Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa
File:                     e7n5-QQy-m3usBsiY9UacT1g7bQ.roa (raw, json)
Hash identifier:          NvB/xAwEb/O10v3GLz0JNhtWWvfIE+bEe8Z3e4K991Q=
Subject key identifier:   7B:B9:F9:F9:04:32:FA:6D:EE:B0:1B:22:63:D5:1A:71:3D:60:ED:B4
Certificate issuer:       /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial:       018570673CE6158E719C6882F42816AF089F
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa
Signing time:             Mon 02 Jan 2023 02:54:52 +0000
ROA not before:           Mon 02 Jan 2023 02:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12965
IP address blocks:        193.178.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:3c:e6:15:8e:71:9c:68:82:f4:28:16:af:08:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
        Validity
            Not Before: Jan  2 02:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bb9f9f90432fa6deeb01b2263d51a713d60edb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:35:5f:6f:ee:c9:6b:39:b2:35:5a:38:1f:
                    a9:18:a3:e0:3e:d2:4d:25:a6:2c:df:ac:58:79:00:
                    31:94:1c:ab:c3:2d:04:a4:a8:18:fe:cf:74:2d:d2:
                    b6:10:98:23:83:33:e6:63:11:d6:43:b5:cc:83:8b:
                    d6:d6:d8:12:90:86:0b:1f:22:69:cf:dc:2d:40:5b:
                    aa:e2:b9:c2:e3:df:17:9c:69:ab:24:1b:ed:83:36:
                    ba:bc:ef:fe:f3:39:dd:fd:9c:15:77:5a:42:24:56:
                    ea:b2:5e:74:f1:4e:cf:59:51:46:b1:ba:21:65:10:
                    da:e1:24:31:fe:f5:6c:2b:75:b0:59:e7:5b:d1:f5:
                    35:15:b7:d7:37:06:b2:59:4e:20:0a:6e:1c:f5:84:
                    1e:d2:62:c0:45:cd:8c:f5:16:32:04:66:c3:b6:cb:
                    2b:1d:2f:9c:0a:e6:8d:c6:fe:5c:ab:ec:7c:b1:2c:
                    9a:c7:41:ab:cd:46:26:9c:a4:c4:ab:b1:9a:91:f5:
                    3d:ec:cc:47:b3:2c:7c:1e:d9:5a:19:0b:de:ef:15:
                    3c:01:ed:81:7c:4b:d4:d0:a4:a8:df:16:e5:d1:19:
                    d8:bf:77:5f:b9:26:ce:79:d4:60:5a:68:9a:09:cf:
                    50:b0:2e:b4:82:c3:3b:bc:74:35:cd:0b:da:67:3b:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:F9:F9:04:32:FA:6D:EE:B0:1B:22:63:D5:1A:71:3D:60:ED:B4
            X509v3 Authority Key Identifier:
                keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/e7n5-QQy-m3usBsiY9UacT1g7bQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:fe:c5:0e:7c:54:13:af:e9:dc:b5:69:8b:bb:2a:bf:bd:f7:
         4d:be:34:bf:3a:c3:98:b7:1e:68:dd:11:8a:ed:fd:5b:1a:74:
         07:e7:4b:d3:6a:4b:e8:29:6c:4c:d7:5e:d8:e5:f0:d5:f8:59:
         a9:23:10:e0:67:b7:bf:40:47:35:af:e5:ce:27:60:b7:b3:f8:
         77:ac:6a:5e:db:91:76:a2:91:9d:9d:b9:76:9d:5e:26:53:8d:
         dc:da:d8:60:33:91:55:b3:a9:e5:51:04:94:e3:0a:56:a5:42:
         aa:dd:30:75:18:88:2a:28:bd:46:aa:45:98:21:78:cc:a8:d9:
         1c:a7:82:34:06:98:55:3e:21:c0:e9:2d:87:ff:50:8c:a0:93:
         d2:41:2b:b2:fc:be:d6:c1:a3:3d:e6:42:ee:8b:c4:34:7f:a6:
         f0:d3:e2:77:68:6e:9d:1a:e8:99:d8:8e:2b:25:17:bd:53:83:
         cb:a4:2b:f8:07:96:4d:ad:3c:3e:8f:6b:76:32:ea:d4:ad:da:
         21:aa:c0:a6:1d:7c:f7:84:ae:44:b6:1d:2e:71:d4:4e:b8:69:
         4d:74:86:72:8e:94:dd:8b:db:c3:35:3b:88:51:c4:86:87:23:
         99:4c:df:06:99:7b:b8:51:f2:50:bd:33:30:1c:3c:4d:c4:8e:
         50:63:99:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZzzmFY5xnGiC9CgWrwifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw
ZjkzNzcwHhcNMjMwMTAyMDI1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI5ZjlmOTA0MzJmYTZkZWViMDFiMjI2M2Q1MWE3MTNkNjBlZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvog1X2/uyWs5sjVaOB+pGKPgPtJN
JaYs36xYeQAxlByrwy0EpKgY/s90LdK2EJgjgzPmYxHWQ7XMg4vW1tgSkIYLHyJp
z9wtQFuq4rnC498XnGmrJBvtgza6vO/+8znd/ZwVd1pCJFbqsl508U7PWVFGsboh
ZRDa4SQx/vVsK3WwWedb0fU1FbfXNwayWU4gCm4c9YQe0mLARc2M9RYyBGbDtssr
HS+cCuaNxv5cq+x8sSyax0GrzUYmnKTEq7GakfU97MxHsyx8HtlaGQve7xU8Ae2B
fEvU0KSo3xbl0RnYv3dfuSbOedRgWmiaCc9QsC60gsM7vHQ1zQvaZzvnxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHu5+fkEMvpt7rAbImPVGnE9YO20MB8GA1UdIwQY
MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt
NWUwZTI4MWQ3ZGEzLzEvZTduNS1RUXktbTN1c0JzaVk5VWFjVDFnN2JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz
LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbKWMA0G
CSqGSIb3DQEBCwUAA4IBAQDC/sUOfFQTr+nctWmLuyq/vfdNvjS/OsOYtx5o3RGK
7f1bGnQH50vTakvoKWxM117Y5fDV+FmpIxDgZ7e/QEc1r+XOJ2C3s/h3rGpe25F2
opGdnbl2nV4mU43c2thgM5FVs6nlUQSU4wpWpUKq3TB1GIgqKL1GqkWYIXjMqNkc
p4I0BphVPiHA6S2H/1CMoJPSQSuy/L7WwaM95kLui8Q0f6bw0+J3aG6dGuiZ2I4r
JRe9U4PLpCv4B5ZNrTw+j2t2MurUrdohqsCmHXz3hK5Eth0ucdROuGlNdIZyjpTd
i9vDNTuIUcSGhyOZTN8GmXu4UfJQvTMwHDxNxI5QY5mT
-----END CERTIFICATE-----