Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/efEAw-obgwkKa-djs0Khproi3ic.roa
File:                     efEAw-obgwkKa-djs0Khproi3ic.roa (raw, json)
Hash identifier:          p8rEWeqYrUk2SdmtGt2eZjo/IeqnOo6oWlMQeZxGkyo=
Subject key identifier:   79:F1:00:C3:EA:1B:83:09:0A:6B:E7:63:B3:42:A1:A6:BA:22:DE:27
Certificate issuer:       /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial:       01856E2F92A81BEEA5DB8D7DD96C32F92D32
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/efEAw-obgwkKa-djs0Khproi3ic.roa
Signing time:             Sun 01 Jan 2023 16:34:49 +0000
ROA not before:           Sun 01 Jan 2023 16:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208819
IP address blocks:        185.212.36.0/22 maxlen: 22
                          2a0b:7040::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:92:a8:1b:ee:a5:db:8d:7d:d9:6c:32:f9:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
        Validity
            Not Before: Jan  1 16:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79f100c3ea1b83090a6be763b342a1a6ba22de27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:57:ea:3b:3b:8d:86:81:f2:85:f0:22:a5:
                    56:4c:a5:6a:c5:1c:45:c5:59:a2:2c:38:7b:51:ff:
                    e4:57:27:12:60:a3:c6:d3:ea:0d:52:69:1b:02:5c:
                    1c:61:df:df:12:28:49:e4:29:47:83:1c:81:d9:1e:
                    93:ac:d3:a4:c6:e7:c7:2b:ac:c2:76:a1:8b:29:eb:
                    b7:88:69:54:63:6e:36:5f:99:34:30:66:77:a4:78:
                    c9:16:4a:38:50:cd:75:c7:0c:25:f1:1e:11:50:82:
                    e7:5d:bb:a3:ec:71:3f:7d:1a:87:18:a2:92:64:37:
                    5e:86:5a:35:db:82:2b:ca:12:89:06:ab:d9:5c:b3:
                    f1:f8:0a:b7:05:f8:6d:10:54:51:ec:38:8c:b2:b9:
                    92:57:b4:f2:7f:41:e1:39:22:78:b2:bc:ad:2d:d7:
                    a7:33:7c:f2:f8:c8:82:02:c6:c9:16:84:90:05:59:
                    c1:ef:c7:00:65:56:80:2b:dc:0b:06:e3:a3:47:04:
                    59:5a:9a:7f:0a:ed:88:43:57:ad:09:5e:ec:d3:de:
                    e4:24:14:67:ad:d9:15:6e:28:e6:a5:62:ba:3c:0c:
                    1e:38:f2:29:fb:63:38:69:fa:71:5a:79:21:3a:a8:
                    74:60:80:75:5d:c4:ae:c7:2f:7a:39:9f:64:11:42:
                    d7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:00:C3:EA:1B:83:09:0A:6B:E7:63:B3:42:A1:A6:BA:22:DE:27
            X509v3 Authority Key Identifier:
                keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/efEAw-obgwkKa-djs0Khproi3ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.36.0/22
                IPv6:
                  2a0b:7040::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:df:4a:51:77:d0:18:ec:76:16:62:16:ae:8f:bf:8f:bd:af:
         e4:6d:77:bb:35:b5:83:e1:5a:a1:23:77:fd:25:9e:2c:8a:7f:
         3b:74:06:2e:6b:81:b9:10:5b:8a:ec:4c:53:cb:b7:3e:d4:74:
         35:97:f1:ae:c7:f6:5c:7a:98:d0:2d:c7:ef:3c:95:87:0c:12:
         04:98:bd:d8:b6:2e:5c:68:b2:c2:1c:61:1e:3c:fc:6a:df:ef:
         a9:d9:d4:32:3c:f9:cc:ee:65:a9:4e:d1:b0:65:26:6d:90:30:
         9f:95:64:29:6c:30:b4:5b:22:d0:99:2b:01:5b:dd:02:c3:42:
         57:29:4b:23:90:0d:76:4a:ed:a5:2b:e8:31:9e:40:d7:0b:fb:
         e0:53:46:b9:ae:79:41:4f:cb:24:ba:9a:4a:a1:5c:04:8a:5b:
         3b:95:5c:ce:3d:e9:28:92:aa:66:f8:c0:21:dc:d1:15:44:25:
         91:13:ab:60:ce:1a:a5:06:03:cd:43:84:5b:81:b5:e2:ae:ab:
         39:a5:09:83:cf:49:95:92:f1:99:ed:8e:f0:b6:32:7c:63:af:
         b4:01:86:48:03:6e:ab:54:0f:f3:24:5e:36:7c:f2:76:22:cc:
         c7:55:6a:5c:9e:a2:18:eb:92:8e:96:50:ab:cf:27:ec:46:86:
         1e:ae:a9:0c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuL5KoG+6l24192Wwy+S0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDE0YzkyNmVhNzZkNTY2ZTllOGE5NmQ1ODYxZDQ3NTdj
OGIwZWEwHhcNMjMwMTAxMTYzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWYxMDBjM2VhMWI4MzA5MGE2YmU3NjNiMzQyYTFhNmJhMjJkZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEFX6js7jYaB8oXwIqVWTKVqxRxF
xVmiLDh7Uf/kVycSYKPG0+oNUmkbAlwcYd/fEihJ5ClHgxyB2R6TrNOkxufHK6zC
dqGLKeu3iGlUY242X5k0MGZ3pHjJFko4UM11xwwl8R4RUILnXbuj7HE/fRqHGKKS
ZDdehlo124IryhKJBqvZXLPx+Aq3BfhtEFRR7DiMsrmSV7Tyf0HhOSJ4srytLden
M3zy+MiCAsbJFoSQBVnB78cAZVaAK9wLBuOjRwRZWpp/Cu2IQ1etCV7s097kJBRn
rdkVbijmpWK6PAweOPIp+2M4afpxWnkhOqh0YIB1XcSuxy96OZ9kEULXwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHnxAMPqG4MJCmvnY7NCoaa6It4nMB8GA1UdIwQY
MBaAFEcBTJJup21Wbp6KltWGHUdXyLDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMt
YWJhNGU2NDMwNThlLzEvZWZFQXctb2Jnd2tLYS1kanMwS2hwcm9pM2ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zMTIzZDAtN2NhYS00ZGYzLWFkMjMtYWJhNGU2NDMwNThl
LzEvUndGTWttNm5iVlp1bm9xVzFZWWRSMWZJc09vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudQkMA0E
AgACMAcDBQMqC3BAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ30pRd9AY7HYWYhauj7+P
va/kbXe7NbWD4VqhI3f9JZ4sin87dAYua4G5EFuK7ExTy7c+1HQ1l/Gux/ZcepjQ
LcfvPJWHDBIEmL3Yti5caLLCHGEePPxq3++p2dQyPPnM7mWpTtGwZSZtkDCflWQp
bDC0WyLQmSsBW90Cw0JXKUsjkA12Su2lK+gxnkDXC/vgU0a5rnlBT8skuppKoVwE
ils7lVzOPekokqpm+MAh3NEVRCWRE6tgzhqlBgPNQ4RbgbXirqs5pQmDz0mVkvGZ
7Y7wtjJ8Y6+0AYZIA26rVA/zJF42fPJ2IszHVWpcnqIY65KOllCrzyfsRoYerqkM
-----END CERTIFICATE-----