Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/_lW22o8BbaN0LUKtsj3y5qLkxG8.roa
File:                     _lW22o8BbaN0LUKtsj3y5qLkxG8.roa (raw, json)
Hash identifier:          IDB/pfgmXPFT4GsC2jROpUKHfvbZILyp5xV8Vm0oqXs=
Subject key identifier:   FE:55:B6:DA:8F:01:6D:A3:74:2D:42:AD:B2:3D:F2:E6:A2:E4:C4:6F
Certificate issuer:       /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial:       01857227F54881109B16413783E62F2633C2
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/_lW22o8BbaN0LUKtsj3y5qLkxG8.roa
Signing time:             Mon 02 Jan 2023 11:04:59 +0000
ROA not before:           Mon 02 Jan 2023 11:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208907
IP address blocks:        2001:678:994::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:f5:48:81:10:9b:16:41:37:83:e6:2f:26:33:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
        Validity
            Not Before: Jan  2 11:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe55b6da8f016da3742d42adb23df2e6a2e4c46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:e0:a1:ff:87:10:80:d5:ab:84:e4:b2:0f:
                    a4:10:05:89:e1:c5:58:cf:33:b4:19:95:9c:d7:4d:
                    13:f1:08:d7:9f:86:bb:37:ef:e7:37:d3:91:02:5d:
                    f0:bc:43:3f:b3:e8:a0:53:3c:e0:55:d7:58:53:c5:
                    8e:f2:ae:4b:29:18:31:87:d4:21:3d:e6:3e:05:1b:
                    65:46:ea:b0:07:b2:f3:5a:2c:65:1d:92:10:ed:bb:
                    0e:7e:11:2f:ed:e2:81:5f:9e:9d:fc:17:10:8c:16:
                    ae:41:54:20:21:b9:17:65:30:9b:37:9f:d7:ac:a4:
                    74:83:d6:48:93:8c:29:e2:90:34:fe:3a:b0:30:36:
                    84:72:a2:0c:0a:91:cd:a1:ba:52:77:7c:22:2d:ba:
                    d2:1e:0c:99:9c:18:7a:b5:80:c4:fd:8b:d8:23:40:
                    6e:44:dd:90:4b:3a:fe:3e:dc:d2:3c:79:8f:1c:ab:
                    bd:a0:05:bf:95:41:3d:cd:5c:1a:57:ab:c7:8c:e2:
                    a5:21:a0:52:22:de:c4:df:ef:74:d3:fb:dc:54:48:
                    3d:30:74:fa:d8:f5:0a:94:44:17:90:5f:eb:7a:82:
                    a0:97:15:f9:9d:b5:a6:3d:0a:62:65:88:71:7e:25:
                    a5:17:28:81:8c:39:a9:41:35:a5:ab:7f:4d:60:d4:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:B6:DA:8F:01:6D:A3:74:2D:42:AD:B2:3D:F2:E6:A2:E4:C4:6F
            X509v3 Authority Key Identifier:
                keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/_lW22o8BbaN0LUKtsj3y5qLkxG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:994::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:27:48:c3:c6:e5:2f:54:90:8c:d0:d2:45:f8:4c:b4:96:cc:
         bc:4f:85:11:a1:a8:06:8c:13:7f:1a:80:f9:c6:9e:67:21:f9:
         37:05:70:e3:07:11:0a:7d:13:ef:c2:62:d0:32:f9:85:93:aa:
         1a:e5:5b:0f:77:d3:e1:32:2f:cf:f6:b5:bf:a8:47:56:7e:fb:
         5b:63:98:7b:38:e0:ee:57:76:28:f9:14:c2:3d:4b:4b:43:2f:
         00:df:c7:59:ad:b2:a2:ea:d8:6c:ed:ef:7b:63:2a:92:74:ee:
         37:f2:3d:6d:11:33:0e:be:3f:b2:0a:90:85:ab:9d:3e:ce:f1:
         12:14:b3:54:db:f8:0a:0d:77:ab:b9:30:ed:2e:5b:45:de:b1:
         4e:e4:29:de:ab:cc:24:d2:3a:36:12:fb:f8:8a:80:44:2d:9d:
         20:67:a5:bd:2e:a7:55:3e:d2:39:6c:46:ef:65:df:9c:ad:d0:
         65:fe:67:93:86:d4:06:c6:26:83:32:da:87:32:a2:fd:a1:39:
         96:ff:e9:42:6f:c3:84:05:a0:06:da:c6:3b:94:db:d1:4a:65:
         40:e3:20:de:1e:96:1f:e8:92:da:2a:c1:89:88:55:01:e0:e1:
         0c:c5:92:84:e1:06:16:52:fe:df:e8:10:b5:c2:c2:36:1e:82:
         73:ab:0c:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyJ/VIgRCbFkE3g+YvJjPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDZmZjI0NmRmNDExNjQzZDlkZTM2Njk4MTgxMTJmMzM2
MjI4M2IwHhcNMjMwMTAyMTEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTU1YjZkYThmMDE2ZGEzNzQyZDQyYWRiMjNkZjJlNmEyZTRjNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvgof+HEIDVq4Tksg+kEAWJ4cVY
zzO0GZWc100T8QjXn4a7N+/nN9ORAl3wvEM/s+igUzzgVddYU8WO8q5LKRgxh9Qh
PeY+BRtlRuqwB7LzWixlHZIQ7bsOfhEv7eKBX56d/BcQjBauQVQgIbkXZTCbN5/X
rKR0g9ZIk4wp4pA0/jqwMDaEcqIMCpHNobpSd3wiLbrSHgyZnBh6tYDE/YvYI0Bu
RN2QSzr+PtzSPHmPHKu9oAW/lUE9zVwaV6vHjOKlIaBSIt7E3+900/vcVEg9MHT6
2PUKlEQXkF/reoKglxX5nbWmPQpiZYhxfiWlFyiBjDmpQTWlq39NYNQiGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP5VttqPAW2jdC1CrbI98uai5MRvMB8GA1UdIwQY
MBaAFMoG/yRt9BFkPZ3jZpgYES8zYig7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzct
MWM0M2Q0YzI3ZDZjLzEvX2xXMjJvOEJiYU4wTFVLdHNqM3k1cUxreEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzctMWM0M2Q0YzI3ZDZj
LzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAmU
MA0GCSqGSIb3DQEBCwUAA4IBAQCXJ0jDxuUvVJCM0NJF+Ey0lsy8T4URoagGjBN/
GoD5xp5nIfk3BXDjBxEKfRPvwmLQMvmFk6oa5VsPd9PhMi/P9rW/qEdWfvtbY5h7
OODuV3Yo+RTCPUtLQy8A38dZrbKi6ths7e97YyqSdO438j1tETMOvj+yCpCFq50+
zvESFLNU2/gKDXeruTDtLltF3rFO5Cneq8wk0jo2Evv4ioBELZ0gZ6W9LqdVPtI5
bEbvZd+crdBl/meThtQGxiaDMtqHMqL9oTmW/+lCb8OEBaAG2sY7lNvRSmVA4yDe
HpYf6JLaKsGJiFUB4OEMxZKE4QYWUv7f6BC1wsI2HoJzqwzH
-----END CERTIFICATE-----