwdR5GOpW4NlecQTALHFtP4gg7
-----END CERTIFICATE-----