Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/4_TWWLVcMcAgBrctVhnBQjvyF3c.roa
File:                     4_TWWLVcMcAgBrctVhnBQjvyF3c.roa (raw, json)
Hash identifier:          vHnGTGuhX1xlNRWb4ZiuLG5XytdQqjMuNPu4axTkLqc=
Subject key identifier:   E3:F4:D6:58:B5:5C:31:C0:20:06:B7:2D:56:19:C1:42:3B:F2:17:77
Certificate issuer:       /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial:       01856FF058C26D833E5E336CB4DDEE2B3CF3
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/4_TWWLVcMcAgBrctVhnBQjvyF3c.roa
Signing time:             Mon 02 Jan 2023 00:45:00 +0000
ROA not before:           Mon 02 Jan 2023 00:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49101
IP address blocks:        82.144.128.0/19 maxlen: 24
                          2a02:d00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:58:c2:6d:83:3e:5e:33:6c:b4:dd:ee:2b:3c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
        Validity
            Not Before: Jan  2 00:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3f4d658b55c31c02006b72d5619c1423bf21777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:71:5f:d2:70:e5:f2:d5:e1:ff:15:93:c2:
                    14:64:5d:2d:47:74:43:7a:8d:e1:15:e4:76:80:33:
                    1f:20:62:b3:a8:11:67:de:13:1d:34:e0:04:0e:0f:
                    12:0e:74:c4:be:ce:60:4a:75:d3:fa:b8:a9:a5:68:
                    3b:7d:a5:88:05:fe:ed:91:dd:4c:93:59:c6:98:6a:
                    aa:ea:0d:3d:99:88:0a:95:3a:68:48:2f:93:5d:45:
                    00:bc:02:89:5c:7a:46:58:24:4c:b8:ef:9e:b2:fb:
                    71:30:98:e1:9f:80:71:99:5a:8a:2a:52:e4:99:5d:
                    f1:be:e0:fe:0f:a3:01:0d:82:62:b9:09:e8:4d:6a:
                    39:6b:db:11:de:71:92:1b:4b:4b:6d:f0:62:81:a1:
                    ce:d7:e8:57:e8:76:cb:c1:d5:4a:9e:f7:27:44:4a:
                    dd:54:92:b5:49:8f:0c:5f:18:c9:f1:a4:f2:05:72:
                    5b:b4:81:8d:80:92:bf:e4:bd:2d:ee:b6:25:4d:8d:
                    b6:3c:2b:11:ac:70:63:dc:60:25:84:ac:9d:6d:c0:
                    76:60:65:b7:d8:c8:f7:97:8b:f3:9c:37:84:79:43:
                    c2:31:c2:30:20:11:1d:a5:73:fa:28:70:c4:7c:a0:
                    65:e0:a3:52:fc:b2:57:51:b5:96:21:6a:ce:75:ba:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:D6:58:B5:5C:31:C0:20:06:B7:2D:56:19:C1:42:3B:F2:17:77
            X509v3 Authority Key Identifier:
                keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/4_TWWLVcMcAgBrctVhnBQjvyF3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.144.128.0/19
                IPv6:
