Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/nt55N1qVaJNUcgq-nIexkzlGq_s.roa
File:                     nt55N1qVaJNUcgq-nIexkzlGq_s.roa (raw, json)
Hash identifier:          +Q3kFLnhGaetyvamYPzW03gGBui/jyBkwj62Mnk/s+4=
Subject key identifier:   9E:DE:79:37:5A:95:68:93:54:72:0A:BE:9C:87:B1:93:39:46:AB:FB
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       018724C1FEF9D6F56BC5A442F3CE41B41F8F
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/nt55N1qVaJNUcgq-nIexkzlGq_s.roa
Signing time:             Mon 27 Mar 2023 20:28:26 +0000
ROA not before:           Mon 27 Mar 2023 20:28:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40999
IP address blocks:        178.16.48.0/21 maxlen: 21
                          2a04:2101::/32 maxlen: 32
                          2a04:2100::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:24:c1:fe:f9:d6:f5:6b:c5:a4:42:f3:ce:41:b4:1f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Mar 27 20:28:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ede79375a95689354720abe9c87b1933946abfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:9e:70:3b:fc:6d:f9:aa:fa:5f:6d:5c:9f:
                    e3:f7:c4:81:4b:f0:e8:38:10:bf:53:da:56:3f:c2:
                    ee:8d:82:ac:9c:4b:87:b4:c0:1c:09:87:d9:f0:29:
                    7d:fa:81:2f:06:a6:3a:e0:b9:10:3b:b4:77:f9:9e:
                    b9:b3:6f:1e:ca:d7:1f:4d:56:e2:19:2e:5c:e9:ff:
                    57:fb:e3:63:a5:a4:6f:83:b2:2b:fa:e8:42:7b:88:
                    f8:69:61:93:6b:02:9b:66:1e:f6:5e:bf:09:cb:0c:
                    63:7a:7d:c2:ab:52:90:c6:a0:2e:64:75:03:80:1f:
                    02:6e:ca:82:cc:f7:66:ab:75:4d:fb:4a:2a:18:30:
                    e4:43:66:be:16:be:89:e6:5a:4d:3e:04:5c:45:79:
                    3f:ee:38:1c:e8:e0:7c:07:9e:21:24:d4:30:4a:3c:
                    d8:a3:a0:ac:b8:b6:c1:85:76:50:0a:0b:98:bd:75:
                    62:79:dc:f0:40:9d:ea:ff:28:c3:04:78:39:a3:09:
                    59:c6:9d:55:c7:32:24:30:d8:67:2e:24:2d:7d:b6:
                    a5:77:ac:8f:42:71:8b:0a:6e:1e:5e:58:8b:a2:be:
                    36:18:6c:47:fb:8a:01:f6:06:cd:30:23:b6:6e:55:
                    f4:59:49:94:fa:b0:07:dd:00:52:5d:eb:ae:73:80:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:79:37:5A:95:68:93:54:72:0A:BE:9C:87:B1:93:39:46:AB:FB
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/nt55N1qVaJNUcgq-nIexkzlGq_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.48.0/21
                IPv6:
                  2a04:2100::/31

    Signature Algorithm: sha256WithRSAEncryption
         02:b9:11:bc:7e:03:b5:e8:f6:48:b7:a4:82:2f:e0:6a:87:3d:
         4a:9b:9c:b7:60:86:21:86:80:a5:2c:49:8e:7e:cb:59:1a:ff:
         2a:13:eb:bb:f5:5b:06:6f:f9:6b:f7:84:52:01:91:87:55:98:
         fd:2b:a8:1b:3f:2c:96:10:95:a1:56:ad:a9:04:61:18:33:e3:
         d8:23:da:16:07:dd:a7:79:42:2d:7d:1d:d0:d2:b8:5d:6a:49:
         98:51:b6:3a:78:9a:63:a8:ee:fb:94:0f:00:a0:da:a5:6f:2d:
         be:a8:db:c3:51:d1:d8:1a:30:ad:a7:6c:42:16:06:36:6d:4b:
         fa:09:c2:c4:9e:96:65:ed:5b:a2:a0:86:64:58:7a:43:59:cc:
         b4:fe:cc:5a:a7:a9:d8:ea:b5:17:5d:1a:1b:df:51:c2:e7:7e:
         55:e6:bf:30:fd:c1:54:02:88:fe:71:0b:36:09:d3:2d:49:b3:
         c2:cd:fa:87:23:e3:6f:74:43:25:c5:91:c2:e1:65:6e:3c:5c:
         08:e6:fc:17:59:31:b0:82:86:68:0a:a5:e3:2d:11:03:7f:49:
         c1:0f:90:d4:98:43:49:33:6a:08:92:14:ac:a7:08:ee:be:4b:
         72:e6:20:39:de:cf:1c:62:5a:4d:d6:14:d4:95:5f:01:4a:ab:
         e7:46:0b:83
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYckwf751vVrxaRC885BtB+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4
NDk4NjEwHhcNMjMwMzI3MjAyODI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWRlNzkzNzVhOTU2ODkzNTQ3MjBhYmU5Yzg3YjE5MzM5NDZhYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZGecDv8bfmq+l9tXJ/j98SBS/Do
OBC/U9pWP8LujYKsnEuHtMAcCYfZ8Cl9+oEvBqY64LkQO7R3+Z65s28eytcfTVbi
GS5c6f9X++NjpaRvg7Ir+uhCe4j4aWGTawKbZh72Xr8Jywxjen3Cq1KQxqAuZHUD
gB8CbsqCzPdmq3VN+0oqGDDkQ2a+Fr6J5lpNPgRcRXk/7jgc6OB8B54hJNQwSjzY
o6CsuLbBhXZQCguYvXViedzwQJ3q/yjDBHg5owlZxp1VxzIkMNhnLiQtfbald6yP
QnGLCm4eXliLor42GGxH+4oB9gbNMCO2blX0WUmU+rAH3QBSXeuuc4AXsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ7eeTdalWiTVHIKvpyHsZM5Rqv7MB8GA1UdIwQY
MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt
ZTk1NGUxNmFiMjdkLzEvbnQ1NU4xcVZhSk5VY2dxLW5JZXhremxHcV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk
LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDshAwMA0E
AgACMAcDBQEqBCEAMA0GCSqGSIb3DQEBCwUAA4IBAQACuRG8fgO16PZIt6SCL+Bq
hz1Km5y3YIYhhoClLEmOfstZGv8qE+u79VsGb/lr94RSAZGHVZj9K6gbPyyWEJWh
Vq2pBGEYM+PYI9oWB92neUItfR3Q0rhdakmYUbY6eJpjqO77lA8AoNqlby2+qNvD
UdHYGjCtp2xCFgY2bUv6CcLEnpZl7VuioIZkWHpDWcy0/sxap6nY6rUXXRob31HC
535V5r8w/cFUAoj+cQs2CdMtSbPCzfqHI+NvdEMlxZHC4WVuPFwI5vwXWTGwgoZo
CqXjLREDf0nBD5DUmENJM2oIkhSspwjuvkty5iA53s8cYlpN1hTUlV8BSqvnRguD
-----END CERTIFICATE-----