Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa
File:                     xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa (raw, json)
Hash identifier:          heFtYgrtqJdE+U9DY6s6k9YAo2Nyg29l2M67iC5M/9c=
Subject key identifier:   C4:ED:FA:67:49:1F:FF:7C:7A:B1:02:C2:5A:62:28:56:85:82:98:1A
Certificate issuer:       /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial:       01857295A8326E52DE1E56820ECC08F05A08
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa
Signing time:             Mon 02 Jan 2023 13:04:48 +0000
ROA not before:           Mon 02 Jan 2023 13:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50939
IP address blocks:        45.134.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:a8:32:6e:52:de:1e:56:82:0e:cc:08:f0:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
        Validity
            Not Before: Jan  2 13:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c4edfa67491fff7c7ab102c25a6228568582981a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:78:64:15:35:f3:dd:00:9b:f1:96:2f:f6:
                    a5:32:44:41:fb:59:41:d9:59:45:70:d9:d7:19:52:
                    94:91:a8:96:37:84:1a:60:3d:a0:ce:19:35:4d:82:
                    2d:73:c2:82:0a:48:35:fa:ee:69:42:68:28:0f:68:
                    90:99:c9:44:62:2f:62:db:e8:a1:ae:ad:21:f1:af:
                    9a:2b:c9:d5:62:68:f5:a7:63:2f:f8:d2:09:52:36:
                    18:9d:b6:59:fd:93:15:87:13:39:c5:82:a1:2b:44:
                    a7:02:d7:19:28:15:c2:41:35:d1:0d:67:e0:da:45:
                    c8:88:2b:fa:67:b4:1f:d4:e5:63:4f:9c:33:5a:3c:
                    c1:12:6e:28:62:f0:ef:c2:63:8f:75:1c:c3:c5:f8:
                    0e:b2:a9:28:5e:7d:f2:e0:bd:00:c6:6c:cf:2a:46:
                    56:cf:4e:b3:60:a0:9a:eb:1c:6d:fb:8e:1c:0c:3e:
                    1e:77:1e:e3:41:7a:22:ab:77:43:96:42:7d:5d:61:
                    4c:a5:49:ee:b8:d7:d7:ef:ba:18:b5:ec:20:e4:a8:
                    ff:2f:73:81:39:f8:14:be:c4:c8:9d:17:8d:cb:b7:
                    e4:36:3a:f9:ee:7b:b2:86:92:a0:c2:1b:10:1e:f0:
                    1d:a5:45:02:30:9a:a8:55:8a:14:67:c8:8d:b3:05:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:FA:67:49:1F:FF:7C:7A:B1:02:C2:5A:62:28:56:85:82:98:1A
            X509v3 Authority Key Identifier:
                keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/xO36Z0kf_3x6sQLCWmIoVoWCmBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:6d:50:64:cd:95:a3:14:ed:4d:84:46:da:3a:63:b9:b7:3e:
         2d:e0:29:7e:e0:26:e0:b8:8e:99:04:06:46:b9:d0:57:a0:b4:
         87:46:a7:e6:4a:bf:4d:c0:de:31:f4:f9:18:b4:28:16:09:58:
         58:b6:2e:5a:58:0e:8e:93:49:aa:4e:38:ec:6b:73:01:c0:a4:
         35:e4:73:1e:4c:00:23:c5:eb:f3:1e:00:3e:f4:96:66:75:e0:
         8d:7a:3c:df:bd:66:a7:39:da:d1:9a:9a:24:81:41:6f:f7:19:
         ac:da:bd:ad:a1:21:06:6e:7a:ac:ba:ee:99:9c:6e:f6:28:f7:
         95:9a:6a:a2:51:1e:9e:2f:09:c5:18:4a:25:fa:2c:f4:74:e0:
         b8:27:93:80:00:61:7c:95:e1:09:c5:11:64:82:40:b5:99:2b:
         ae:2a:a2:22:dd:44:57:2c:46:6d:51:5a:af:0c:e0:a0:28:36:
         48:60:fb:54:f1:5c:4d:f1:89:0f:8c:8c:02:6d:08:d3:98:28:
         4e:8c:17:ee:14:32:e4:8d:43:0c:e0:86:1d:d9:9f:5b:0f:fa:
         37:c9:68:4d:8c:68:bd:09:04:05:99:ca:91:d2:29:35:91:0b:
         94:80:2a:81:d2:c9:04:c4:bd:72:22:30:a7:ab:7a:f0:c2:b9:
         01:69:4b:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVylagyblLeHlaCDswI8FoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYjk5YzEyMGVjOTk0ZjNiNzBkYmZjNWUwMTlhMmU4YjE4
N2NkMGMwHhcNMjMwMTAyMTMwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGVkZmE2NzQ5MWZmZjdjN2FiMTAyYzI1YTYyMjg1Njg1ODI5ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgh4ZBU1890Am/GWL/alMkRB+1lB
2VlFcNnXGVKUkaiWN4QaYD2gzhk1TYItc8KCCkg1+u5pQmgoD2iQmclEYi9i2+ih
rq0h8a+aK8nVYmj1p2Mv+NIJUjYYnbZZ/ZMVhxM5xYKhK0SnAtcZKBXCQTXRDWfg
2kXIiCv6Z7Qf1OVjT5wzWjzBEm4oYvDvwmOPdRzDxfgOsqkoXn3y4L0AxmzPKkZW
z06zYKCa6xxt+44cDD4edx7jQXoiq3dDlkJ9XWFMpUnuuNfX77oYtewg5Kj/L3OB
OfgUvsTInReNy7fkNjr57nuyhpKgwhsQHvAdpUUCMJqoVYoUZ8iNswXlvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTt+mdJH/98erECwlpiKFaFgpgaMB8GA1UdIwQY
MBaAFB65nBIOyZTztw2/xeAZouixh80MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQt
YTliODhmZGFiNjY4LzEveE8zNlowa2ZfM3g2c1FMQ1dtSW9Wb1dDbUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MDg0M2UtNjY2My00ZWUxLWIxZjQtYTliODhmZGFiNjY4
LzEvSHJtY0VnN0psUE8zRGJfRjRCbWk2TEdIelF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYagMA0G
CSqGSIb3DQEBCwUAA4IBAQBdbVBkzZWjFO1NhEbaOmO5tz4t4Cl+4CbguI6ZBAZG
udBXoLSHRqfmSr9NwN4x9PkYtCgWCVhYti5aWA6Ok0mqTjjsa3MBwKQ15HMeTAAj
xevzHgA+9JZmdeCNejzfvWanOdrRmpokgUFv9xms2r2toSEGbnqsuu6ZnG72KPeV
mmqiUR6eLwnFGEol+iz0dOC4J5OAAGF8leEJxRFkgkC1mSuuKqIi3URXLEZtUVqv
DOCgKDZIYPtU8VxN8YkPjIwCbQjTmChOjBfuFDLkjUMM4IYd2Z9bD/o3yWhNjGi9
CQQFmcqR0ik1kQuUgCqB0skExL1yIjCnq3rwwrkBaUuu
-----END CERTIFICATE-----