Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa
File:                     Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa (raw, json)
Hash identifier:          GgE0vrsOuqZljITO5ELjw2FU4JIRvHDQwfS6+hiWdE4=
Subject key identifier:   37:18:E5:EC:D3:78:61:D4:09:7D:98:7C:ED:69:E3:AC:A4:61:75:C1
Certificate issuer:       /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial:       01856C413AAAA401D29F8509A085FEE4574B
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa
Signing time:             Sun 01 Jan 2023 07:34:52 +0000
ROA not before:           Sun 01 Jan 2023 07:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16075
IP address blocks:        193.104.220.0/24 maxlen: 24
                          2001:67c:13c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:3a:aa:a4:01:d2:9f:85:09:a0:85:fe:e4:57:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
        Validity
            Not Before: Jan  1 07:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3718e5ecd37861d4097d987ced69e3aca46175c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:33:cf:4e:ef:d3:cc:2d:9f:d7:b9:b1:2d:
                    0b:48:0b:23:ab:c2:05:af:fa:42:4b:3f:b4:35:94:
                    0e:11:cb:a5:a1:a6:dc:f9:19:64:eb:ee:f1:19:01:
                    fa:e5:43:c0:3d:ad:02:29:42:44:0d:c4:82:c5:b0:
                    9e:21:0b:66:04:9d:63:0f:1f:96:27:07:62:82:8e:
                    05:56:2c:0a:05:99:d8:24:78:12:cf:cc:5b:c6:9f:
                    fb:78:33:24:d0:2b:df:cb:d8:78:14:d0:6c:d5:d1:
                    ef:1d:a6:2f:5d:d4:17:fb:a0:57:89:b2:a6:e2:d7:
                    78:64:57:54:14:9e:d3:58:8b:8d:01:3c:e6:1f:01:
                    7a:5c:00:c3:41:11:a8:88:b5:7f:3d:cd:22:ce:58:
                    10:a0:72:b9:14:15:4d:d5:30:7a:0f:5b:04:8c:cc:
                    9e:09:1f:2e:1a:12:b0:74:92:ae:7c:05:08:3c:08:
                    8f:86:68:11:ac:3e:14:37:dd:25:d7:76:e4:c7:7d:
                    44:64:ff:33:d8:88:19:39:40:10:7f:b5:67:70:fc:
                    7f:ab:2b:41:17:d2:17:66:88:dd:5b:f9:59:99:31:
                    5e:16:4f:95:68:71:0c:a9:af:ad:cb:33:7a:41:7b:
                    e6:5e:eb:55:2e:9b:f4:10:1d:65:9e:c8:aa:46:d9:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:E5:EC:D3:78:61:D4:09:7D:98:7C:ED:69:E3:AC:A4:61:75:C1
            X509v3 Authority Key Identifier:
                keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/Nxjl7NN4YdQJfZh87WnjrKRhdcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.220.0/24
                IPv6:
                  2001:67c:13c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:ff:99:b1:32:0e:e4:5c:6e:c4:dd:9a:76:e9:fa:13:9a:
         0a:6b:e2:d3:7a:14:96:7f:48:ff:18:e1:0b:61:3f:92:69:98:
         56:1d:8f:72:55:2b:06:e1:2f:6a:d2:27:2c:26:05:2a:2e:cb:
         8a:ba:32:56:79:d4:10:a6:db:f1:8e:a0:80:4b:d1:a8:3a:2b:
         6d:59:eb:52:c9:69:81:35:68:7f:77:cc:c0:27:06:7d:3d:f8:
         08:4b:7c:f1:2e:0a:3f:a5:71:89:e0:09:a9:6b:62:2a:d6:39:
         e6:fa:3e:3c:b0:27:a5:04:96:8f:e6:2e:82:16:6e:31:96:b8:
         fb:61:31:7d:08:d8:24:e1:4f:35:dc:85:5b:55:62:ed:cd:9c:
         ae:13:83:61:53:fa:78:7b:9c:88:ed:2d:e5:6d:92:24:d0:f5:
         80:88:aa:11:4b:06:eb:bb:e7:7c:dc:28:58:cb:8e:b7:92:aa:
         da:38:b0:dd:09:94:d4:b3:dc:d0:db:46:6b:1a:d4:92:fa:83:
         24:03:f0:5a:3b:3c:82:cb:67:47:8b:43:23:bc:13:a2:99:d9:
         93:28:eb:3c:a4:b6:4f:a9:09:e8:6d:f9:62:c6:f6:35:ee:0b:
         89:37:e6:b5:1c:d2:aa:84:24:50:a4:f1:87:e6:8c:28:98:a7:
         2d:ce:3d:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVsQTqqpAHSn4UJoIX+5FdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGFhMWUzZDhjZjQzYTM2YjQxYmJiMjVkYzhmYTJiYTcx
YzM1ODQwHhcNMjMwMTAxMDczNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzE4ZTVlY2QzNzg2MWQ0MDk3ZDk4N2NlZDY5ZTNhY2E0NjE3NWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzgzz07v08wtn9e5sS0LSAsjq8IF
r/pCSz+0NZQOEculoabc+Rlk6+7xGQH65UPAPa0CKUJEDcSCxbCeIQtmBJ1jDx+W
Jwdigo4FViwKBZnYJHgSz8xbxp/7eDMk0Cvfy9h4FNBs1dHvHaYvXdQX+6BXibKm
4td4ZFdUFJ7TWIuNATzmHwF6XADDQRGoiLV/Pc0izlgQoHK5FBVN1TB6D1sEjMye
CR8uGhKwdJKufAUIPAiPhmgRrD4UN90l13bkx31EZP8z2IgZOUAQf7VncPx/qytB
F9IXZojdW/lZmTFeFk+VaHEMqa+tyzN6QXvmXutVLpv0EB1lnsiqRtkwlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDcY5ezTeGHUCX2YfO1p46ykYXXBMB8GA1UdIwQY
MBaAFGtKoePYz0Oja0G7sl3I+iunHDWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYt
NGIyOWU5ZGM3NGM1LzEvTnhqbDdOTjRZZFFKZlpoODdXbmpyS1JoZGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iMDUyNjgtOGQxOC00NTIxLWFiYjYtNGIyOWU5ZGM3NGM1
LzEvYTBxaDQ5alBRNk5yUWJ1eVhjajZLNmNjTllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWjcMA8E
AgACMAkDBwAgAQZ8ATwwDQYJKoZIhvcNAQELBQADggEBAA0p/5mxMg7kXG7E3Zp2
6foTmgpr4tN6FJZ/SP8Y4QthP5JpmFYdj3JVKwbhL2rSJywmBSouy4q6MlZ51BCm
2/GOoIBL0ag6K21Z61LJaYE1aH93zMAnBn09+AhLfPEuCj+lcYngCalrYirWOeb6
PjywJ6UElo/mLoIWbjGWuPthMX0I2CThTzXchVtVYu3NnK4Tg2FT+nh7nIjtLeVt
kiTQ9YCIqhFLBuu753zcKFjLjreSqto4sN0JlNSz3NDbRmsa1JL6gyQD8Fo7PILL
Z0eLQyO8E6KZ2ZMo6zyktk+pCeht+WLG9jXuC4k35rUc0qqEJFCk8YfmjCiYpy3O
PXY=
-----END CERTIFICATE-----