Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/imyexcXo7-7AeSeEg4I42ZEdT-8.roa
File:                     imyexcXo7-7AeSeEg4I42ZEdT-8.roa (raw, json)
Hash identifier:          Z/+Y2UG6l1P8zHAthYXUG1y3G1PNfBLnwhCqeS3mKi4=
Subject key identifier:   8A:6C:9E:C5:C5:E8:EF:EE:C0:79:27:84:83:82:38:D9:91:1D:4F:EF
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       0186D85E21F93CF05C777673B28BEF8110B6
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/imyexcXo7-7AeSeEg4I42ZEdT-8.roa
Signing time:             Mon 13 Mar 2023 00:28:13 +0000
ROA not before:           Mon 13 Mar 2023 00:28:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59812
IP address blocks:        193.134.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d8:5e:21:f9:3c:f0:5c:77:76:73:b2:8b:ef:81:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Mar 13 00:28:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a6c9ec5c5e8efeec0792784838238d9911d4fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:b3:ef:8a:95:02:92:dc:b2:2e:32:cf:a3:
                    c1:24:7b:c6:de:0e:a2:79:a9:7c:5d:2b:6f:d5:a0:
                    3e:73:df:7b:dd:4e:b6:d4:4f:fb:16:5e:2a:8e:5d:
                    15:1b:db:c2:8b:03:f2:fb:6b:59:06:99:b8:ab:c5:
                    98:ec:c2:57:25:ca:28:ba:8c:21:0b:da:7f:b9:27:
                    26:16:7b:d9:2d:a7:70:74:7d:1d:7e:88:20:fc:a7:
                    04:e2:24:c7:f1:9d:6c:49:d1:16:28:11:29:5d:8e:
                    21:47:6e:d1:71:1d:3a:82:30:33:6a:d3:9e:58:19:
                    d8:4d:67:18:61:02:26:74:8d:ae:ec:2c:97:ca:23:
                    63:cf:5c:e7:83:62:03:9d:39:77:f9:17:40:73:3a:
                    a4:55:ac:20:3c:6a:c2:95:01:e6:ea:2e:94:6c:54:
                    c6:66:b0:11:e9:48:1b:67:96:ef:c4:5d:8a:a8:e0:
                    21:dc:aa:25:4a:0f:6f:48:0c:7e:0c:0f:d3:cb:35:
                    f5:b8:36:18:38:4f:53:dc:10:02:b3:fe:5d:4a:be:
                    ec:40:99:70:d2:cf:98:a9:cf:ea:5e:db:a1:9a:c5:
                    24:ff:0f:1d:58:98:c5:08:64:00:96:4d:98:3a:25:
                    83:04:02:5d:88:bd:99:5c:1e:8e:f1:91:04:cb:43:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:9E:C5:C5:E8:EF:EE:C0:79:27:84:83:82:38:D9:91:1D:4F:EF
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/imyexcXo7-7AeSeEg4I42ZEdT-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.134.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:9b:48:fa:d9:2c:41:41:73:2a:ac:84:a5:29:ec:44:50:
         b8:1c:16:a1:6f:10:1c:ac:06:d4:9d:bc:05:48:70:d1:d3:1c:
         24:2c:38:89:39:9a:42:db:04:df:6b:6a:08:00:c6:55:61:5f:
         d4:0f:08:be:d5:ab:27:74:5d:ec:18:6c:4b:32:00:05:f3:88:
         a5:6a:e6:c9:c0:3e:e8:a6:e6:7d:7e:ff:e3:36:08:24:11:d6:
         c5:ab:54:99:d5:fe:da:74:fd:cf:e0:42:d3:f4:e6:39:09:da:
         e2:30:29:10:28:03:50:ef:12:ab:62:6f:18:b9:40:2d:d7:5c:
         ba:1d:39:47:18:d9:be:44:2c:8b:65:cb:1d:77:42:ae:13:60:
         34:7a:d9:df:50:b5:cb:41:49:dd:57:b5:d4:08:b0:84:bb:5a:
         43:92:ea:67:ba:19:7a:6d:b6:1c:66:09:a8:70:7d:76:04:f7:
         89:64:32:18:fd:8c:10:ba:3d:bf:44:64:92:f7:59:32:14:8f:
         b2:32:5e:8e:38:f9:b0:de:1d:68:21:18:c5:35:2e:5d:c3:67:
         5b:a1:ec:aa:d8:36:fd:fc:d1:95:8e:69:99:57:18:2a:b6:59:
         65:7f:3a:fc:e4:f4:0c:b2:f3:90:e5:8c:c1:8d:be:6c:b4:64:
         ca:f0:72:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbYXiH5PPBcd3ZzsovvgRC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi
MDI1NDUwHhcNMjMwMzEzMDAyODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTZjOWVjNWM1ZThlZmVlYzA3OTI3ODQ4MzgyMzhkOTkxMWQ0ZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVSz74qVApLcsi4yz6PBJHvG3g6i
eal8XStv1aA+c9973U621E/7Fl4qjl0VG9vCiwPy+2tZBpm4q8WY7MJXJcoouowh
C9p/uScmFnvZLadwdH0dfogg/KcE4iTH8Z1sSdEWKBEpXY4hR27RcR06gjAzatOe
WBnYTWcYYQImdI2u7CyXyiNjz1zng2IDnTl3+RdAczqkVawgPGrClQHm6i6UbFTG
ZrAR6UgbZ5bvxF2KqOAh3KolSg9vSAx+DA/TyzX1uDYYOE9T3BACs/5dSr7sQJlw
0s+Yqc/qXtuhmsUk/w8dWJjFCGQAlk2YOiWDBAJdiL2ZXB6O8ZEEy0OebQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpsnsXF6O/uwHknhIOCONmRHU/vMB8GA1UdIwQY
MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt
YjQ3M2NlNzgwN2NhLzEvaW15ZXhjWG83LTdBZVNlRWc0STQyWkVkVC04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh
LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYb7MA0G
CSqGSIb3DQEBCwUAA4IBAQBIDZtI+tksQUFzKqyEpSnsRFC4HBahbxAcrAbUnbwF
SHDR0xwkLDiJOZpC2wTfa2oIAMZVYV/UDwi+1asndF3sGGxLMgAF84ilaubJwD7o
puZ9fv/jNggkEdbFq1SZ1f7adP3P4ELT9OY5CdriMCkQKANQ7xKrYm8YuUAt11y6
HTlHGNm+RCyLZcsdd0KuE2A0etnfULXLQUndV7XUCLCEu1pDkupnuhl6bbYcZgmo
cH12BPeJZDIY/YwQuj2/RGSS91kyFI+yMl6OOPmw3h1oIRjFNS5dw2dboeyq2Db9
/NGVjmmZVxgqtlllfzr85PQMsvOQ5YzBjb5stGTK8HKv
-----END CERTIFICATE-----