Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sINxT9cmDr2G6zt2eq9Y8LfEaCE.roa
File:                     sINxT9cmDr2G6zt2eq9Y8LfEaCE.roa (raw, json)
Hash identifier:          vX2/C+t6s9zSCvqxPJ4RzGOiiq/R23BpRo7fdb0qQlY=
Subject key identifier:   B0:83:71:4F:D7:26:0E:BD:86:EB:3B:76:7A:AF:58:F0:B7:C4:68:21
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       01856C1CAB1BDF327FBD311CDF1B5B105E97
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sINxT9cmDr2G6zt2eq9Y8LfEaCE.roa
Signing time:             Sun 01 Jan 2023 06:54:56 +0000
ROA not before:           Sun 01 Jan 2023 06:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203283
IP address blocks:        2a12:3fc2:1b00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:1c:ab:1b:df:32:7f:bd:31:1c:df:1b:5b:10:5e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Jan  1 06:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b083714fd7260ebd86eb3b767aaf58f0b7c46821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:65:5e:cc:ae:c9:4f:97:c7:dd:d3:2a:3e:
                    f4:a3:83:f5:89:6a:a5:fe:d1:4a:27:dd:bb:33:a7:
                    4e:8d:e6:bd:cf:40:ce:d2:12:2b:e0:d8:23:41:77:
                    ac:5c:2b:2c:63:0f:37:b5:d9:aa:43:3f:41:da:11:
                    6d:de:4d:9c:4f:4d:6a:ea:fa:85:f5:75:e1:d9:0a:
                    ce:f1:db:83:4a:ec:92:60:2a:98:03:df:54:ad:81:
                    44:e6:01:bd:af:a9:93:28:ea:0f:b9:5e:66:4e:74:
                    cb:23:c6:c8:5c:6f:90:6d:d8:59:1f:77:c8:cb:6a:
                    bf:7c:29:fd:4b:8b:bf:8d:01:d4:d4:34:af:9b:36:
                    47:d6:c0:23:30:26:f1:76:33:b2:01:30:87:41:a4:
                    b3:47:6d:0e:1d:e4:6f:13:d6:33:be:97:eb:40:e2:
                    88:d5:f4:a3:2f:95:b7:82:4d:7a:da:5f:c7:1c:59:
                    08:2a:bc:0c:cf:53:bc:f8:fb:c4:42:8b:f9:9d:ad:
                    4d:e1:69:aa:0d:0e:a5:07:ab:45:06:88:49:9a:da:
                    79:9e:3b:7b:e6:c2:c9:bd:44:e4:80:8e:16:3e:e0:
                    a6:52:31:19:cb:ba:bd:90:35:d3:28:3b:c8:95:69:
                    44:7a:0f:04:c4:1e:50:b3:aa:78:39:93:97:fa:38:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:71:4F:D7:26:0E:BD:86:EB:3B:76:7A:AF:58:F0:B7:C4:68:21
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/sINxT9cmDr2G6zt2eq9Y8LfEaCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:3fc2:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:b4:bf:29:46:f3:ad:2b:99:c3:c4:16:4d:0e:5e:22:6b:a5:
         2f:29:ab:44:20:45:c2:02:79:e7:08:08:b4:9d:9b:fc:52:69:
         bd:2e:cf:d4:0b:11:c4:38:2f:7c:06:fd:bf:d8:98:45:7b:2b:
         67:95:07:f5:7a:c9:56:d4:62:af:ab:e7:d5:17:a1:ab:dc:39:
         c3:9c:f2:49:b3:cd:c0:31:34:16:92:d5:c6:c9:60:01:88:74:
         18:82:55:71:57:10:47:e9:4c:7d:ae:9c:db:06:14:37:6b:f3:
         bd:9a:6e:46:73:5f:32:22:b5:73:46:5b:19:27:74:dc:dc:b0:
         ac:59:50:24:bc:29:24:05:73:6d:5e:2f:e2:d1:b6:5f:00:cc:
         c0:b8:82:77:60:15:9b:a3:14:71:77:74:85:c6:89:77:cf:a5:
         e7:0c:90:07:19:07:06:80:da:33:b5:5d:e8:de:90:77:9f:26:
         0d:e0:08:47:e6:fc:13:a9:ec:27:97:92:79:29:53:5a:e8:ac:
         35:93:6d:56:85:89:a3:37:7d:6f:eb:1e:8b:f9:0f:11:5b:1c:
         45:1f:79:bd:93:c3:86:f8:45:d2:79:cb:89:e4:3b:2e:3b:03:
         bf:b6:58:b0:14:78:6e:60:a0:78:86:a5:87:bd:7f:bb:de:be:
         ac:e4:51:cb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsHKsb3zJ/vTEc3xtbEF6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDgzNzE0ZmQ3MjYwZWJkODZlYjNiNzY3YWFmNThmMGI3YzQ2ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut9lXsyuyU+Xx93TKj70o4P1iWql
/tFKJ927M6dOjea9z0DO0hIr4NgjQXesXCssYw83tdmqQz9B2hFt3k2cT01q6vqF
9XXh2QrO8duDSuySYCqYA99UrYFE5gG9r6mTKOoPuV5mTnTLI8bIXG+QbdhZH3fI
y2q/fCn9S4u/jQHU1DSvmzZH1sAjMCbxdjOyATCHQaSzR20OHeRvE9YzvpfrQOKI
1fSjL5W3gk162l/HHFkIKrwMz1O8+PvEQov5na1N4WmqDQ6lB6tFBohJmtp5njt7
5sLJvUTkgI4WPuCmUjEZy7q9kDXTKDvIlWlEeg8ExB5Qs6p4OZOX+jjBuwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLCDcU/XJg69hus7dnqvWPC3xGghMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvc0lOeFQ5Y21EcjJHNnp0MmVxOVk4TGZFYUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/whsw
DQYJKoZIhvcNAQELBQADggEBANS0vylG860rmcPEFk0OXiJrpS8pq0QgRcICeecI
CLSdm/xSab0uz9QLEcQ4L3wG/b/YmEV7K2eVB/V6yVbUYq+r59UXoavcOcOc8kmz
zcAxNBaS1cbJYAGIdBiCVXFXEEfpTH2unNsGFDdr872abkZzXzIitXNGWxkndNzc
sKxZUCS8KSQFc21eL+LRtl8AzMC4gndgFZujFHF3dIXGiXfPpecMkAcZBwaA2jO1
XejekHefJg3gCEfm/BOp7CeXknkpU1rorDWTbVaFiaM3fW/rHov5DxFbHEUfeb2T
w4b4RdJ5y4nkOy47A7+2WLAUeG5goHiGpYe9f7vevqzkUcs=
-----END CERTIFICATE-----