Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/WmEMoHrSMzSbzZR5Iogr-ZJm0L0.roa
File:                     WmEMoHrSMzSbzZR5Iogr-ZJm0L0.roa (raw, json)
Hash identifier:          JtaVToZNyNuD2f69SdArZFzuhOfV9saXjE8ZAyI5JNA=
Subject key identifier:   5A:61:0C:A0:7A:D2:33:34:9B:CD:94:79:22:88:2B:F9:92:66:D0:BD
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       018582D23DAC4D87684F6E1F9062780D3D63
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/WmEMoHrSMzSbzZR5Iogr-ZJm0L0.roa
Signing time:             Thu 05 Jan 2023 16:44:54 +0000
ROA not before:           Thu 05 Jan 2023 16:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206170
IP address blocks:        188.66.63.0/24 maxlen: 24
                          2001:67c:750::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:d2:3d:ac:4d:87:68:4f:6e:1f:90:62:78:0d:3d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Jan  5 16:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a610ca07ad233349bcd947922882bf99266d0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:e2:f5:47:a5:03:38:37:06:43:cb:d9:99:
                    6b:a2:f7:5e:ae:aa:60:7b:dd:be:fe:19:41:ab:f0:
                    3d:35:50:ae:37:14:c3:c0:60:3b:54:9b:e4:15:f6:
                    86:b0:79:7c:21:38:de:1a:6e:c8:aa:fd:ad:93:ab:
                    ee:77:27:31:fe:93:d3:bf:00:67:2e:19:9f:ec:fa:
                    ba:28:47:13:8c:58:99:ff:e6:ab:e7:3c:f1:ff:a7:
                    99:e4:81:62:1f:7d:26:4d:0a:6c:27:c7:19:5b:6f:
                    f4:e6:4e:8c:03:95:2d:07:b8:f5:48:96:80:5a:e3:
                    b5:61:f3:8f:52:2f:be:54:a8:82:20:92:ae:b0:ec:
                    46:72:7f:4c:6d:90:38:e1:a8:eb:7d:f2:6f:52:fe:
                    3d:01:66:ff:94:22:bf:b2:22:e6:e6:e9:6e:ae:61:
                    98:59:e8:4a:4a:cd:e0:4e:bf:9a:38:5c:83:d7:fd:
                    2f:74:7e:6b:4c:9b:c4:33:45:c3:5b:ab:82:3f:a7:
                    9c:13:fb:ce:7e:fa:d4:bb:41:4b:95:b8:6d:95:bf:
                    5d:c6:9c:ee:04:1b:f3:bb:2b:f7:cb:09:4d:35:aa:
                    5f:04:04:fe:eb:fa:73:79:1f:b5:50:4d:00:9f:85:
                    a0:8d:76:e7:ce:1c:8a:3d:a5:95:5e:96:5e:95:0a:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:0C:A0:7A:D2:33:34:9B:CD:94:79:22:88:2B:F9:92:66:D0:BD
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/WmEMoHrSMzSbzZR5Iogr-ZJm0L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.66.63.0/24
                IPv6:
                  2001:67c:750::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:73:ee:dd:e4:51:dc:15:78:5d:1a:89:39:a5:5f:ab:10:a7:
         23:87:50:57:1e:eb:ba:22:58:20:ad:8b:88:66:1d:c3:3b:21:
         31:f7:00:fc:e7:bf:f7:87:22:92:fc:10:ec:ec:6c:55:76:cb:
         0c:3e:10:b4:a1:3c:5b:c4:e4:bd:59:19:85:ad:34:06:e3:63:
         a8:ef:12:28:1d:09:a4:b2:8a:d8:a3:f3:02:b0:03:cf:1a:43:
         23:86:56:ef:00:d3:23:48:1e:bd:56:a7:22:2a:5a:f5:37:08:
         14:5d:c2:43:c1:dc:62:8c:6e:2e:ba:ac:cc:d1:9b:5d:29:13:
         e2:dc:f5:ea:6a:c6:07:66:47:ef:7d:cb:12:cf:82:f1:b5:51:
         44:56:03:b1:6e:3d:d3:49:0d:5a:f5:20:94:5a:7b:df:4a:b9:
         9f:e0:df:26:5e:98:86:d2:30:94:42:9f:d1:c8:35:f6:70:c0:
         9e:37:ef:e7:3d:74:63:72:be:09:e4:81:23:37:77:78:a7:a0:
         0e:1e:d6:06:39:76:d2:17:8c:da:6f:db:e8:07:bc:37:47:80:
         7e:2c:80:eb:b7:80:41:42:49:c1:28:f5:b6:57:57:72:3a:4e:
         7d:cc:6b:38:8d:46:d7:b4:e0:ee:6e:4d:59:6a:f0:a4:e4:bc:
         9e:ad:67:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWC0j2sTYdoT24fkGJ4DT1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjIyNjUwMDQ4MTA3OTE4YWRmMWIyMmNkZjA4N2M4YTgz
NGY3OWMwHhcNMjMwMTA1MTY0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTYxMGNhMDdhZDIzMzM0OWJjZDk0NzkyMjg4MmJmOTkyNjZkMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSLi9UelAzg3BkPL2Zlrovderqpg
e92+/hlBq/A9NVCuNxTDwGA7VJvkFfaGsHl8ITjeGm7Iqv2tk6vudycx/pPTvwBn
Lhmf7Pq6KEcTjFiZ/+ar5zzx/6eZ5IFiH30mTQpsJ8cZW2/05k6MA5UtB7j1SJaA
WuO1YfOPUi++VKiCIJKusOxGcn9MbZA44ajrffJvUv49AWb/lCK/siLm5ulurmGY
WehKSs3gTr+aOFyD1/0vdH5rTJvEM0XDW6uCP6ecE/vOfvrUu0FLlbhtlb9dxpzu
BBvzuyv3ywlNNapfBAT+6/pzeR+1UE0An4WgjXbnzhyKPaWVXpZelQqHrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFphDKB60jM0m82UeSKIK/mSZtC9MB8GA1UdIwQY
MBaAFBliJlAEgQeRit8bIs3wh8ioNPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQt
OGQxMGZlZTU4NGZlLzEvV21FTW9IclNNelNielpSNUlvZ3ItWkptMEwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNTAyYzEtZjMxNC00MGIxLWEwMjQtOGQxMGZlZTU4NGZl
LzEvR1dJbVVBU0JCNUdLM3hzaXpmQ0h5S2cwOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAvEI/MA8E
AgACMAkDBwAgAQZ8B1AwDQYJKoZIhvcNAQELBQADggEBALVz7t3kUdwVeF0aiTml
X6sQpyOHUFce67oiWCCti4hmHcM7ITH3APznv/eHIpL8EOzsbFV2yww+ELShPFvE
5L1ZGYWtNAbjY6jvEigdCaSyitij8wKwA88aQyOGVu8A0yNIHr1WpyIqWvU3CBRd
wkPB3GKMbi66rMzRm10pE+Lc9epqxgdmR+99yxLPgvG1UURWA7FuPdNJDVr1IJRa
e99KuZ/g3yZemIbSMJRCn9HINfZwwJ437+c9dGNyvgnkgSM3d3inoA4e1gY5dtIX
jNpv2+gHvDdHgH4sgOu3gEFCScEo9bZXV3I6Tn3MaziNRte04O5uTVlq8KTkvJ6t
Z1c=
-----END CERTIFICATE-----