Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa
File:                     WURFqqpF-NlvYmiaNra1fiWXoio.roa (raw, json)
Hash identifier:          vW6ZJEP9SW3wfWTQKdcO6XGDhcYMPl2+r3XLeXXTjf4=
Subject key identifier:   59:44:45:AA:AA:45:F8:D9:6F:62:68:9A:36:B6:B5:7E:25:97:A2:2A
Certificate issuer:       /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial:       01856B40D7D2C0E0E5FFB4A2A45FC83620D9
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa
Signing time:             Sun 01 Jan 2023 02:54:49 +0000
ROA not before:           Sun 01 Jan 2023 02:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        195.244.28.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:40:d7:d2:c0:e0:e5:ff:b4:a2:a4:5f:c8:36:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
        Validity
            Not Before: Jan  1 02:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=594445aaaa45f8d96f62689a36b6b57e2597a22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:b1:82:c3:9e:81:90:4e:4f:62:88:86:8b:
                    4e:34:06:fb:ea:df:6c:b1:02:41:06:ed:9e:39:a9:
                    ea:4a:63:bc:e3:af:41:bd:53:16:98:0e:8b:13:82:
                    47:00:83:2e:82:db:95:00:71:4a:17:a7:76:82:42:
                    b1:65:f1:3a:8c:d5:74:c9:3e:ff:0f:b6:12:49:09:
                    95:ac:23:03:a5:bd:b1:54:3a:90:77:c3:2d:7e:0a:
                    2e:bc:d5:21:5e:b2:4c:4c:4e:f9:ca:24:87:bc:9b:
                    8a:5b:be:94:0f:d2:b8:60:72:a2:ab:87:1b:f5:3b:
                    af:c2:ba:7a:10:91:fd:f2:5f:9d:ba:9a:84:ee:d3:
                    59:b5:6c:31:cf:ea:5b:cf:4d:d4:68:68:30:ec:80:
                    6f:23:3c:18:58:a3:3b:01:4b:98:4b:b9:c4:2b:38:
                    34:9c:dc:32:b7:69:5d:b6:9a:f8:a6:8c:44:49:92:
                    2e:52:3b:33:a1:40:bb:88:85:18:4a:17:f8:30:95:
                    64:80:c3:8c:53:71:2f:7e:2c:aa:4f:1f:1c:4b:6d:
                    e7:03:9c:cf:7e:54:4f:4b:00:3d:50:b9:f6:b9:6d:
                    ee:60:3d:f3:01:9c:4b:8a:b3:b7:cb:e6:d8:4f:db:
                    f6:66:82:27:88:db:c8:d5:d1:34:ee:c4:36:3c:c6:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:45:AA:AA:45:F8:D9:6F:62:68:9A:36:B6:B5:7E:25:97:A2:2A
            X509v3 Authority Key Identifier:
                keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:ee:56:50:d5:2b:e5:78:a2:cd:5a:f4:dd:c5:26:36:40:
         9e:18:50:3b:fb:b2:39:96:24:2b:30:96:e8:6b:a2:bf:0c:b9:
         ae:4f:ca:fb:7b:6d:85:3e:c1:7a:a6:24:af:42:db:a7:78:9f:
         06:1f:42:da:85:65:06:3f:82:70:94:86:9b:7a:ec:8c:b4:4e:
         ad:81:cb:a2:dc:1d:dd:15:c7:f5:bd:cc:6d:45:54:35:00:8c:
         96:d0:ba:bf:91:23:56:93:e9:16:87:76:83:6b:aa:b6:22:dc:
         98:7d:71:b5:b1:31:bf:a4:8b:5c:b7:4d:31:d1:82:56:bb:cc:
         d1:e8:b0:ec:b3:02:5f:63:d8:03:45:f3:59:c0:d1:c7:c4:9c:
         44:db:1d:14:cc:6b:b7:c2:c4:ff:4a:c3:5f:d8:86:97:04:b3:
         a2:64:d0:24:76:ee:1e:95:ba:c3:f6:26:bb:55:58:04:51:14:
         e4:54:4a:40:dd:dc:ac:0f:0f:e0:6d:fb:13:c2:80:b8:e6:ea:
         71:20:1b:11:54:8c:87:92:81:ba:b7:9d:d8:f6:3a:6e:28:1d:
         78:a6:5f:5f:76:36:bb:dc:1f:9c:65:a8:17:46:69:20:db:8f:
         82:90:7e:bf:29:8b:15:36:fe:98:19:fd:7b:7b:f2:16:77:d9:
         6c:05:0e:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrQNfSwODl/7SipF/INiDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm
ZTAwOWEwHhcNMjMwMTAxMDI1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ0NDVhYWFhNDVmOGQ5NmY2MjY4OWEzNmI2YjU3ZTI1OTdhMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSWxgsOegZBOT2KIhotONAb76t9s
sQJBBu2eOanqSmO8469BvVMWmA6LE4JHAIMugtuVAHFKF6d2gkKxZfE6jNV0yT7/
D7YSSQmVrCMDpb2xVDqQd8MtfgouvNUhXrJMTE75yiSHvJuKW76UD9K4YHKiq4cb
9Tuvwrp6EJH98l+dupqE7tNZtWwxz+pbz03UaGgw7IBvIzwYWKM7AUuYS7nEKzg0
nNwyt2ldtpr4poxESZIuUjszoUC7iIUYShf4MJVkgMOMU3EvfiyqTx8cS23nA5zP
flRPSwA9ULn2uW3uYD3zAZxLirO3y+bYT9v2ZoIniNvI1dE07sQ2PMY/yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlERaqqRfjZb2Jomja2tX4ll6IqMB8GA1UdIwQY
MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt
ZWZhYWZmMGE5ODJmLzEvV1VSRnFxcEYtTmx2WW1pYU5yYTFmaVdYb2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm
LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QcMA0G
CSqGSIb3DQEBCwUAA4IBAQAv3O5WUNUr5XiizVr03cUmNkCeGFA7+7I5liQrMJbo
a6K/DLmuT8r7e22FPsF6piSvQtuneJ8GH0LahWUGP4JwlIabeuyMtE6tgcui3B3d
Fcf1vcxtRVQ1AIyW0Lq/kSNWk+kWh3aDa6q2ItyYfXG1sTG/pItct00x0YJWu8zR
6LDsswJfY9gDRfNZwNHHxJxE2x0UzGu3wsT/SsNf2IaXBLOiZNAkdu4elbrD9ia7
VVgEURTkVEpA3dysDw/gbfsTwoC45upxIBsRVIyHkoG6t53Y9jpuKB14pl9fdja7
3B+cZagXRmkg24+CkH6/KYsVNv6YGf17e/IWd9lsBQ6p
-----END CERTIFICATE-----