                  2a02:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:c3:2a:60:5b:fb:96:80:06:3a:85:02:05:41:da:39:d1:
         33:10:c8:25:dc:0f:d8:84:a7:d6:be:82:11:2f:29:80:fa:61:
         f9:82:ba:40:cc:14:0d:43:04:2a:1b:51:1a:da:d3:07:c7:85:
         8e:2c:1f:27:90:dd:17:8b:42:3c:01:7d:78:73:3a:0f:61:99:
         45:2d:bc:49:27:d1:18:9d:5d:c4:84:a9:d0:42:cf:d2:9e:fa:
         ed:c7:b6:25:94:93:e3:5c:c5:8c:95:06:cf:40:48:c2:fb:4c:
         29:98:b4:3c:41:42:9f:6a:43:90:b9:bd:bc:30:60:b3:0f:5e:
         ab:fd:c1:d2:87:02:bf:20:e4:a0:02:b2:c4:60:ce:e2:72:94:
         b4:88:0d:d4:98:3f:68:49:28:ac:63:98:6f:cd:54:9c:41:20:
         51:e5:e3:fd:62:52:12:e1:9c:8a:51:9b:28:75:65:dc:f3:a7:
         fb:3a:ad:72:1a:da:e4:07:4d:ed:b4:70:40:4e:ac:98:b9:19:
         c7:b8:8f:39:c0:30:fa:59:76:fa:0c:bb:0b:71:b5:2c:c5:be:
         d9:75:7a:2e:61:1b:00:8d:23:d5:3f:b7:12:bc:d0:d6:8d:9e:
         e8:d2:b1:f4:f1:fd:b3:ac:6e:52:e5:7c:98:bc:dc:1c:06:7d:
         29:52:7a:9f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVv8FjCbYM+XjNstN3uKzzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MmFhOWVhODRkYjQxYWQ5ZjA0NTA0OWQ4ZTE0NmY5NzVl
NDJmY2IwHhcNMjMwMTAyMDA0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2Y0ZDY1OGI1NWMzMWMwMjAwNmI3MmQ1NjE5YzE0MjNiZjIxNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp9xX9Jw5fLV4f8Vk8IUZF0tR3RD
eo3hFeR2gDMfIGKzqBFn3hMdNOAEDg8SDnTEvs5gSnXT+rippWg7faWIBf7tkd1M
k1nGmGqq6g09mYgKlTpoSC+TXUUAvAKJXHpGWCRMuO+esvtxMJjhn4BxmVqKKlLk
mV3xvuD+D6MBDYJiuQnoTWo5a9sR3nGSG0tLbfBigaHO1+hX6HbLwdVKnvcnRErd
VJK1SY8MXxjJ8aTyBXJbtIGNgJK/5L0t7rYlTY22PCsRrHBj3GAlhKydbcB2YGW3
2Mj3l4vznDeEeUPCMcIwIBEdpXP6KHDEfKBl4KNS/LJXUbWWIWrOdbrnvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOP01li1XDHAIAa3LVYZwUI78hd3MB8GA1UdIwQY
MBaAFMUqqeqE20GtnwRQSdjhRvl15C/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNxcDZvVGJRYTJmQkZCSjJPRkctWFhrTDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hYjg1NDUtZjhiNy00YzVlLTk4ZmYt
MjUwMzVjMWQxNGRjLzEvNF9UV1dMVmNNY0FnQnJjdFZobkJRanZ5RjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hYjg1NDUtZjhiNy00YzVlLTk4ZmYtMjUwMzVjMWQxNGRj
LzEveFNxcDZvVGJRYTJmQkZCSjJPRkctWFhrTDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUpCAMA0E
AgACMAcDBQAqAg0AMA0GCSqGSIb3DQEBCwUAA4IBAQBOSsMqYFv7loAGOoUCBUHa
OdEzEMgl3A/YhKfWvoIRLymA+mH5grpAzBQNQwQqG1Ea2tMHx4WOLB8nkN0Xi0I8
AX14czoPYZlFLbxJJ9EYnV3EhKnQQs/Snvrtx7YllJPjXMWMlQbPQEjC+0wpmLQ8
QUKfakOQub28MGCzD16r/cHShwK/IOSgArLEYM7icpS0iA3UmD9oSSisY5hvzVSc
QSBR5eP9YlIS4ZyKUZsodWXc86f7Oq1yGtrkB03ttHBATqyYuRnHuI85wDD6WXb6
DLsLcbUsxb7ZdXouYRsAjSPVP7cSvNDWjZ7o0rH08f2zrG5S5XyYvNwcBn0pUnqf
-----END CERTIFICATE-----