Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/47at-Fx56kNAewaxIqGJTa8Jc_c.roa
File:                     47at-Fx56kNAewaxIqGJTa8Jc_c.roa (raw, json)
Hash identifier:          ZbExXB541ymaFAFOki4w6cM/kVcA7Hx4Uwa3Y9vaOtI=
Subject key identifier:   E3:B6:AD:F8:5C:79:EA:43:40:7B:06:B1:22:A1:89:4D:AF:09:73:F7
Certificate issuer:       /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial:       018CBADDF7FE3EAB4EFE8F788C842E478011
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/47at-Fx56kNAewaxIqGJTa8Jc_c.roa
Signing time:             Sat 30 Dec 2023 13:15:58 +0000
ROA not before:           Sat 30 Dec 2023 13:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50919
IP address blocks:        185.96.34.0/24 maxlen: 24
                          2a13:eb00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ba:dd:f7:fe:3e:ab:4e:fe:8f:78:8c:84:2e:47:80:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
        Validity
            Not Before: Dec 30 13:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3b6adf85c79ea43407b06b122a1894daf0973f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7e:46:dc:ee:7a:46:a5:60:04:b9:4b:ef:dd:
                    1f:78:cb:6c:a7:ed:7e:39:98:06:34:b1:6b:20:e8:
                    12:cf:b6:62:ad:af:b1:56:ff:f6:49:e2:97:15:70:
                    f3:88:7d:8e:06:0b:78:e5:a5:e9:61:c1:2f:88:2c:
                    69:8b:e8:d3:ed:82:fe:6a:65:cd:c0:0e:a1:a0:48:
                    cd:dd:2e:ae:9c:3e:51:73:b8:8f:c5:40:03:0a:4e:
                    7e:68:27:da:ec:bc:31:00:38:41:2d:2c:08:90:92:
                    ab:66:91:7b:02:e5:a6:07:a8:56:6e:cd:68:5f:81:
                    c8:e4:21:e9:0d:cf:d8:97:46:bd:5f:1f:ad:5a:70:
                    99:7a:a4:89:3b:d3:69:41:4f:ba:6b:93:c7:e9:e6:
                    88:37:20:11:c0:5b:0d:19:8e:23:9d:93:05:7c:32:
                    70:5b:75:c3:8d:da:56:3d:3b:b3:9d:62:41:9e:9e:
                    66:16:00:27:82:14:f6:81:7f:30:74:50:5c:02:94:
                    4f:09:fc:e8:a0:b3:43:52:2c:5e:12:0a:37:c4:06:
                    32:65:2d:2f:12:da:66:85:34:5d:06:aa:b4:b2:d5:
                    2d:91:41:5d:d7:b7:54:ce:fd:77:77:71:79:58:7f:
                    49:32:d5:6f:e2:44:a3:19:c4:93:bb:57:f4:b8:c3:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:AD:F8:5C:79:EA:43:40:7B:06:B1:22:A1:89:4D:AF:09:73:F7
            X509v3 Authority Key Identifier:
                keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/47at-Fx56kNAewaxIqGJTa8Jc_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.34.0/24
                IPv6:
                  2a13:eb00::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:de:09:d8:89:7c:70:0d:56:c5:98:f4:9e:03:97:09:b5:
         48:73:42:45:eb:7c:29:c1:de:24:55:44:cb:26:77:69:1f:8e:
         02:fe:15:bd:1f:d1:e5:11:a3:be:bb:83:a4:bf:51:ee:80:b5:
         77:9f:c7:41:ff:0e:83:31:0d:97:4d:01:06:8a:06:a5:cf:49:
         7e:74:ad:6c:a4:f2:5f:77:d3:03:e9:79:bf:91:f2:f5:00:b0:
         f1:06:00:b5:1d:49:96:a9:b0:a5:dd:6c:09:11:2f:98:e2:92:
         f8:5f:ec:20:23:f2:10:ce:6f:eb:68:5f:81:00:7c:36:63:12:
         ff:d0:e3:d7:fd:68:22:e2:00:8a:1f:b7:12:dc:9e:cf:06:9a:
         af:d0:4e:b5:92:26:2d:aa:b4:ee:48:1d:c7:b9:17:3f:af:3e:
         20:87:b4:db:b2:d5:b7:d1:ac:bd:e7:8e:0f:3f:b7:62:69:d5:
         2f:eb:54:17:01:aa:8f:c9:37:95:55:39:45:be:4b:d5:c9:e6:
         59:19:ef:62:6a:b1:1f:08:17:f7:e5:f7:9b:64:55:42:83:06:
         2b:a6:c0:5c:34:e5:a0:54:42:83:98:51:ac:b0:20:42:83:84:
         82:c7:44:2e:04:c6:f5:6c:0c:53:2f:19:2c:b8:1e:5b:80:b0:
         78:56:9f:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYy63ff+PqtO/o94jIQuR4ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw
NzQ1YWEwHhcNMjMxMjMwMTMxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2I2YWRmODVjNzllYTQzNDA3YjA2YjEyMmExODk0ZGFmMDk3M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9H5G3O56RqVgBLlL790feMtsp+1+
OZgGNLFrIOgSz7Zira+xVv/2SeKXFXDziH2OBgt45aXpYcEviCxpi+jT7YL+amXN
wA6hoEjN3S6unD5Rc7iPxUADCk5+aCfa7LwxADhBLSwIkJKrZpF7AuWmB6hWbs1o
X4HI5CHpDc/Yl0a9Xx+tWnCZeqSJO9NpQU+6a5PH6eaINyARwFsNGY4jnZMFfDJw
W3XDjdpWPTuznWJBnp5mFgAnghT2gX8wdFBcApRPCfzooLNDUixeEgo3xAYyZS0v
EtpmhTRdBqq0stUtkUFd17dUzv13d3F5WH9JMtVv4kSjGcSTu1f0uMMU1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOO2rfhceepDQHsGsSKhiU2vCXP3MB8GA1UdIwQY
MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvNDdhdC1GeDU2a05BZXdheElxR0pUYThKY19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWAiMA8E
AgACMAkDBwAqE+sAAAAwDQYJKoZIhvcNAQELBQADggEBADb/3gnYiXxwDVbFmPSe
A5cJtUhzQkXrfCnB3iRVRMsmd2kfjgL+Fb0f0eURo767g6S/Ue6AtXefx0H/DoMx
DZdNAQaKBqXPSX50rWyk8l930wPpeb+R8vUAsPEGALUdSZapsKXdbAkRL5jikvhf
7CAj8hDOb+toX4EAfDZjEv/Q49f9aCLiAIoftxLcns8Gmq/QTrWSJi2qtO5IHce5
Fz+vPiCHtNuy1bfRrL3njg8/t2Jp1S/rVBcBqo/JN5VVOUW+S9XJ5lkZ72JqsR8I
F/fl95tkVUKDBiumwFw05aBUQoOYUaywIEKDhILHRC4ExvVsDFMvGSy4HluAsHhW
n6g=
-----END CERTIFICATE-----