Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wi5RgzIG5XwA_2IjVhhhLNmPlD0.roa
File:                     wi5RgzIG5XwA_2IjVhhhLNmPlD0.roa (raw, json)
Hash identifier:          eOZY/uelYfds/Ey5+1ic4f8Hx3wjQoKqUbdOngeL/Ps=
Subject key identifier:   C2:2E:51:83:32:06:E5:7C:00:FF:62:23:56:18:61:2C:D9:8F:94:3D
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0189C61AE573CEF69E80A7ABEDFF30AF13F9
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wi5RgzIG5XwA_2IjVhhhLNmPlD0.roa
Signing time:             Sat 05 Aug 2023 14:29:58 +0000
ROA not before:           Sat 05 Aug 2023 14:29:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        45.146.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c6:1a:e5:73:ce:f6:9e:80:a7:ab:ed:ff:30:af:13:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Aug  5 14:29:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c22e51833206e57c00ff62235618612cd98f943d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:58:0e:69:4b:eb:53:c4:77:2a:29:ff:82:
                    c3:6a:76:5c:20:a4:a4:8e:b5:67:cf:e0:13:30:af:
                    c9:6e:62:c5:f6:17:5e:ff:b1:87:45:e2:7c:c3:9b:
                    b3:a6:a3:50:4e:b3:9d:93:1f:eb:ce:8c:aa:df:63:
                    0d:29:d7:27:b3:6c:79:e1:86:22:62:d2:b4:49:4b:
                    88:57:58:8e:4d:23:ef:60:61:a7:29:96:94:9b:de:
                    a9:58:ff:0e:16:06:63:14:0d:6a:05:62:87:ce:8a:
                    46:0e:6a:fa:23:c7:0c:d8:a1:61:22:1a:f8:42:36:
                    de:1d:19:7a:11:ff:64:44:30:ba:59:c8:71:18:6b:
                    96:73:c6:16:ce:53:e9:29:c1:7c:2d:83:84:da:67:
                    50:97:3d:ed:f0:8c:45:20:5a:f3:04:01:be:ec:4e:
                    e6:49:b7:d6:c3:ee:31:88:ee:61:2b:73:31:23:01:
                    11:a8:93:8c:0a:2d:c9:ed:2b:38:39:81:b9:07:98:
                    ec:2d:89:ea:49:3e:f0:07:7f:c2:f6:1d:90:b7:84:
                    f6:64:d2:49:c5:c7:e6:d3:f3:bb:ce:fc:8f:dc:82:
                    5f:1c:e3:2b:97:0e:c1:dc:b6:d1:e0:1f:35:fb:d6:
                    1d:fb:6d:dc:d3:1d:42:b0:7e:c3:4a:36:b1:2f:58:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:51:83:32:06:E5:7C:00:FF:62:23:56:18:61:2C:D9:8F:94:3D
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wi5RgzIG5XwA_2IjVhhhLNmPlD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:f2:9b:5c:1f:d3:11:97:04:36:a9:7d:0d:3c:65:83:2b:7d:
         5f:08:99:59:ba:96:1d:e6:7d:c9:96:23:c5:c6:fa:71:f6:45:
         f5:93:66:aa:d4:76:47:f7:b4:32:53:6e:58:f5:e3:5f:12:f2:
         2f:c7:4e:94:ab:ec:31:79:28:fa:52:30:67:12:b8:5b:ea:92:
         ca:91:3c:ee:c3:9c:03:cb:f5:c6:d9:53:4d:99:b9:47:77:ba:
         80:e5:ba:ad:b7:94:b9:5b:ff:0d:21:04:e7:fc:93:3c:38:ab:
         4d:b3:8a:e3:3a:56:12:36:d2:1a:39:cf:a5:73:22:a8:74:15:
         61:1e:3e:aa:f7:ee:51:37:e4:b4:10:d4:e2:80:3a:8e:53:16:
         a5:8e:73:5c:25:4f:43:0b:f6:63:ad:2f:5a:b8:94:4e:ac:b1:
         dc:a3:49:67:bc:d9:24:36:01:8b:3e:a4:40:8c:76:bf:a4:59:
         88:f4:23:ef:71:d8:28:35:88:99:bf:1d:d8:14:49:10:dc:d3:
         61:cd:98:71:33:86:6e:1e:5d:23:da:d6:63:e0:e6:88:59:75:
         fb:06:5c:21:a9:37:d8:0d:14:09:74:ca:47:f4:c5:4c:b5:56:
         b8:be:8e:36:9f:83:32:86:d9:14:7b:fa:fa:30:11:a6:8e:ca:
         6c:cb:d8:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnGGuVzzvaegKer7f8wrxP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwODA1MTQyOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjJlNTE4MzMyMDZlNTdjMDBmZjYyMjM1NjE4NjEyY2Q5OGY5NDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVYDmlL61PEdyop/4LDanZcIKSk
jrVnz+ATMK/JbmLF9hde/7GHReJ8w5uzpqNQTrOdkx/rzoyq32MNKdcns2x54YYi
YtK0SUuIV1iOTSPvYGGnKZaUm96pWP8OFgZjFA1qBWKHzopGDmr6I8cM2KFhIhr4
QjbeHRl6Ef9kRDC6WchxGGuWc8YWzlPpKcF8LYOE2mdQlz3t8IxFIFrzBAG+7E7m
SbfWw+4xiO5hK3MxIwERqJOMCi3J7Ss4OYG5B5jsLYnqST7wB3/C9h2Qt4T2ZNJJ
xcfm0/O7zvyP3IJfHOMrlw7B3LbR4B81+9Yd+23c0x1CsH7DSjaxL1glWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIuUYMyBuV8AP9iI1YYYSzZj5Q9MB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvd2k1Umd6SUc1WHdBXzJJalZoaGhMTm1QbEQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLqMA0G
CSqGSIb3DQEBCwUAA4IBAQAo8ptcH9MRlwQ2qX0NPGWDK31fCJlZupYd5n3JliPF
xvpx9kX1k2aq1HZH97QyU25Y9eNfEvIvx06Uq+wxeSj6UjBnErhb6pLKkTzuw5wD
y/XG2VNNmblHd7qA5bqtt5S5W/8NIQTn/JM8OKtNs4rjOlYSNtIaOc+lcyKodBVh
Hj6q9+5RN+S0ENTigDqOUxaljnNcJU9DC/ZjrS9auJROrLHco0lnvNkkNgGLPqRA
jHa/pFmI9CPvcdgoNYiZvx3YFEkQ3NNhzZhxM4ZuHl0j2tZj4OaIWXX7BlwhqTfY
DRQJdMpH9MVMtVa4vo42n4MyhtkUe/r6MBGmjspsy9jB