Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7sH9QlBooUpX5IazX0mDrJ6cxJ4.roa
File:                     7sH9QlBooUpX5IazX0mDrJ6cxJ4.roa (raw, json)
Hash identifier:          WhbLH6Es7fMGS0PDXmVVni2BDnB8cKvhPwyNvgrBuAE=
Subject key identifier:   EE:C1:FD:42:50:68:A1:4A:57:E4:86:B3:5F:49:83:AC:9E:9C:C4:9E
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       01856E2FA001B0B9590A327BE323F5A46352
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7sH9QlBooUpX5IazX0mDrJ6cxJ4.roa
Signing time:             Sun 01 Jan 2023 16:34:52 +0000
ROA not before:           Sun 01 Jan 2023 16:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61008
IP address blocks:        46.143.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:a0:01:b0:b9:59:0a:32:7b:e3:23:f5:a4:63:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  1 16:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eec1fd425068a14a57e486b35f4983ac9e9cc49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:e6:cc:ff:1d:46:e4:c3:79:c2:3d:bf:9c:
                    26:e7:32:64:f2:13:22:e2:04:29:6b:37:c8:41:6e:
                    b6:c4:2c:e8:cc:3f:27:f5:e4:e0:c2:17:72:03:7d:
                    74:a4:92:ef:56:21:b0:ad:05:46:31:67:43:03:7f:
                    e9:58:96:dc:ea:1f:b9:21:33:00:c6:a9:95:59:19:
                    b9:bb:dd:d7:4a:70:e6:4d:4f:99:fe:87:2e:32:29:
                    34:7e:47:d9:78:62:74:47:1b:77:d7:8f:c5:ee:6b:
                    f0:20:09:69:59:56:92:6c:b9:ee:98:ea:33:80:a2:
                    0b:cd:49:18:29:09:bb:51:d2:16:c2:6b:fe:e7:aa:
                    66:51:07:e8:f4:20:02:b8:88:4c:7b:88:16:44:d3:
                    6b:be:20:57:39:74:21:93:f6:1a:93:dc:ab:9e:ba:
                    52:aa:ec:7b:e0:b3:ba:0d:0e:a3:29:82:f4:ec:78:
                    9f:e0:6e:0c:bf:9a:8f:2f:0e:38:aa:d8:54:d9:e3:
                    9e:d4:3c:ad:77:04:bd:56:02:a8:1a:f6:3e:30:9b:
                    f0:07:42:2c:53:33:b9:d2:d4:66:e6:74:54:83:bd:
                    77:c2:72:d2:2c:db:07:d2:e4:b3:a9:80:8e:3e:b4:
                    6c:7a:2b:c0:c2:fb:5a:b8:dc:77:26:14:39:8f:46:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:FD:42:50:68:A1:4A:57:E4:86:B3:5F:49:83:AC:9E:9C:C4:9E
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7sH9QlBooUpX5IazX0mDrJ6cxJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:a0:e4:be:b4:10:16:3c:a2:54:a0:cd:01:d9:40:0f:bd:
         6d:9a:86:ec:64:ca:33:a1:bd:e8:5e:eb:fa:ec:40:2a:53:a7:
         82:2e:fd:c1:58:4e:03:a4:eb:5d:82:58:e8:c6:db:b7:35:df:
         2c:9f:c9:45:92:46:d7:bf:16:6c:4d:5e:94:de:d0:3d:79:11:
         4d:a8:e0:a4:e0:c1:11:40:d3:f8:bb:25:32:d2:9d:b8:42:04:
         b8:f2:85:be:7d:a3:b5:97:bb:86:2b:ae:44:9d:db:25:61:61:
         a9:b1:44:9d:09:3d:9e:57:45:ca:b4:05:6f:0c:a7:e9:46:6e:
         b2:b5:fd:9f:6e:58:a1:b5:dc:57:16:0c:45:5b:05:90:1f:4c:
         06:f9:b1:22:9f:d8:66:08:ab:ba:6a:90:b2:64:a5:73:b3:52:
         93:b4:e1:ca:cb:6f:1f:c0:78:77:ce:d0:70:a0:eb:20:54:cb:
         23:d2:66:8c:26:de:df:c9:af:c0:62:c2:5b:9c:3f:b3:80:bf:
         29:cd:12:f2:e3:1b:78:fa:3e:fa:a9:0f:87:bd:8f:d1:11:84:
         66:5c:eb:6b:13:93:bc:f8:a6:7a:44:09:91:6e:94:c8:6e:44:
         d6:da:e3:a4:dc:ac:83:5b:6e:8a:d9:99:76:4d:75:a5:41:97:
         e0:41:b8:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL6ABsLlZCjJ74yP1pGNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjMwMTAxMTYzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWMxZmQ0MjUwNjhhMTRhNTdlNDg2YjM1ZjQ5ODNhYzllOWNjNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZXmzP8dRuTDecI9v5wm5zJk8hMi
4gQpazfIQW62xCzozD8n9eTgwhdyA310pJLvViGwrQVGMWdDA3/pWJbc6h+5ITMA
xqmVWRm5u93XSnDmTU+Z/ocuMik0fkfZeGJ0Rxt314/F7mvwIAlpWVaSbLnumOoz
gKILzUkYKQm7UdIWwmv+56pmUQfo9CACuIhMe4gWRNNrviBXOXQhk/Yak9yrnrpS
qux74LO6DQ6jKYL07Hif4G4Mv5qPLw44qthU2eOe1DytdwS9VgKoGvY+MJvwB0Is
UzO50tRm5nRUg713wnLSLNsH0uSzqYCOPrRseivAwvtauNx3JhQ5j0YraQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7B/UJQaKFKV+SGs19Jg6yenMSeMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvN3NIOVFsQm9vVXBYNUlhelgwbURySjZjeEo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELo/wMA0G
CSqGSIb3DQEBCwUAA4IBAQAK/qDkvrQQFjyiVKDNAdlAD71tmobsZMozob3oXuv6
7EAqU6eCLv3BWE4DpOtdgljoxtu3Nd8sn8lFkkbXvxZsTV6U3tA9eRFNqOCk4MER
QNP4uyUy0p24QgS48oW+faO1l7uGK65EndslYWGpsUSdCT2eV0XKtAVvDKfpRm6y
tf2fblihtdxXFgxFWwWQH0wG+bEin9hmCKu6apCyZKVzs1KTtOHKy28fwHh3ztBw
oOsgVMsj0maMJt7fya/AYsJbnD+zgL8pzRLy4xt4+j76qQ+HvY/REYRmXOtrE5O8
+KZ6RAmRbpTIbkTW2uOk3KyDW26K2Zl2TXWlQZfgQbgC
-----END CERTIFICATE-----