Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/d9J7FU6plJSLxKa6NMgSJB5adtA.roa
File:                     d9J7FU6plJSLxKa6NMgSJB5adtA.roa (raw, json)
Hash identifier:          rQ+vUsPA6EJfA1km0FSMoGA9RsWQU9+N73JJ2ROpiqA=
Subject key identifier:   77:D2:7B:15:4E:A9:94:94:8B:C4:A6:BA:34:C8:12:24:1E:5A:76:D0
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       018B9498FC808B2C78C26903C3174EB003DB
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/d9J7FU6plJSLxKa6NMgSJB5adtA.roa
Signing time:             Fri 03 Nov 2023 09:52:15 +0000
ROA not before:           Fri 03 Nov 2023 09:52:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        185.51.184.0/22 maxlen: 22
                          2a01:b460::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:98:fc:80:8b:2c:78:c2:69:03:c3:17:4e:b0:03:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: Nov  3 09:52:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77d27b154ea994948bc4a6ba34c812241e5a76d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:e1:96:e5:c3:77:ca:94:69:30:06:20:95:
                    b6:0a:76:80:70:df:27:3d:28:1d:d8:9c:93:e5:7a:
                    95:26:36:dd:c7:e3:e6:ff:36:d8:21:28:05:e8:b3:
                    86:7a:d8:20:2b:43:02:2a:24:0f:45:e6:35:3a:79:
                    85:16:6a:75:9e:c8:b6:32:d3:06:18:9b:68:f2:7c:
                    6b:d8:10:68:a2:dd:14:00:6e:ef:55:9e:9b:a7:8d:
                    09:fb:9f:54:6c:17:cd:d0:0d:36:f8:ff:9b:13:bc:
                    7a:9d:4f:9c:c3:3c:87:c9:e0:65:72:a2:48:f4:cc:
                    b9:1e:5e:35:8b:9a:c3:49:9e:b2:65:7c:b4:c2:b7:
                    c9:52:aa:6d:ba:5b:63:85:c0:14:f7:66:b7:cd:32:
                    b2:e2:f8:fe:b8:cf:dd:ec:8f:46:99:43:5c:82:b0:
                    ff:ca:32:46:d4:13:e2:ff:e3:8b:37:e8:07:19:78:
                    e6:af:2a:ae:a3:23:30:96:24:56:a8:55:40:b9:1e:
                    a0:00:25:75:ee:25:5c:29:d5:c2:14:67:be:bd:76:
                    22:13:56:fe:34:85:ab:e2:c6:0f:3c:94:f2:e9:f3:
                    b6:e6:54:06:39:e2:b5:d7:c2:ee:cd:75:87:86:e8:
                    3e:ef:72:87:15:8a:e5:68:ac:ac:f2:f6:28:7f:9d:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:7B:15:4E:A9:94:94:8B:C4:A6:BA:34:C8:12:24:1E:5A:76:D0
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/d9J7FU6plJSLxKa6NMgSJB5adtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.184.0/22
                IPv6:
                  2a01:b460::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:10:ef:75:9b:18:37:30:9c:4a:cd:76:c0:c6:24:db:ed:b7:
         2a:66:4e:7e:11:54:0f:b5:e9:e7:d0:61:49:09:2a:04:05:15:
         8a:7f:a1:4c:37:91:e6:98:ee:6d:3d:01:37:c0:c2:73:c0:27:
         c7:bf:c0:f6:74:8a:24:c9:64:fa:4c:4d:db:a9:dc:54:4c:35:
         bb:4e:07:ff:ce:fb:e9:bc:3e:1e:db:ce:7c:e1:10:fd:64:91:
         5e:d5:94:a0:13:3c:b8:39:61:2d:6f:c3:fe:bb:0b:6b:96:84:
         a9:26:b0:05:68:40:f6:d0:b1:51:2d:fc:fd:2a:55:c9:8f:60:
         45:e1:47:c5:ed:70:85:2a:1f:04:6c:94:c2:5e:49:ed:c1:f3:
         a2:8d:16:c3:db:3f:8f:ad:3a:c9:ce:6f:92:0c:1a:31:ab:9a:
         16:a2:40:d5:a4:04:2d:e7:e5:df:a2:72:ed:a9:a8:b4:e5:58:
         94:ab:fe:21:0b:8d:ba:22:e6:14:cf:bf:ce:ef:4d:03:e5:65:
         69:24:33:d5:84:c4:cf:bb:8a:e3:9f:6d:e9:ee:26:d9:51:fa:
         d6:d3:64:a8:71:9e:c8:e5:d4:63:6a:e2:c1:10:f4:4a:40:07:
         d8:d9:78:e7:de:23:64:a4:5b:dd:1b:e1:a7:3e:a2:34:03:4d:
         21:4c:de:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuUmPyAiyx4wmkDwxdOsAPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5
N2RiNjAwHhcNMjMxMTAzMDk1MjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QyN2IxNTRlYTk5NDk0OGJjNGE2YmEzNGM4MTIyNDFlNWE3NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApszhluXDd8qUaTAGIJW2CnaAcN8n
PSgd2JyT5XqVJjbdx+Pm/zbYISgF6LOGetggK0MCKiQPReY1OnmFFmp1nsi2MtMG
GJto8nxr2BBoot0UAG7vVZ6bp40J+59UbBfN0A02+P+bE7x6nU+cwzyHyeBlcqJI
9My5Hl41i5rDSZ6yZXy0wrfJUqptultjhcAU92a3zTKy4vj+uM/d7I9GmUNcgrD/
yjJG1BPi/+OLN+gHGXjmryquoyMwliRWqFVAuR6gACV17iVcKdXCFGe+vXYiE1b+
NIWr4sYPPJTy6fO25lQGOeK118LuzXWHhug+73KHFYrlaKys8vYof52y8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHfSexVOqZSUi8SmujTIEiQeWnbQMB8GA1UdIwQY
MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5
LTYzZmU2YmU2MmRjOS8xL2Q5SjdGVTZwbEpTTHhLYTZOTWdTSkI1YWR0QS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5LTYzZmU2YmU2MmRj
OS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5M7gw
DQQCAAIwBwMFACoBtGAwDQYJKoZIhvcNAQELBQADggEBAAYQ73WbGDcwnErNdsDG
JNvttypmTn4RVA+16efQYUkJKgQFFYp/oUw3keaY7m09ATfAwnPAJ8e/wPZ0iiTJ
ZPpMTdup3FRMNbtOB//O++m8Ph7bznzhEP1kkV7VlKATPLg5YS1vw/67C2uWhKkm
sAVoQPbQsVEt/P0qVcmPYEXhR8XtcIUqHwRslMJeSe3B86KNFsPbP4+tOsnOb5IM
GjGrmhaiQNWkBC3n5d+icu2pqLTlWJSr/iELjboi5hTPv87vTQPlZWkkM9WExM+7
iuOfbenuJtlR+tbTZKhxnsjl1GNq4sEQ9EpAB9jZeOfeI2SkW90b4ac+ojQDTSFM
3uc=
-----END CERTIFICATE-----