Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tfgowlg-uO_Vs0URmJEnuIrqziw.roa
File:                     tfgowlg-uO_Vs0URmJEnuIrqziw.roa (raw, json)
Hash identifier:          x7qUhe3f/PB18g/WuCVaVYrAwinJ50ZkyXXuU0Lv62E=
Subject key identifier:   B5:F8:28:C2:58:3E:B8:EF:D5:B3:45:11:98:91:27:B8:8A:EA:CE:2C
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0187B45E25DDFDA60373D76B3F460D2D9957
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tfgowlg-uO_Vs0URmJEnuIrqziw.roa
Signing time:             Mon 24 Apr 2023 17:44:41 +0000
ROA not before:           Mon 24 Apr 2023 17:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198768
IP address blocks:        2a0e:aa07:e080::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b4:5e:25:dd:fd:a6:03:73:d7:6b:3f:46:0d:2d:99:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Apr 24 17:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b5f828c2583eb8efd5b34511989127b88aeace2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:fe:e5:bd:2f:83:5b:06:15:30:68:d5:89:
                    5b:32:8c:b9:fd:41:95:c3:16:fb:ff:d0:8e:f0:25:
                    df:da:4b:26:fa:a3:eb:04:a7:f7:ea:a7:a2:68:66:
                    63:ef:4d:51:74:0b:47:37:09:14:6a:06:8f:e6:be:
                    f1:d5:6f:3d:fe:a3:27:eb:d6:b3:05:77:ff:49:cc:
                    8f:0d:43:f0:fc:c8:66:02:ce:5a:a7:a5:dd:8b:5a:
                    57:3e:cb:5f:57:51:2c:59:38:e5:55:e5:a2:96:e6:
                    7d:a6:a2:d2:45:1c:c3:d5:a4:56:c3:7d:6b:70:22:
                    40:32:57:6b:66:64:a1:b1:f8:3a:49:09:b3:26:03:
                    cc:b7:2b:87:aa:8a:58:d4:46:b9:fe:6c:28:5b:3c:
                    aa:15:02:ce:09:2e:23:6b:d7:83:fd:fe:4c:aa:11:
                    c3:1f:7a:e6:e3:77:9a:01:98:fb:d9:8b:ee:f1:1c:
                    7b:63:0c:c2:5d:aa:14:65:30:ca:fa:33:87:84:b1:
                    82:6b:2e:c9:53:a0:76:7b:a6:56:72:5d:b8:b0:2c:
                    ed:b1:f7:b3:32:6a:72:cd:55:bd:2c:1d:fd:0a:b1:
                    88:bd:2c:eb:e7:37:ea:8a:fc:51:cd:a0:58:5c:e9:
                    db:95:09:59:10:c2:cf:49:4c:62:cb:0f:a0:8d:37:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F8:28:C2:58:3E:B8:EF:D5:B3:45:11:98:91:27:B8:8A:EA:CE:2C
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/tfgowlg-uO_Vs0URmJEnuIrqziw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e080::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:ee:21:82:4c:d2:a7:fb:c1:51:f5:53:45:97:62:da:d2:9e:
         6c:6e:73:3a:33:ab:0d:16:38:3b:7e:6e:cd:c0:6a:5a:01:cb:
         0a:68:e6:5b:85:cb:12:70:e3:3e:f4:2b:f6:b4:e7:4d:cd:26:
         06:93:2b:53:d4:48:20:ac:01:18:77:2a:50:02:c1:5c:d3:f5:
         02:58:e9:c2:c9:5f:4e:56:fb:ad:c9:16:70:39:4e:54:5b:b6:
         18:05:d4:89:96:23:ae:67:7a:0e:02:c1:62:8e:b0:6b:17:46:
         38:42:5c:63:cf:78:75:ac:c0:0b:ce:1b:9f:db:c9:82:20:8e:
         c5:63:a0:62:78:c8:44:0a:26:06:62:e5:f6:27:fb:06:cd:23:
         c2:b6:8f:fa:ae:b0:4f:80:68:e6:2d:c7:c3:03:60:a1:c7:4a:
         bb:dc:b8:45:db:d8:a8:f3:07:a5:42:76:e0:a4:a1:90:fe:2c:
         2b:8e:84:71:3b:ad:cc:58:86:b3:81:2c:a2:8b:0f:5d:37:ef:
         4c:1e:1b:25:7e:fa:4a:50:80:51:56:7b:5a:23:02:2d:c1:86:
         92:14:79:63:c4:dd:2c:df:d2:ac:61:31:1b:99:be:f0:45:a2:
         3b:d2:9f:c4:2a:44:d5:db:b9:e2:72:88:0e:f2:80:67:ec:cc:
         61:bd:97:22
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYe0XiXd/aYDc9drP0YNLZlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwNDI0MTc0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWY4MjhjMjU4M2ViOGVmZDViMzQ1MTE5ODkxMjdiODhhZWFjZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSb+5b0vg1sGFTBo1YlbMoy5/UGV
wxb7/9CO8CXf2ksm+qPrBKf36qeiaGZj701RdAtHNwkUagaP5r7x1W89/qMn69az
BXf/ScyPDUPw/MhmAs5ap6Xdi1pXPstfV1EsWTjlVeWiluZ9pqLSRRzD1aRWw31r
cCJAMldrZmShsfg6SQmzJgPMtyuHqopY1Ea5/mwoWzyqFQLOCS4ja9eD/f5MqhHD
H3rm43eaAZj72Yvu8Rx7YwzCXaoUZTDK+jOHhLGCay7JU6B2e6ZWcl24sCztsfez
MmpyzVW9LB39CrGIvSzr5zfqivxRzaBYXOnblQlZEMLPSUxiyw+gjTcLcwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLX4KMJYPrjv1bNFEZiRJ7iK6s4sMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvdGZnb3dsZy11T19WczBVUm1KRW51SXJxeml3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+CA
MA0GCSqGSIb3DQEBCwUAA4IBAQAz7iGCTNKn+8FR9VNFl2La0p5sbnM6M6sNFjg7
fm7NwGpaAcsKaOZbhcsScOM+9Cv2tOdNzSYGkytT1EggrAEYdypQAsFc0/UCWOnC
yV9OVvutyRZwOU5UW7YYBdSJliOuZ3oOAsFijrBrF0Y4Qlxjz3h1rMALzhuf28mC
II7FY6BieMhECiYGYuX2J/sGzSPCto/6rrBPgGjmLcfDA2Chx0q73LhF29io8wel
QnbgpKGQ/iwrjoRxO63MWIazgSyiiw9dN+9MHhslfvpKUIBRVntaIwItwYaSFHlj
xN0s39KsYTEbmb7wRaI70p/EKkTV27nicogO8oBn7MxhvZci
-----END CERTIFICATE-----