Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa
File:                     bdlsitq9_cizOQmgi4beqaaERY8.roa (raw, json)
Hash identifier:          Y9H3eGuuxHYx7DcM4oG3QvPTdrTu0w3JPxQq3f73s0U=
Subject key identifier:   6D:D9:6C:8A:DA:BD:FD:C8:B3:39:09:A0:8B:86:DE:A9:A6:84:45:8F
Certificate issuer:       /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial:       01857082C374173170F4394FEE35261D83AB
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa
Signing time:             Mon 02 Jan 2023 03:24:55 +0000
ROA not before:           Mon 02 Jan 2023 03:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211785
IP address blocks:        185.241.11.0/24 maxlen: 24
                          2a10:9ec0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:c3:74:17:31:70:f4:39:4f:ee:35:26:1d:83:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
        Validity
            Not Before: Jan  2 03:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6dd96c8adabdfdc8b33909a08b86dea9a684458f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:07:f6:7f:10:af:04:2d:c1:4a:8b:00:09:
                    68:20:d0:51:e5:64:00:db:a1:2f:53:b2:7e:1e:ba:
                    e1:db:27:1e:89:f5:3c:f2:09:72:35:cc:39:bb:9d:
                    1d:e7:76:72:04:d2:04:5c:c3:f9:05:5a:f4:25:f8:
                    10:41:1d:ab:2d:95:d8:f2:9d:48:a1:6e:2a:fe:98:
                    14:67:4a:e3:20:58:d1:13:4f:28:98:eb:c0:19:1b:
                    f2:e6:91:eb:56:52:9a:52:2e:fe:dd:3f:39:4e:1a:
                    c7:e0:7a:6f:26:04:2b:41:00:5c:2c:db:0a:f3:bb:
                    8b:73:15:57:59:72:85:b9:28:43:62:aa:a8:1e:39:
                    23:a2:31:42:b8:41:3b:f6:db:67:ff:0c:fd:bc:6e:
                    ab:18:f3:61:c2:0a:69:68:68:12:2c:f2:4f:9e:67:
                    f3:a5:e2:9b:3c:49:35:47:bb:1c:0c:82:97:05:c4:
                    6e:4a:8a:ff:b0:f4:8f:8b:4a:8d:7c:9c:01:24:88:
                    13:98:3c:51:f8:e3:f8:57:b9:00:e8:c3:38:b3:db:
                    02:0c:bf:ce:35:0e:96:dd:4d:dd:01:58:f9:3a:ce:
                    f4:05:90:ae:a0:c3:5a:d1:fb:85:fe:80:e4:65:f9:
                    48:b4:47:0b:13:1f:5e:5a:0c:40:45:1a:af:ea:ab:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:6C:8A:DA:BD:FD:C8:B3:39:09:A0:8B:86:DE:A9:A6:84:45:8F
            X509v3 Authority Key Identifier:
                keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/bdlsitq9_cizOQmgi4beqaaERY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.11.0/24
                IPv6:
                  2a10:9ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:4a:67:bf:6c:c7:45:55:02:03:99:d2:62:d7:c0:71:60:
         b5:45:99:9f:82:d8:18:c4:c0:8f:be:e7:9c:45:dd:19:9a:76:
         9d:3f:18:e9:41:54:e4:9d:a0:49:f8:11:73:db:b8:f9:ac:fc:
         43:ba:a4:96:c5:7a:69:e7:44:c3:7d:88:10:9f:f1:da:24:a6:
         1b:ed:8f:5c:89:a5:a4:62:27:50:79:8c:84:ba:91:ea:82:50:
         85:79:22:4f:dd:b4:03:11:f2:f9:e8:39:08:9a:31:f9:74:4d:
         8a:2a:b3:9c:13:14:cc:0a:52:d5:c4:bf:d0:e1:3c:7f:8a:bb:
         d7:0a:f6:34:1e:6f:e8:e5:a5:d7:bb:bd:aa:7c:e2:6b:c1:2c:
         6f:0b:40:a3:fd:51:56:74:c2:73:43:25:ec:c8:01:a1:c1:a9:
         79:e4:9b:54:98:ff:43:70:d1:5b:19:59:4c:46:7f:26:45:0d:
         04:05:21:8c:1c:f8:4b:1f:9a:fc:17:0d:a8:c5:0b:06:32:6c:
         09:f7:11:55:e0:bd:7d:1d:1b:dd:c4:a5:d4:c2:5f:e2:86:57:
         e9:c0:1f:70:fe:ce:d8:69:c7:5e:fb:7c:ee:77:68:ee:bd:98:
         4b:70:6c:99:62:44:97:86:7d:2e:4c:de:80:f7:24:88:e6:e3:
         88:62:2c:c4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwgsN0FzFw9DlP7jUmHYOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjU0ZTE1NzE0YzIzZjM1ZmRjZjVhMzE2YzZiOTlhMzU0
MTA1ODgwHhcNMjMwMTAyMDMyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGQ5NmM4YWRhYmRmZGM4YjMzOTA5YTA4Yjg2ZGVhOWE2ODQ0NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1MH9n8QrwQtwUqLAAloINBR5WQA
26EvU7J+Hrrh2yceifU88glyNcw5u50d53ZyBNIEXMP5BVr0JfgQQR2rLZXY8p1I
oW4q/pgUZ0rjIFjRE08omOvAGRvy5pHrVlKaUi7+3T85ThrH4HpvJgQrQQBcLNsK
87uLcxVXWXKFuShDYqqoHjkjojFCuEE79ttn/wz9vG6rGPNhwgppaGgSLPJPnmfz
peKbPEk1R7scDIKXBcRuSor/sPSPi0qNfJwBJIgTmDxR+OP4V7kA6MM4s9sCDL/O
NQ6W3U3dAVj5Os70BZCuoMNa0fuF/oDkZflItEcLEx9eWgxARRqv6qvFEQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG3ZbIravf3IszkJoIuG3qmmhEWPMB8GA1UdIwQY
MBaAFPa1ThVxTCPzX9z1oxbGuZo1QQWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJWT0ZYRk1JX05mM1BXakZzYTVtalZCQllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wOTcyNzgtZWFiNi00MWY3LTgyYWMt
YTA3OGM2Y2NiZTZiLzEvYmRsc2l0cTlfY2l6T1FtZ2k0YmVxYWFFUlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wOTcyNzgtZWFiNi00MWY3LTgyYWMtYTA3OGM2Y2NiZTZi
LzEvOXJWT0ZYRk1JX05mM1BXakZzYTVtalZCQllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufELMA0E
AgACMAcDBQMqEJ7AMA0GCSqGSIb3DQEBCwUAA4IBAQBTjkpnv2zHRVUCA5nSYtfA
cWC1RZmfgtgYxMCPvuecRd0ZmnadPxjpQVTknaBJ+BFz27j5rPxDuqSWxXpp50TD
fYgQn/HaJKYb7Y9ciaWkYidQeYyEupHqglCFeSJP3bQDEfL56DkImjH5dE2KKrOc
ExTMClLVxL/Q4Tx/irvXCvY0Hm/o5aXXu72qfOJrwSxvC0Cj/VFWdMJzQyXsyAGh
wal55JtUmP9DcNFbGVlMRn8mRQ0EBSGMHPhLH5r8Fw2oxQsGMmwJ9xFV4L19HRvd
xKXUwl/ihlfpwB9w/s7Yacde+3zud2juvZhLcGyZYkSXhn0uTN6A9ySI5uOIYizE
-----END CERTIFICATE-----