Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/3DeC7xo2NKfEQ-nw3nfDHVHRr8E.roa
File:                     3DeC7xo2NKfEQ-nw3nfDHVHRr8E.roa (raw, json)
Hash identifier:          Sdpqc/dZ7vzekYdrIeaTuDxGe0zH9PvJ5pO6/ERwsy0=
Subject key identifier:   DC:37:82:EF:1A:36:34:A7:C4:43:E9:F0:DE:77:C3:1D:51:D1:AF:C1
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       0188ACDB48D6435B2AB8A19BC653AA3E989A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/3DeC7xo2NKfEQ-nw3nfDHVHRr8E.roa
Signing time:             Sun 11 Jun 2023 23:47:12 +0000
ROA not before:           Sun 11 Jun 2023 23:47:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        80.83.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ac:db:48:d6:43:5b:2a:b8:a1:9b:c6:53:aa:3e:98:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Jun 11 23:47:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc3782ef1a3634a7c443e9f0de77c31d51d1afc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:15:aa:bb:c6:ee:5b:d0:fa:f8:df:cb:19:
                    37:bb:3c:38:a2:c3:90:2a:5e:69:e3:19:70:04:70:
                    74:c0:c4:f4:c0:1e:8f:40:f8:ba:61:c0:6b:29:10:
                    76:c4:48:ed:cd:95:96:cb:d1:e5:9d:26:60:9e:01:
                    34:5b:fc:c1:c6:fb:be:3c:2f:27:8e:f6:de:8c:45:
                    29:9b:41:56:fe:46:3e:34:39:fd:45:2a:d4:31:bf:
                    c3:67:73:f9:25:9b:d9:03:56:2d:b8:45:53:69:00:
                    3b:c0:7d:b2:33:9c:0f:99:22:cb:32:2b:b3:02:58:
                    89:20:64:fe:16:32:f0:e2:cb:2d:42:21:b3:f5:3d:
                    98:fd:2d:ea:91:5d:3c:65:18:df:3f:80:25:dc:e7:
                    67:b3:2e:21:42:02:a0:87:0a:f8:1e:b1:9a:6e:2e:
                    ab:5b:b3:bf:90:ec:43:9d:aa:95:f6:60:3e:4d:ef:
                    c5:fe:4b:9c:fb:8b:8c:70:1f:99:52:6a:f9:3b:b8:
                    99:70:a6:c5:50:72:7e:ab:98:03:b0:a2:aa:22:f5:
                    1c:c8:89:ed:7b:c7:e9:6e:60:c6:b5:6a:71:d6:c7:
                    78:51:7c:66:e8:73:f6:6c:1c:e1:43:1a:55:35:6c:
                    f3:b4:da:f5:75:9b:19:79:be:cf:e3:e9:96:f2:2c:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:82:EF:1A:36:34:A7:C4:43:E9:F0:DE:77:C3:1D:51:D1:AF:C1
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/3DeC7xo2NKfEQ-nw3nfDHVHRr8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.83.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:83:51:d6:b0:9c:14:28:5a:e8:f6:d5:69:09:c6:3d:46:
         01:58:0a:bc:66:fe:8a:94:1a:b6:be:b9:83:d4:a2:79:ce:12:
         d4:e3:2e:ff:dc:c7:ed:29:6b:e0:58:15:f1:8f:61:ad:de:19:
         3e:79:91:f6:54:8a:ce:b4:fd:0a:38:45:53:68:9f:b1:f2:ec:
         2f:db:fd:e1:85:34:e1:3b:8e:04:70:26:bd:b6:24:00:1b:f0:
         04:a4:c6:64:6f:c4:38:c3:5d:3b:25:42:20:4e:29:63:76:04:
         a6:7e:ce:c7:75:0b:56:c3:b1:60:2d:24:70:4f:3d:97:47:13:
         f4:c9:d7:5d:00:c4:05:c6:a3:23:2e:a1:1d:50:60:2c:a7:55:
         ae:08:91:70:87:2b:82:e4:89:98:b0:77:2a:e0:3b:b9:5b:93:
         86:3d:e6:8b:1c:cc:2b:01:68:34:53:2f:2a:65:3d:19:b0:ac:
         80:02:2c:dc:93:41:91:1e:08:0c:c8:ed:53:39:84:ed:f7:fc:
         db:cc:8b:49:60:42:70:29:f2:03:36:39:69:d5:76:db:6e:eb:
         9b:e5:08:cc:f9:94:05:81:2f:04:86:e5:ab:99:04:4e:27:0a:
         78:d6:05:1a:58:07:42:9f:22:f7:71:ea:89:11:bc:3b:41:0a:
         0c:5f:f5:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYis20jWQ1squKGbxlOqPpiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMwNjExMjM0NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzM3ODJlZjFhMzYzNGE3YzQ0M2U5ZjBkZTc3YzMxZDUxZDFhZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JoVqrvG7lvQ+vjfyxk3uzw4osOQ
Kl5p4xlwBHB0wMT0wB6PQPi6YcBrKRB2xEjtzZWWy9HlnSZgngE0W/zBxvu+PC8n
jvbejEUpm0FW/kY+NDn9RSrUMb/DZ3P5JZvZA1YtuEVTaQA7wH2yM5wPmSLLMiuz
AliJIGT+FjLw4sstQiGz9T2Y/S3qkV08ZRjfP4Al3Odnsy4hQgKghwr4HrGabi6r
W7O/kOxDnaqV9mA+Te/F/kuc+4uMcB+ZUmr5O7iZcKbFUHJ+q5gDsKKqIvUcyInt
e8fpbmDGtWpx1sd4UXxm6HP2bBzhQxpVNWzztNr1dZsZeb7P4+mW8iybLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNw3gu8aNjSnxEPp8N53wx1R0a/BMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvM0RlQzd4bzJOS2ZFUS1udzNuZkRIVkhScjhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFNYMA0G
CSqGSIb3DQEBCwUAA4IBAQApi4NR1rCcFCha6PbVaQnGPUYBWAq8Zv6KlBq2vrmD
1KJ5zhLU4y7/3MftKWvgWBXxj2Gt3hk+eZH2VIrOtP0KOEVTaJ+x8uwv2/3hhTTh
O44EcCa9tiQAG/AEpMZkb8Q4w107JUIgTiljdgSmfs7HdQtWw7FgLSRwTz2XRxP0
ydddAMQFxqMjLqEdUGAsp1WuCJFwhyuC5ImYsHcq4Du5W5OGPeaLHMwrAWg0Uy8q
ZT0ZsKyAAizck0GRHggMyO1TOYTt9/zbzItJYEJwKfIDNjlp1Xbbbuub5QjM+ZQF
gS8EhuWrmQROJwp41gUaWAdCnyL3ceqJEbw7QQoMX/UT
-----END CERTIFICATE-----