Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/5v0lgBgqvHynHh2_oTFhq0AUS1M.roa
File:                     5v0lgBgqvHynHh2_oTFhq0AUS1M.roa (raw, json)
Hash identifier:          OYqgvp4PK+6EpuigmFP7UrbbEuBsUIcEWvUBBxfp0Gg=
Subject key identifier:   E6:FD:25:80:18:2A:BC:7C:A7:1E:1D:BF:A1:31:61:AB:40:14:4B:53
Certificate issuer:       /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial:       01856CA5DFC8FD8D80F74B913CB73D9DEBD6
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/5v0lgBgqvHynHh2_oTFhq0AUS1M.roa
Signing time:             Sun 01 Jan 2023 09:24:48 +0000
ROA not before:           Sun 01 Jan 2023 09:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201265
IP address blocks:        185.32.160.0/22 maxlen: 24
                          2a00:a5a1::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:a5:df:c8:fd:8d:80:f7:4b:91:3c:b7:3d:9d:eb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
        Validity
            Not Before: Jan  1 09:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6fd2580182abc7ca71e1dbfa13161ab40144b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:be:44:d0:22:ad:ac:7f:94:22:ff:a7:b3:
                    f8:b0:12:e8:69:8c:2d:b8:23:b1:66:80:e4:73:42:
                    91:a4:dd:bc:83:cc:f1:40:ff:70:19:ec:9c:58:60:
                    25:a7:00:56:3d:d9:3c:79:7e:2e:3e:f3:09:8c:cb:
                    34:84:74:9e:32:7b:92:6e:0b:57:19:5c:da:08:62:
                    a4:56:a0:3e:d2:b6:be:8a:80:c0:4e:25:32:29:86:
                    53:6d:2b:29:b7:5f:8f:cb:cd:a9:c9:0c:d2:17:10:
                    bd:1d:74:85:15:79:44:ad:dd:c4:10:64:59:92:fe:
                    de:74:f8:f3:06:b0:c8:34:e0:e5:57:5c:45:e7:ec:
                    bd:37:6b:44:c6:a5:01:3e:e4:19:ba:eb:5c:13:1f:
                    9a:2f:96:05:03:dd:90:de:ad:b1:70:ab:73:b2:bd:
                    f9:25:cb:df:1e:26:d3:28:de:6e:4c:81:b4:9f:c7:
                    0a:d4:e2:00:2d:de:92:13:34:11:bd:9b:46:02:22:
                    9f:99:6a:16:35:5a:08:3a:dc:77:b4:61:9b:83:83:
                    d2:dd:8b:7f:1e:7b:34:a0:f3:c0:9c:fb:6e:c3:18:
                    b4:77:39:36:53:d8:51:98:fe:fb:6c:eb:a7:7c:08:
                    50:68:b6:cc:74:dc:6e:22:ff:41:e5:f5:d7:b5:38:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:25:80:18:2A:BC:7C:A7:1E:1D:BF:A1:31:61:AB:40:14:4B:53
            X509v3 Authority Key Identifier:
                keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/5v0lgBgqvHynHh2_oTFhq0AUS1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.160.0/22
                IPv6:
                  2a00:a5a1::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:dc:b5:bb:46:d4:f7:bf:63:c6:6c:05:43:90:8c:7b:a0:
         f8:31:b0:65:8c:62:19:03:a3:6a:05:f0:ce:4a:8d:69:4c:9d:
         38:af:cb:da:8a:f7:2e:9f:29:71:31:31:f3:d3:28:4a:cd:47:
         0a:29:ce:4a:f5:4a:51:76:ea:4d:c7:ab:c6:93:f7:c4:b7:7c:
         4c:07:46:92:f7:ee:35:16:d1:4b:49:61:3f:09:88:1d:a0:45:
         30:eb:db:63:41:0c:e8:11:d7:28:93:89:41:24:1a:5b:9f:74:
         66:48:00:9d:30:6d:85:7e:30:a7:51:45:f9:fe:06:ae:27:77:
         3c:de:c6:5d:d1:76:e8:d8:5d:b6:64:da:c6:d1:ca:19:12:28:
         5d:b9:33:27:a2:24:e3:50:b8:20:52:47:76:a9:da:e3:fd:f2:
         f1:4e:c9:e3:03:a4:03:73:92:fa:af:0e:13:04:ce:0a:c9:48:
         04:f5:08:02:b0:48:8a:17:53:5e:ab:19:cc:e6:a1:50:b4:07:
         61:c0:2f:07:75:39:96:b7:87:50:38:3c:0e:69:78:d0:d2:6c:
         b3:62:63:44:23:9b:b4:43:b4:0b:c0:52:59:c6:75:76:1e:7a:
         a1:f5:97:d2:00:8d:b5:a2:26:8d:65:0e:90:87:cb:ac:d8:d6:
         5c:fd:3c:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVspd/I/Y2A90uRPLc9nevWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5
MzBlODkwHhcNMjMwMTAxMDkyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmZkMjU4MDE4MmFiYzdjYTcxZTFkYmZhMTMxNjFhYjQwMTQ0YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFa+RNAirax/lCL/p7P4sBLoaYwt
uCOxZoDkc0KRpN28g8zxQP9wGeycWGAlpwBWPdk8eX4uPvMJjMs0hHSeMnuSbgtX
GVzaCGKkVqA+0ra+ioDATiUyKYZTbSspt1+Py82pyQzSFxC9HXSFFXlErd3EEGRZ
kv7edPjzBrDINODlV1xF5+y9N2tExqUBPuQZuutcEx+aL5YFA92Q3q2xcKtzsr35
JcvfHibTKN5uTIG0n8cK1OIALd6SEzQRvZtGAiKfmWoWNVoIOtx3tGGbg4PS3Yt/
Hns0oPPAnPtuwxi0dzk2U9hRmP77bOunfAhQaLbMdNxuIv9B5fXXtThVBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOb9JYAYKrx8px4dv6ExYatAFEtTMB8GA1UdIwQY
MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt
MTE5OTQyZjNkN2E3LzEvNXYwbGdCZ3F2SHluSGgyX29URmhxMEFVUzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3
LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSCgMA0E
AgACMAcDBQAqAKWhMA0GCSqGSIb3DQEBCwUAA4IBAQBKtdy1u0bU979jxmwFQ5CM
e6D4MbBljGIZA6NqBfDOSo1pTJ04r8vaivcunylxMTHz0yhKzUcKKc5K9UpRdupN
x6vGk/fEt3xMB0aS9+41FtFLSWE/CYgdoEUw69tjQQzoEdcok4lBJBpbn3RmSACd
MG2FfjCnUUX5/gauJ3c83sZd0Xbo2F22ZNrG0coZEihduTMnoiTjULggUkd2qdrj
/fLxTsnjA6QDc5L6rw4TBM4KyUgE9QgCsEiKF1NeqxnM5qFQtAdhwC8HdTmWt4dQ
ODwOaXjQ0myzYmNEI5u0Q7QLwFJZxnV2Hnqh9ZfSAI21oiaNZQ6Qh8us2NZc/Tz4
-----END CERTIFICATE-----