Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/rcGYi_XmAx-970rY9WgodlCLwyo.roa
File:                     rcGYi_XmAx-970rY9WgodlCLwyo.roa (raw, json)
Hash identifier:          6xtjsak5dVgiSehA5Uo4oP+Ybvc5zLDdfUIgFTheSZE=
Subject key identifier:   AD:C1:98:8B:F5:E6:03:1F:BD:EF:4A:D8:F5:68:28:76:50:8B:C3:2A
Certificate issuer:       /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial:       01856E0AFBBF0F5D2472A6B233CB1CE9D0B7
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/rcGYi_XmAx-970rY9WgodlCLwyo.roa
Signing time:             Sun 01 Jan 2023 15:54:51 +0000
ROA not before:           Sun 01 Jan 2023 15:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2001:678:2cc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:0a:fb:bf:0f:5d:24:72:a6:b2:33:cb:1c:e9:d0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
        Validity
            Not Before: Jan  1 15:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=adc1988bf5e6031fbdef4ad8f5682876508bc32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6b:77:60:61:71:7d:d6:ca:2c:0d:50:6f:5a:
                    4a:7f:6d:01:9b:ea:be:a9:5e:3b:1e:a6:fb:36:b2:
                    45:b8:68:f7:b8:54:6e:cc:eb:d6:a7:b0:88:56:d1:
                    17:21:3c:6c:93:da:e2:75:db:af:18:0b:83:24:09:
                    ae:cf:fa:82:49:4d:b4:9b:38:56:42:f3:78:9a:ad:
                    0c:62:52:cf:b7:f2:65:cb:ab:12:1d:98:14:fb:aa:
                    72:a5:3b:9e:b5:0f:94:97:f5:c6:44:9a:ee:aa:35:
                    a2:20:1e:b8:a2:a7:15:6c:89:2a:60:a8:90:e7:7f:
                    a6:a1:b7:55:f1:81:b1:75:82:aa:5e:ec:fe:f0:08:
                    a5:f0:e6:8e:23:e9:2a:52:18:7f:d1:85:a2:75:2e:
                    3c:12:83:15:64:4d:3d:07:4d:70:b3:32:dc:9b:e2:
                    31:c4:91:d3:5c:2e:ea:7b:ed:5c:bc:dc:1c:16:23:
                    30:f2:cd:c8:8e:1c:72:f5:f7:dc:0e:b5:14:d1:c2:
                    4f:81:f5:75:11:4a:94:f7:0c:4f:a4:c2:dd:b9:85:
                    6b:b2:22:94:a3:31:e7:fe:1f:d7:46:07:b5:d1:dc:
                    a5:3a:35:40:32:cb:70:03:28:6b:8a:d0:85:ec:c7:
                    b7:3d:1c:3f:6b:a7:b6:52:bf:da:f3:0a:fc:3a:39:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:98:8B:F5:E6:03:1F:BD:EF:4A:D8:F5:68:28:76:50:8B:C3:2A
            X509v3 Authority Key Identifier:
                keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/rcGYi_XmAx-970rY9WgodlCLwyo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:2cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:db:a9:4a:6b:95:00:db:f5:13:8c:de:a7:31:38:5b:b9:f8:
         3b:f5:39:af:0c:c0:96:e7:f0:0d:21:88:55:59:8c:de:6c:05:
         90:ff:3d:4d:08:a5:91:2e:06:7d:bc:80:60:f1:a3:54:09:ea:
         d0:70:1b:9d:3a:cf:31:2a:2a:b6:82:73:ac:20:49:96:17:7f:
         0b:23:d2:f7:0c:6a:2f:8b:a5:80:11:b6:76:09:77:a5:a1:d9:
         9c:4a:65:4e:ea:e4:ec:14:64:00:a8:01:26:75:25:13:cf:76:
         44:e2:de:6f:8d:8d:99:58:d0:b6:4c:5d:c2:ff:41:ad:63:8a:
         e3:b7:c2:2e:22:8d:f4:aa:38:63:69:ca:ff:fe:d3:80:3e:0e:
         f3:fa:17:07:ee:c0:bf:05:ec:b7:a8:ac:1d:79:81:22:7c:28:
         b0:00:58:e1:51:d6:50:21:76:31:eb:63:24:5c:65:3c:8c:cd:
         9b:e2:f8:7b:60:00:52:57:43:1f:d8:d3:25:6e:14:f4:61:21:
         a9:b3:90:36:4c:db:77:4f:f8:e1:7f:55:02:f8:06:2d:8a:53:
         8b:78:24:d1:8b:f9:79:11:63:49:ef:01:27:f6:54:1e:f6:2c:
         89:50:61:c5:5d:53:eb:58:e0:21:30:23:30:27:11:10:19:93:
         b7:18:1c:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVuCvu/D10kcqayM8sc6dC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjMwMTAxMTU1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGMxOTg4YmY1ZTYwMzFmYmRlZjRhZDhmNTY4Mjg3NjUwOGJjMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWt3YGFxfdbKLA1Qb1pKf20Bm+q+
qV47Hqb7NrJFuGj3uFRuzOvWp7CIVtEXITxsk9ridduvGAuDJAmuz/qCSU20mzhW
QvN4mq0MYlLPt/Jly6sSHZgU+6pypTuetQ+Ul/XGRJruqjWiIB64oqcVbIkqYKiQ
53+mobdV8YGxdYKqXuz+8Ail8OaOI+kqUhh/0YWidS48EoMVZE09B01wszLcm+Ix
xJHTXC7qe+1cvNwcFiMw8s3Ijhxy9ffcDrUU0cJPgfV1EUqU9wxPpMLduYVrsiKU
ozHn/h/XRge10dylOjVAMstwAyhritCF7Me3PRw/a6e2Ur/a8wr8OjkkHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK3BmIv15gMfve9K2PVoKHZQi8MqMB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvcmNHWWlfWG1BeC05NzByWTlXZ29kbENMd3lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeALM
MA0GCSqGSIb3DQEBCwUAA4IBAQAW26lKa5UA2/UTjN6nMThbufg79TmvDMCW5/AN
IYhVWYzebAWQ/z1NCKWRLgZ9vIBg8aNUCerQcBudOs8xKiq2gnOsIEmWF38LI9L3
DGovi6WAEbZ2CXelodmcSmVO6uTsFGQAqAEmdSUTz3ZE4t5vjY2ZWNC2TF3C/0Gt
Y4rjt8IuIo30qjhjacr//tOAPg7z+hcH7sC/Bey3qKwdeYEifCiwAFjhUdZQIXYx
62MkXGU8jM2b4vh7YABSV0Mf2NMlbhT0YSGps5A2TNt3T/jhf1UC+AYtilOLeCTR
i/l5EWNJ7wEn9lQe9iyJUGHFXVPrWOAhMCMwJxEQGZO3GBzv
-----END CERTIFICATE-----