Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/vvcWLilqcP_L5S9kbDuxWxJP_qQ.roa
File:                     vvcWLilqcP_L5S9kbDuxWxJP_qQ.roa (raw, json)
Hash identifier:          fz571/tXnFZlIhFTWGiyVd8Syuw5ETzU7Wzuxdixctc=
Subject key identifier:   BE:F7:16:2E:29:6A:70:FF:CB:E5:2F:64:6C:3B:B1:5B:12:4F:FE:A4
Certificate issuer:       /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial:       01874D4DC34C3BF10B788079D83A4B41F7EB
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/vvcWLilqcP_L5S9kbDuxWxJP_qQ.roa
Signing time:             Tue 04 Apr 2023 17:25:54 +0000
ROA not before:           Tue 04 Apr 2023 17:25:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47215
IP address blocks:        185.134.240.0/24 maxlen: 24
                          2a06:ee40:22::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4d:4d:c3:4c:3b:f1:0b:78:80:79:d8:3a:4b:41:f7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
        Validity
            Not Before: Apr  4 17:25:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bef7162e296a70ffcbe52f646c3bb15b124ffea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:6e:14:8d:c4:57:73:27:d5:0f:3d:65:1d:
                    6f:5b:77:95:9d:3a:43:17:bf:39:a2:44:e6:5f:97:
                    36:4c:5a:5c:e1:89:1d:da:05:84:9b:61:d5:d4:6d:
                    d4:a3:e5:a7:b9:28:29:5b:41:1f:19:e2:4c:74:e4:
                    df:a5:07:f6:06:cd:64:81:c8:93:77:dd:da:c6:e6:
                    e4:c0:e1:f9:a5:45:c0:9d:9c:15:06:32:e8:ac:36:
                    a9:c8:f8:a8:53:88:47:a1:e0:bf:2e:93:e0:05:96:
                    65:b1:ad:68:6b:d5:6b:ef:55:a2:64:72:4c:0b:98:
                    11:60:92:67:32:0b:97:47:2f:53:3c:04:be:2f:e1:
                    3e:8b:5b:ea:2a:46:d1:3f:c5:25:b4:b6:35:7a:d7:
                    72:cb:00:0c:45:e3:96:67:7b:f5:5c:71:cc:b6:81:
                    cd:95:27:c8:c7:f1:ab:c4:6e:1d:d8:93:6f:fc:65:
                    12:8c:59:9d:a9:04:26:1d:05:2a:f5:09:4b:a9:e3:
                    35:a5:31:fa:e9:90:d2:92:9a:70:04:40:65:94:47:
                    1c:33:2d:f2:d0:4e:bd:71:d5:9a:b9:0b:69:13:40:
                    a1:18:95:e8:59:2c:8c:00:cb:d5:ee:57:23:8b:0b:
                    56:1c:3d:05:9d:0a:9f:f4:fe:c9:41:b3:db:57:c8:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F7:16:2E:29:6A:70:FF:CB:E5:2F:64:6C:3B:B1:5B:12:4F:FE:A4
            X509v3 Authority Key Identifier:
                keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/vvcWLilqcP_L5S9kbDuxWxJP_qQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.240.0/24
                IPv6:
                  2a06:ee40:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:b4:65:9c:da:23:41:4f:3e:39:3b:ce:b3:24:0d:2e:57:
         8e:9b:dc:f8:fc:f5:cc:60:cb:8f:4d:a3:e4:65:d0:c5:83:01:
         6e:90:48:b1:ee:0b:90:a4:b4:82:2a:b7:54:88:eb:1d:7c:db:
         12:b5:ec:5b:81:54:14:27:03:73:a0:90:44:ed:4e:16:5e:b5:
         a0:d7:c5:a0:f0:3a:e3:e1:1a:a2:22:d6:29:ce:da:73:34:6b:
         11:8c:70:ba:bd:94:34:7e:1e:73:26:03:32:a7:24:1e:2c:66:
         8c:5c:00:c2:b8:e9:ff:a5:7c:a3:3c:a8:92:2b:9e:75:bd:d0:
         34:da:98:08:11:04:fa:c7:bb:ce:d9:6e:aa:95:39:70:c9:0f:
         3a:29:b3:20:b6:f7:ac:ee:58:e0:d9:1c:64:30:63:15:11:eb:
         37:f7:a6:17:38:a5:ea:ac:b8:32:af:ec:b3:dd:2d:8c:04:8d:
         90:b4:4a:18:f5:12:8a:34:b0:02:1c:1f:21:cd:ab:20:f3:06:
         e1:d0:20:b4:75:57:90:91:7d:dc:c3:78:5c:25:2f:9b:a6:43:
         0d:ca:0a:53:22:43:33:92:85:3d:72:0b:db:53:c1:98:60:e1:
         08:20:58:cf:c9:fa:d1:38:9d:90:c3:0c:02:23:58:5c:55:c6:
         ea:f9:67:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdNTcNMO/ELeIB52DpLQffrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx
OGY1MTcwHhcNMjMwNDA0MTcyNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWY3MTYyZTI5NmE3MGZmY2JlNTJmNjQ2YzNiYjE1YjEyNGZmZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8BuFI3EV3Mn1Q89ZR1vW3eVnTpD
F785okTmX5c2TFpc4Ykd2gWEm2HV1G3Uo+WnuSgpW0EfGeJMdOTfpQf2Bs1kgciT
d93axubkwOH5pUXAnZwVBjLorDapyPioU4hHoeC/LpPgBZZlsa1oa9Vr71WiZHJM
C5gRYJJnMguXRy9TPAS+L+E+i1vqKkbRP8UltLY1etdyywAMReOWZ3v1XHHMtoHN
lSfIx/GrxG4d2JNv/GUSjFmdqQQmHQUq9QlLqeM1pTH66ZDSkppwBEBllEccMy3y
0E69cdWauQtpE0ChGJXoWSyMAMvV7lcjiwtWHD0FnQqf9P7JQbPbV8jcOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL73Fi4panD/y+UvZGw7sVsST/6kMB8GA1UdIwQY
MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt
ZGVkYzUyYTJlZDhmLzEvdnZjV0xpbHFjUF9MNVM5a2JEdXhXeEpQX3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm
LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYbwMA8E
AgACMAkDBwAqBu5AACIwDQYJKoZIhvcNAQELBQADggEBADT5tGWc2iNBTz45O86z
JA0uV46b3Pj89cxgy49No+Rl0MWDAW6QSLHuC5CktIIqt1SI6x182xK17FuBVBQn
A3OgkETtThZetaDXxaDwOuPhGqIi1inO2nM0axGMcLq9lDR+HnMmAzKnJB4sZoxc
AMK46f+lfKM8qJIrnnW90DTamAgRBPrHu87ZbqqVOXDJDzopsyC296zuWODZHGQw
YxUR6zf3phc4peqsuDKv7LPdLYwEjZC0Shj1Eoo0sAIcHyHNqyDzBuHQILR1V5CR
fdzDeFwlL5umQw3KClMiQzOShT1yC9tTwZhg4QggWM/J+tE4nZDDDAIjWFxVxur5
Z3o=
-----END CERTIFICATE-----