Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/wzX2q8PROacOlYY-sn7iXZNtcm8.roa
File:                     wzX2q8PROacOlYY-sn7iXZNtcm8.roa (raw, json)
Hash identifier:          zvPtjAXbXRF/1JZwMcNbVmLmpaXmu5pYwsKkCjHt+So=
Subject key identifier:   C3:35:F6:AB:C3:D1:39:A7:0E:95:86:3E:B2:7E:E2:5D:93:6D:72:6F
Certificate issuer:       /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial:       01856EC1F19892A2A09D48590015EF501DF0
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/wzX2q8PROacOlYY-sn7iXZNtcm8.roa
Signing time:             Sun 01 Jan 2023 19:14:42 +0000
ROA not before:           Sun 01 Jan 2023 19:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60918
IP address blocks:        2001:67c:1720::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:c1:f1:98:92:a2:a0:9d:48:59:00:15:ef:50:1d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
        Validity
            Not Before: Jan  1 19:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c335f6abc3d139a70e95863eb27ee25d936d726f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:81:b1:23:2d:52:13:e9:02:75:73:b9:e3:
                    e8:ee:49:6b:ac:9f:e3:21:98:34:c2:09:fa:e1:92:
                    1a:16:44:98:0d:7e:37:71:22:77:3b:6b:21:51:37:
                    91:76:eb:53:9c:6a:3d:ba:2c:5d:5e:3a:50:16:8e:
                    eb:3e:d5:37:80:03:53:74:a8:e1:32:b8:1e:7c:17:
                    6c:b4:e2:0f:33:73:84:9c:3c:eb:9f:40:86:84:8b:
                    25:00:c8:ed:e8:76:39:f2:2a:01:df:eb:8e:74:89:
                    68:d1:1e:81:0e:62:70:68:57:b8:59:1f:cf:66:e1:
                    2d:9f:98:8c:3c:c6:e2:8a:d1:77:b9:86:3c:71:6f:
                    20:e5:a1:41:e3:59:10:30:91:d8:a8:6b:4c:ee:cb:
                    6d:35:c9:c2:3b:7f:35:21:0f:d0:b6:2b:f0:fc:0c:
                    0e:13:3e:c9:d5:ec:69:43:83:ab:0d:fb:de:14:c8:
                    2d:7b:fc:75:82:49:de:0a:99:e8:24:26:4e:9d:ae:
                    21:1a:1f:82:25:c8:d3:f4:c3:c3:81:8e:95:3c:bf:
                    95:59:d9:7e:19:98:e4:64:db:66:96:fe:fd:9b:a7:
                    f6:30:8a:e8:0f:8d:d0:ef:3f:69:d1:79:f8:29:21:
                    ee:0c:c3:70:39:a7:43:17:d8:d8:8e:01:d1:81:d2:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:35:F6:AB:C3:D1:39:A7:0E:95:86:3E:B2:7E:E2:5D:93:6D:72:6F
            X509v3 Authority Key Identifier:
                keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/wzX2q8PROacOlYY-sn7iXZNtcm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1720::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:3e:61:fd:d6:e9:d3:07:97:0e:00:a3:c2:97:40:17:71:
         c3:f3:09:72:27:9c:e8:09:46:60:ca:51:59:a1:2f:5a:50:61:
         2a:f0:5d:46:2c:24:34:95:6c:be:b6:82:bf:f7:8c:cc:b4:69:
         89:85:7b:f0:e9:ca:74:89:cb:29:c8:c8:41:8a:99:0d:26:92:
         65:ac:1c:07:aa:76:09:c8:93:1a:2a:f5:f5:6a:c9:26:db:f9:
         a5:84:3d:19:c3:88:01:17:5e:2d:a2:53:f0:0d:6a:4f:39:a6:
         90:fa:22:72:40:d5:94:de:3e:96:16:b8:83:43:93:43:3c:9c:
         97:50:b2:0f:4d:cb:6f:f0:f8:90:7b:bf:9e:cb:8d:dd:db:85:
         7f:45:35:7e:07:9e:10:61:71:4f:4f:d8:0f:f4:9c:40:bd:fa:
         59:e0:b0:8f:d6:ff:c5:a4:7a:68:bf:88:b3:a2:dc:24:02:df:
         ba:2d:18:97:06:3c:7e:ca:ab:6e:ee:ca:cc:da:25:a5:69:b6:
         a9:b1:b4:00:c1:1f:28:a1:6d:28:73:c1:f6:7e:ef:43:19:3b:
         be:f1:e0:e8:1a:e1:20:86:1f:03:38:a8:de:50:bb:3f:8d:7b:
         f0:5f:0a:5e:47:c5:04:fd:6f:2e:08:83:70:6f:f4:47:81:d3:
         c4:2e:45:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVuwfGYkqKgnUhZABXvUB3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjMwMTAxMTkxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzM1ZjZhYmMzZDEzOWE3MGU5NTg2M2ViMjdlZTI1ZDkzNmQ3MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi16BsSMtUhPpAnVzuePo7klrrJ/j
IZg0wgn64ZIaFkSYDX43cSJ3O2shUTeRdutTnGo9uixdXjpQFo7rPtU3gANTdKjh
MrgefBdstOIPM3OEnDzrn0CGhIslAMjt6HY58ioB3+uOdIlo0R6BDmJwaFe4WR/P
ZuEtn5iMPMbiitF3uYY8cW8g5aFB41kQMJHYqGtM7sttNcnCO381IQ/Qtivw/AwO
Ez7J1expQ4OrDfveFMgte/x1gkneCpnoJCZOna4hGh+CJcjT9MPDgY6VPL+VWdl+
GZjkZNtmlv79m6f2MIroD43Q7z9p0Xn4KSHuDMNwOadDF9jYjgHRgdIIVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMM19qvD0TmnDpWGPrJ+4l2TbXJvMB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvd3pYMnE4UFJPYWNPbFlZLXNuN2lYWk50Y204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBcg
MA0GCSqGSIb3DQEBCwUAA4IBAQABxD5h/dbp0weXDgCjwpdAF3HD8wlyJ5zoCUZg
ylFZoS9aUGEq8F1GLCQ0lWy+toK/94zMtGmJhXvw6cp0icspyMhBipkNJpJlrBwH
qnYJyJMaKvX1askm2/mlhD0Zw4gBF14tolPwDWpPOaaQ+iJyQNWU3j6WFriDQ5ND
PJyXULIPTctv8PiQe7+ey43d24V/RTV+B54QYXFPT9gP9JxAvfpZ4LCP1v/FpHpo
v4izotwkAt+6LRiXBjx+yqtu7srM2iWlabapsbQAwR8ooW0oc8H2fu9DGTu+8eDo
GuEghh8DOKjeULs/jXvwXwpeR8UE/W8uCINwb/RHgdPELkXN
-----END CERTIFICATE-----