Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa
File:                     EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa (raw, json)
Hash identifier:          ZGs965Mg0EIvQgcpkhK/QYQUOJYVteqqCkJ7nuNgaDQ=
Subject key identifier:   10:19:D7:14:7C:73:A5:93:EA:F9:9D:DB:E8:FE:4E:F8:0B:4E:B7:72
Certificate issuer:       /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial:       0185729EF3EDC62894333F16BCB9C05E5D44
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa
Signing time:             Mon 02 Jan 2023 13:14:57 +0000
ROA not before:           Mon 02 Jan 2023 13:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51519
IP address blocks:        45.132.232.0/22 maxlen: 22
                          45.132.235.0/24 maxlen: 24
                          2a0e:73c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:f3:ed:c6:28:94:33:3f:16:bc:b9:c0:5e:5d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
        Validity
            Not Before: Jan  2 13:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1019d7147c73a593eaf99ddbe8fe4ef80b4eb772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:74:fb:90:2b:11:ca:22:f7:02:63:77:75:
                    ca:92:07:66:e2:01:89:ba:55:ba:16:ba:20:18:5b:
                    18:86:56:15:73:5c:86:67:26:84:31:62:f7:7c:d8:
                    1c:ce:16:7b:28:f9:77:83:cb:35:02:47:9f:8b:af:
                    be:94:e6:5b:9b:0c:ac:92:ba:20:c9:61:46:f0:d2:
                    9c:a8:50:76:50:a5:0c:85:bf:7d:24:cb:ca:d7:d1:
                    e6:35:b6:41:93:23:4a:7d:e5:25:ac:cc:04:83:c1:
                    ea:4c:2d:df:94:c5:a8:00:46:a1:d2:c2:99:cf:55:
                    53:7e:8b:8c:bf:1a:4c:c8:35:36:5e:9c:bd:0e:bd:
                    77:c2:5d:56:11:7c:cb:0e:fe:1b:c9:aa:bb:65:00:
                    78:c9:be:20:46:df:6c:45:fa:2e:20:84:d0:02:38:
                    c2:66:59:47:d5:6f:45:30:29:4c:c1:91:4e:0d:5d:
                    e4:ee:0f:97:9a:db:31:de:7a:76:f8:51:77:0d:9c:
                    5a:74:1c:49:3a:fe:41:3c:30:9e:35:df:50:3d:52:
                    83:b7:d5:c1:a2:c7:12:45:bd:8b:27:2e:14:9a:6e:
                    e6:cf:2d:04:64:49:35:eb:e6:fa:57:d9:c1:74:49:
                    ad:d4:7f:b0:6d:c5:57:5d:61:b8:2d:70:c6:13:9a:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:D7:14:7C:73:A5:93:EA:F9:9D:DB:E8:FE:4E:F8:0B:4E:B7:72
            X509v3 Authority Key Identifier:
                keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/EBnXFHxzpZPq-Z3b6P5O-AtOt3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.232.0/22
                IPv6:
                  2a0e:73c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:19:70:3f:4f:24:78:21:e8:1c:6b:2e:ed:4f:33:da:a3:
         22:4d:85:08:55:e6:81:40:58:21:18:6d:18:e8:41:8c:08:bd:
         dc:51:af:a4:66:1f:90:ac:bd:c9:fd:b0:de:4d:53:c7:7c:6c:
         2a:6c:c8:cc:5b:66:4f:b6:11:76:18:0e:a2:80:62:27:7f:61:
         8d:63:e4:ea:c7:64:93:93:7a:5d:bc:ae:8b:80:2e:30:02:13:
         f6:c1:81:d8:59:92:d5:a6:f1:bf:f7:95:4f:c9:6a:33:5b:a8:
         8c:07:ec:af:0d:3c:df:ad:26:b2:bd:d7:c3:02:b5:d6:69:3e:
         89:ee:74:77:da:7d:e1:c2:b9:74:45:e9:c8:de:bc:ee:86:22:
         80:98:4a:9c:16:7a:8e:0c:6c:45:6f:92:84:d3:f2:95:7c:50:
         25:15:48:55:4c:17:52:3a:a1:45:32:5e:00:0f:9f:e2:a6:1a:
         ca:43:ce:07:ef:6c:21:4c:38:ca:60:fb:38:ef:8a:e9:12:d9:
         f4:5c:21:13:bc:aa:d8:d7:f7:87:f3:3c:24:87:41:e2:8f:27:
         7d:85:20:28:ff:94:7a:82:e1:d9:01:04:c7:82:12:df:75:3e:
         df:83:db:9b:11:d4:f1:1d:9e:d8:7c:f3:97:d4:21:11:d8:0a:
         96:7c:28:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVynvPtxiiUMz8WvLnAXl1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5
YzE4ZDUwHhcNMjMwMTAyMTMxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE5ZDcxNDdjNzNhNTkzZWFmOTlkZGJlOGZlNGVmODBiNGViNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDR0+5ArEcoi9wJjd3XKkgdm4gGJ
ulW6FrogGFsYhlYVc1yGZyaEMWL3fNgczhZ7KPl3g8s1Akefi6++lOZbmwyskrog
yWFG8NKcqFB2UKUMhb99JMvK19HmNbZBkyNKfeUlrMwEg8HqTC3flMWoAEah0sKZ
z1VTfouMvxpMyDU2Xpy9Dr13wl1WEXzLDv4byaq7ZQB4yb4gRt9sRfouIITQAjjC
ZllH1W9FMClMwZFODV3k7g+Xmtsx3np2+FF3DZxadBxJOv5BPDCeNd9QPVKDt9XB
oscSRb2LJy4Umm7mzy0EZEk16+b6V9nBdEmt1H+wbcVXXWG4LXDGE5os+wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBAZ1xR8c6WT6vmd2+j+TvgLTrdyMB8GA1UdIwQY
MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt
MzM0MTU5NjdjMjEzLzEvRUJuWEZIeHpwWlBxLVozYjZQNU8tQXRPdDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz
LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYToMA0E
AgACMAcDBQMqDnPAMA0GCSqGSIb3DQEBCwUAA4IBAQA2tBlwP08keCHoHGsu7U8z
2qMiTYUIVeaBQFghGG0Y6EGMCL3cUa+kZh+QrL3J/bDeTVPHfGwqbMjMW2ZPthF2
GA6igGInf2GNY+Tqx2STk3pdvK6LgC4wAhP2wYHYWZLVpvG/95VPyWozW6iMB+yv
DTzfrSayvdfDArXWaT6J7nR32n3hwrl0RenI3rzuhiKAmEqcFnqODGxFb5KE0/KV
fFAlFUhVTBdSOqFFMl4AD5/iphrKQ84H72whTDjKYPs474rpEtn0XCETvKrY1/eH
8zwkh0Hijyd9hSAo/5R6guHZAQTHghLfdT7fg9ubEdTxHZ7YfPOX1CER2AqWfCiU
-----END CERTIFICATE-----