Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/q1yNynLWbAWSSnTDbumbENSr9nM.roa
File:                     q1yNynLWbAWSSnTDbumbENSr9nM.roa (raw, json)
Hash identifier:          H2iiQ5FLhvznHAMA5W3VH56/TjqjrwTfJr6AwiuB+dE=
Subject key identifier:   AB:5C:8D:CA:72:D6:6C:05:92:4A:74:C3:6E:E9:9B:10:D4:AB:F6:73
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       01856C6F0A3E7E81F7A3210FAF76F134CD88
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/q1yNynLWbAWSSnTDbumbENSr9nM.roa
Signing time:             Sun 01 Jan 2023 08:24:54 +0000
ROA not before:           Sun 01 Jan 2023 08:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147224
IP address blocks:        2a0e:46c4:2c43::/48 maxlen: 48
                          2a0e:46c4:2c42::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6f:0a:3e:7e:81:f7:a3:21:0f:af:76:f1:34:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: Jan  1 08:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab5c8dca72d66c05924a74c36ee99b10d4abf673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:5b:40:49:bc:81:47:8d:b8:b8:79:b8:26:
                    58:2d:e0:b2:d7:54:4e:6a:c9:ee:d4:74:10:17:2c:
                    2e:fe:37:f0:89:b6:9a:64:dc:95:dd:7e:c4:35:40:
                    86:cc:98:0b:98:ba:a8:ca:23:0d:b9:97:49:7a:29:
                    c0:1f:ae:a1:93:9a:c0:f2:8d:cb:e5:c8:d0:68:77:
                    82:f3:e6:4d:02:93:18:e8:b5:96:b7:fc:64:6c:e2:
                    e4:56:df:1c:17:3e:f5:4e:ca:c7:41:d4:95:a0:e7:
                    45:b9:73:c4:8f:ce:af:e4:f1:ec:8a:62:6b:99:67:
                    35:fb:dd:e5:45:a3:97:43:71:4c:12:15:1f:d0:b3:
                    ed:cd:3f:a1:5d:9d:fd:69:31:96:3f:43:14:9e:97:
                    71:20:3a:8f:b0:72:ad:c0:74:79:70:9b:04:a4:cc:
                    1e:45:3e:34:06:29:32:ce:fc:29:99:76:3d:1e:2d:
                    4d:01:6a:62:e6:fa:a7:83:98:ad:2c:91:28:7e:42:
                    97:f2:10:17:c4:54:54:39:44:b1:93:47:df:b1:83:
                    49:97:f7:cb:be:b5:03:bc:29:55:2c:ad:58:00:6f:
                    ef:88:8d:66:91:8f:df:72:fb:4b:cc:e1:a3:c9:34:
                    33:30:ac:7b:58:57:27:f8:cc:83:5e:78:27:c6:06:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:8D:CA:72:D6:6C:05:92:4A:74:C3:6E:E9:9B:10:D4:AB:F6:73
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/q1yNynLWbAWSSnTDbumbENSr9nM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:46c4:2c42::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:fd:7e:59:21:82:16:74:db:07:10:a3:25:c3:0a:35:92:
         ea:0b:07:58:0f:4f:f6:0f:7f:75:31:49:71:74:20:04:e0:42:
         a1:82:87:d6:60:11:d0:e9:6f:9c:94:99:ff:24:f1:40:4d:8d:
         c1:a6:ef:6f:a3:ed:f1:39:b5:30:dd:a4:ba:62:fe:fc:3e:9e:
         5f:ea:6c:40:a7:4b:a3:75:8b:a8:2c:7b:f6:9e:c0:1f:81:6a:
         b8:7b:e7:9f:e2:af:d0:e1:3b:76:57:bd:bc:22:af:eb:a8:58:
         68:a9:28:32:32:9d:46:36:bc:39:d4:02:d7:73:99:c7:0b:92:
         fb:84:c1:3d:14:b8:62:59:f6:fd:bf:18:28:ad:7a:0b:ad:86:
         82:32:0f:bf:d6:54:9d:fc:ea:d1:e2:15:b4:b6:63:38:ca:bb:
         8b:4d:94:20:e5:21:ef:5d:d6:c3:a8:91:85:07:1e:d8:8b:c3:
         2c:20:42:32:cc:2c:be:78:fa:dc:28:19:fc:5c:db:5a:c7:10:
         ce:fd:16:af:b5:fb:92:8c:e4:20:67:d4:f7:f9:d3:77:bc:8c:
         7f:ca:f7:7f:1f:42:c0:5b:16:e5:9f:35:11:d3:10:57:bb:d9:
         d4:94:bf:51:43:eb:ee:7d:a1:90:02:39:b4:06:0c:60:26:06:
         ac:b1:1e:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsbwo+foH3oyEPr3bxNM2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjMwMTAxMDgyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjVjOGRjYTcyZDY2YzA1OTI0YTc0YzM2ZWU5OWIxMGQ0YWJmNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OBbQEm8gUeNuLh5uCZYLeCy11RO
asnu1HQQFywu/jfwibaaZNyV3X7ENUCGzJgLmLqoyiMNuZdJeinAH66hk5rA8o3L
5cjQaHeC8+ZNApMY6LWWt/xkbOLkVt8cFz71TsrHQdSVoOdFuXPEj86v5PHsimJr
mWc1+93lRaOXQ3FMEhUf0LPtzT+hXZ39aTGWP0MUnpdxIDqPsHKtwHR5cJsEpMwe
RT40BikyzvwpmXY9Hi1NAWpi5vqng5itLJEofkKX8hAXxFRUOUSxk0ffsYNJl/fL
vrUDvClVLK1YAG/viI1mkY/fcvtLzOGjyTQzMKx7WFcn+MyDXngnxgYUHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKtcjcpy1mwFkkp0w27pmxDUq/ZzMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvcTF5TnluTFdiQVdTU25URGJ1bWJFTlNyOW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg5GxCxC
MA0GCSqGSIb3DQEBCwUAA4IBAQAls/1+WSGCFnTbBxCjJcMKNZLqCwdYD0/2D391
MUlxdCAE4EKhgofWYBHQ6W+clJn/JPFATY3Bpu9vo+3xObUw3aS6Yv78Pp5f6mxA
p0ujdYuoLHv2nsAfgWq4e+ef4q/Q4Tt2V728Iq/rqFhoqSgyMp1GNrw51ALXc5nH
C5L7hME9FLhiWfb9vxgorXoLrYaCMg+/1lSd/OrR4hW0tmM4yruLTZQg5SHvXdbD
qJGFBx7Yi8MsIEIyzCy+ePrcKBn8XNtaxxDO/RavtfuSjOQgZ9T3+dN3vIx/yvd/
H0LAWxblnzUR0xBXu9nUlL9RQ+vufaGQAjm0BgxgJgassR6q
-----END CERTIFICATE-----