Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/WLwFrPpibGY57s7jY5wr6EtyKN8.roa
File:                     WLwFrPpibGY57s7jY5wr6EtyKN8.roa (raw, json)
Hash identifier:          fXiiSfBBmz6cvYsjFWIDzVV5z3WwGEmXrMNldTdpcfI=
Subject key identifier:   58:BC:05:AC:FA:62:6C:66:39:EE:CE:E3:63:9C:2B:E8:4B:72:28:DF
Certificate issuer:       /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial:       01856D8ABE5C7E01464B57E65A429DB78AF1
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/WLwFrPpibGY57s7jY5wr6EtyKN8.roa
Signing time:             Sun 01 Jan 2023 13:34:47 +0000
ROA not before:           Sun 01 Jan 2023 13:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212149
IP address blocks:        2a11:5706:b00b::/48 maxlen: 48
                          2a11:5701:b00b::/48 maxlen: 48
                          2a11:5703:b00b::/48 maxlen: 48
                          2a11:5704:b00b::/48 maxlen: 48
                          2a11:5707:b00b::/48 maxlen: 48
                          2a11:5705:b00b::/48 maxlen: 48
                          2a11:5702:b00b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:be:5c:7e:01:46:4b:57:e6:5a:42:9d:b7:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
        Validity
            Not Before: Jan  1 13:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58bc05acfa626c6639eecee3639c2be84b7228df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:f6:9a:29:c1:6c:a4:02:cb:44:73:72:92:
                    96:92:a5:c7:80:7b:43:50:d8:00:da:7c:36:35:4a:
                    86:f5:a3:82:62:cf:10:f5:a2:09:a2:7c:07:b2:bd:
                    9a:46:7e:fc:65:a1:d1:c1:d4:68:de:cf:33:87:19:
                    45:08:d3:87:aa:27:47:32:93:f5:e6:44:06:fd:dd:
                    22:3a:fc:9d:25:da:32:71:3f:40:a1:bf:90:b5:78:
                    be:a6:52:b4:3d:a0:95:e7:a0:0e:07:d0:f1:cf:9e:
                    8f:fd:15:17:3b:ac:c6:eb:cc:c9:4f:f7:db:c7:aa:
                    f1:b4:38:0a:18:5f:bc:86:59:ce:ef:f3:86:a3:4d:
                    17:9c:f9:5d:a2:0b:20:c5:56:7c:f0:62:f3:33:3a:
                    a6:4a:21:a9:d0:88:e1:69:d1:7f:d6:1f:48:49:c4:
                    9a:ea:f1:f4:14:5f:e7:aa:36:13:3e:4b:9d:93:02:
                    a3:b7:07:23:3a:88:aa:e0:02:d1:25:13:16:05:f5:
                    e3:a8:1e:f6:cc:c8:33:46:53:fd:d8:5c:40:1b:4d:
                    31:93:41:f9:2e:c0:cf:7f:81:54:7e:bd:4c:94:9f:
                    98:b5:29:41:ba:7c:f1:86:79:5d:af:b8:e3:b7:1e:
                    72:0a:24:c6:f3:05:59:5c:f0:d5:1d:aa:1a:91:c8:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:05:AC:FA:62:6C:66:39:EE:CE:E3:63:9C:2B:E8:4B:72:28:DF
            X509v3 Authority Key Identifier:
                keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/WLwFrPpibGY57s7jY5wr6EtyKN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:5701:b00b::/48
                  2a11:5702:b00b::/48
