Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/mR1Q-6jKoQJiGP6tQ2rglHXg-MY.roa
File:                     mR1Q-6jKoQJiGP6tQ2rglHXg-MY.roa (raw, json)
Hash identifier:          Zlu4oEWCOCq1hrB3Uvj0mZORkCb82IDM5cfRkfucnlo=
Subject key identifier:   99:1D:50:FB:A8:CA:A1:02:62:18:FE:AD:43:6A:E0:94:75:E0:F8:C6
Certificate issuer:       /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial:       01856D9D32B3143A74541F7233F70F2C7BE7
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/mR1Q-6jKoQJiGP6tQ2rglHXg-MY.roa
Signing time:             Sun 01 Jan 2023 13:54:56 +0000
ROA not before:           Sun 01 Jan 2023 13:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212131
IP address blocks:        85.208.168.0/22 maxlen: 22
                          2a10:ae80::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:32:b3:14:3a:74:54:1f:72:33:f7:0f:2c:7b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
        Validity
            Not Before: Jan  1 13:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=991d50fba8caa1026218fead436ae09475e0f8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:81:49:ea:7d:8c:74:90:44:dc:c3:3b:6a:
                    c0:52:be:38:fa:bc:60:0d:71:38:0d:8b:53:26:13:
                    58:a1:a4:6f:b8:c7:fa:e4:36:de:19:b7:21:00:84:
                    34:49:85:38:e6:d2:3e:45:14:ad:29:dc:09:7e:f7:
                    27:e1:a6:15:31:db:f2:b0:17:b1:f8:a5:21:94:eb:
                    da:bc:1b:64:04:16:10:a4:68:94:fe:35:c5:ce:36:
                    78:61:30:bb:1b:04:bd:0a:5d:11:31:3b:25:15:06:
                    4a:0b:3c:20:5a:f0:b5:49:f0:41:c5:6f:4f:2f:89:
                    4e:dc:1a:39:18:02:e3:ea:9b:4a:a3:f5:d9:b9:73:
                    b1:03:df:8c:19:9f:c7:4a:6c:4d:e1:cf:72:b3:6c:
                    95:53:13:c2:23:a3:1a:54:50:43:81:87:44:ce:72:
                    3c:7f:5b:4b:0c:c3:5b:1c:58:5d:3b:60:3b:3f:4f:
                    30:6d:70:26:ac:ae:4e:b4:88:d1:59:32:b7:b6:fc:
                    c2:ad:3a:5b:7b:6f:55:1a:16:e2:d4:20:38:0e:fd:
                    9f:ca:66:72:37:0b:f6:78:3e:7c:2b:6f:0c:e8:e4:
                    c6:da:fe:d3:7c:05:6d:77:ec:3b:08:fe:b5:52:16:
                    3d:24:bc:c2:c6:ba:b4:fa:26:c0:56:50:64:a5:56:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:50:FB:A8:CA:A1:02:62:18:FE:AD:43:6A:E0:94:75:E0:F8:C6
            X509v3 Authority Key Identifier:
                keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/mR1Q-6jKoQJiGP6tQ2rglHXg-MY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.168.0/22
                IPv6:
                  2a10:ae80::/29

    Signature Algorithm: sha256WithRSAEncryption
         c4:26:92:75:a7:4a:6c:6d:7c:a2:64:85:8e:18:fb:c3:8f:95:
         45:fd:c8:21:f7:0d:53:0d:66:dd:0e:d1:a0:b4:b8:1b:43:42:
         39:c7:dc:ca:b6:78:f3:72:6a:a4:62:74:29:e9:d9:05:a5:ef:
         0e:50:e5:dc:8e:55:e6:22:5d:5f:66:35:3b:0e:77:12:dd:17:
         1f:27:be:1b:17:72:fa:6b:1e:36:2a:0d:fe:4d:57:ff:12:49:
         72:f0:df:da:b4:9c:fb:1a:25:2e:63:01:b5:85:e9:ae:20:3f:
         9d:8d:6b:60:9e:40:65:03:ee:b2:a3:e3:62:d9:d6:01:66:d6:
         d9:2a:88:57:17:83:99:39:f4:6e:ad:1e:79:17:d5:2b:51:e5:
         4f:e7:ac:b8:30:66:00:8f:c3:be:f0:64:86:4b:66:e6:a8:b6:
         43:3e:56:50:7e:86:3a:d0:9d:4e:5f:42:b0:1e:f8:d9:41:1b:
         f5:6c:1b:04:d9:56:05:55:2b:91:9c:e2:bb:62:d9:6b:94:2f:
         d8:fe:20:d2:8d:66:db:05:1a:7f:af:35:8e:3f:3d:5f:ee:39:
         3e:6b:4f:46:f9:06:f0:d9:33:e6:0a:43:30:12:ab:e9:f7:ba:
         d0:e9:45:94:c8:84:39:ca:85:c5:c1:ce:cf:92:95:42:80:76:
         4b:05:e9:c5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtnTKzFDp0VB9yM/cPLHvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDNlOWMyNDg3OTU0NjkxMjI3YjFlMzIxNzVkOGY3YTFj
YzNlZjUwHhcNMjMwMTAxMTM1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTFkNTBmYmE4Y2FhMTAyNjIxOGZlYWQ0MzZhZTA5NDc1ZTBmOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoCBSep9jHSQRNzDO2rAUr44+rxg
DXE4DYtTJhNYoaRvuMf65DbeGbchAIQ0SYU45tI+RRStKdwJfvcn4aYVMdvysBex
+KUhlOvavBtkBBYQpGiU/jXFzjZ4YTC7GwS9Cl0RMTslFQZKCzwgWvC1SfBBxW9P
L4lO3Bo5GALj6ptKo/XZuXOxA9+MGZ/HSmxN4c9ys2yVUxPCI6MaVFBDgYdEznI8
f1tLDMNbHFhdO2A7P08wbXAmrK5OtIjRWTK3tvzCrTpbe29VGhbi1CA4Dv2fymZy
Nwv2eD58K28M6OTG2v7TfAVtd+w7CP61UhY9JLzCxrq0+ibAVlBkpVYb7wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJkdUPuoyqECYhj+rUNq4JR14PjGMB8GA1UdIwQY
MBaAFAhD6cJIeVRpEiex4yF12PehzD71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYt
MDA4YTUwOGJhZTlkLzEvbVIxUS02aktvUUppR1A2dFEycmdsSFhnLU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYzRlMjAtZDU5MS00MTVlLWEwNmYtMDA4YTUwOGJhZTlk
LzEvQ0VQcHdraDVWR2tTSjdIaklYWFk5NkhNUHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdCoMA0E
AgACMAcDBQMqEK6AMA0GCSqGSIb3DQEBCwUAA4IBAQDEJpJ1p0psbXyiZIWOGPvD
j5VF/cgh9w1TDWbdDtGgtLgbQ0I5x9zKtnjzcmqkYnQp6dkFpe8OUOXcjlXmIl1f
ZjU7DncS3RcfJ74bF3L6ax42Kg3+TVf/Ekly8N/atJz7GiUuYwG1hemuID+djWtg
nkBlA+6yo+Ni2dYBZtbZKohXF4OZOfRurR55F9UrUeVP56y4MGYAj8O+8GSGS2bm
qLZDPlZQfoY60J1OX0KwHvjZQRv1bBsE2VYFVSuRnOK7YtlrlC/Y/iDSjWbbBRp/
rzWOPz1f7jk+a09G+Qbw2TPmCkMwEqvp97rQ6UWUyIQ5yoXFwc7PkpVCgHZLBenF
-----END CERTIFICATE-----