                  2a11:5703:b00b::/48
                  2a11:5704:b00b::/48
                  2a11:5705:b00b::/48
                  2a11:5706:b00b::/48
                  2a11:5707:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:99:44:d6:4c:f8:e8:9f:8d:c5:75:07:83:54:64:3c:5e:
         29:fe:71:48:77:ca:af:b8:4b:d9:ed:ec:2b:f9:a5:1e:f0:53:
         31:b4:6d:c0:c4:4a:e0:fe:5f:4d:1b:d8:57:96:c9:75:21:9e:
         ba:cb:12:75:e6:c5:d7:3b:c6:12:62:18:84:6a:1a:71:46:b7:
         21:59:77:2c:84:d0:19:24:c9:03:78:e0:cd:81:76:e1:00:bd:
         33:d8:07:d6:14:51:9a:14:d4:17:88:52:67:00:c6:cd:79:c8:
         b1:6b:30:14:b2:cb:01:90:48:1f:f4:26:0c:fa:d1:17:61:23:
         62:d0:8b:14:37:4f:fa:16:63:68:1c:3b:a8:13:0b:a3:a5:19:
         4c:a3:51:25:91:5c:92:20:b2:0d:e6:7f:6c:8a:b4:03:94:12:
         ec:c6:79:17:13:83:71:1f:a1:ee:8c:40:98:eb:58:9d:f9:e9:
         42:ee:69:c0:cc:15:5b:b9:75:92:b8:54:57:fa:74:eb:d6:33:
         69:3d:f9:99:ac:ed:ce:e2:54:a8:22:28:33:1e:d9:3f:41:56:
         57:47:d4:5a:23:c1:7d:91:c5:ba:5b:f0:d3:13:42:b6:43:e0:
         c2:7d:b8:9a:0f:ff:23:e8:2b:2b:05:29:e7:f2:d3:9e:30:c7:
         0a:b4:1e:55
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYVtir5cfgFGS1fmWkKdt4rxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTUyMzY5NGJkNWZiOTJkNzY4NDM1ZGIzYmI2OGVkODQz
ZTVkNTMwHhcNMjMwMTAxMTMzNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJjMDVhY2ZhNjI2YzY2MzllZWNlZTM2MzljMmJlODRiNzIyOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWz2minBbKQCy0RzcpKWkqXHgHtD
UNgA2nw2NUqG9aOCYs8Q9aIJonwHsr2aRn78ZaHRwdRo3s8zhxlFCNOHqidHMpP1
5kQG/d0iOvydJdoycT9Aob+QtXi+plK0PaCV56AOB9Dxz56P/RUXO6zG68zJT/fb
x6rxtDgKGF+8hlnO7/OGo00XnPldogsgxVZ88GLzMzqmSiGp0IjhadF/1h9IScSa
6vH0FF/nqjYTPkudkwKjtwcjOoiq4ALRJRMWBfXjqB72zMgzRlP92FxAG00xk0H5
LsDPf4FUfr1MlJ+YtSlBunzxhnldr7jjtx5yCiTG8wVZXPDVHaoakciBLQIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFFi8Baz6YmxmOe7O42OcK+hLcijfMB8GA1UdIwQY
MBaAFP0VI2lL1fuS12hDXbO7aO2EPl1TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JVamFVdlYtNUxYYUVOZHM3dG83WVEtWFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wMmE2MTYtZTYxNC00NWEwLTljOTAt
OGFkODdlMGRkNTk2LzEvV0x3RnJQcGliR1k1N3M3alk1d3I2RXR5S044LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wMmE2MTYtZTYxNC00NWEwLTljOTAtOGFkODdlMGRkNTk2
LzEvX1JVamFVdlYtNUxYYUVOZHM3dG83WVEtWFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwcAKhFXAbAL
AwcAKhFXArALAwcAKhFXA7ALAwcAKhFXBLALAwcAKhFXBbALAwcAKhFXBrALAwcA
KhFXB7ALMA0GCSqGSIb3DQEBCwUAA4IBAQA9I5lE1kz46J+NxXUHg1RkPF4p/nFI
d8qvuEvZ7ewr+aUe8FMxtG3AxErg/l9NG9hXlsl1IZ66yxJ15sXXO8YSYhiEahpx
RrchWXcshNAZJMkDeODNgXbhAL0z2AfWFFGaFNQXiFJnAMbNecixazAUsssBkEgf
9CYM+tEXYSNi0IsUN0/6FmNoHDuoEwujpRlMo1ElkVySILIN5n9sirQDlBLsxnkX
E4NxH6HujECY61id+elC7mnAzBVbuXWSuFRX+nTr1jNpPfmZrO3O4lSoIigzHtk/
QVZXR9RaI8F9kcW6W/DTE0K2Q+DCfbiaD/8j6CsrBSnn8tOeMMcKtB5V
-----END CERTIFICATE-----