Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Z_kxxoiWlQJzQjMI4jEPofFzFeo.roa
File:                     Z_kxxoiWlQJzQjMI4jEPofFzFeo.roa (raw, json)
Hash identifier:          tJHVvrbe2RY+KRjz9GtWE8NyqEOJcMI853oGxy9F/e8=
Subject key identifier:   67:F9:31:C6:88:96:95:02:73:42:33:08:E2:31:0F:A1:F1:73:15:EA
Certificate issuer:       /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial:       0185714C11362DFF7297F2CEF8C719B25F07
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Z_kxxoiWlQJzQjMI4jEPofFzFeo.roa
Signing time:             Mon 02 Jan 2023 07:04:48 +0000
ROA not before:           Mon 02 Jan 2023 07:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        213.178.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:11:36:2d:ff:72:97:f2:ce:f8:c7:19:b2:5f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
        Validity
            Not Before: Jan  2 07:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67f931c68896950273423308e2310fa1f17315ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:b3:33:e9:dc:9f:9c:e3:0d:70:af:ea:85:
                    50:66:89:d7:e9:87:1f:61:15:23:12:d0:de:9b:81:
                    e2:a7:bc:58:92:12:6a:95:a4:bd:2b:ec:73:70:1b:
                    a9:85:75:f6:83:a9:97:1c:38:ce:a3:8e:32:1b:fc:
                    6f:4d:d7:6f:23:ff:10:d4:d7:4f:3c:73:e4:ad:4f:
                    38:ea:bd:50:cf:94:76:ab:7d:a1:0c:3e:a1:a3:f5:
                    ba:cf:72:3e:b4:dc:c9:5c:27:9f:57:17:8d:24:0c:
                    1d:62:2f:56:a1:17:ad:3b:ac:19:28:25:c5:18:39:
                    56:7d:33:28:ee:ad:e7:2c:14:b4:c5:df:33:0f:9f:
                    af:1d:54:11:a4:7b:0e:61:7f:62:a2:6f:05:ce:cb:
                    79:61:18:a9:18:db:5e:88:72:b8:9c:c9:33:4d:76:
                    74:78:32:f0:4a:e8:5a:d5:9e:82:75:82:cf:10:94:
                    21:e0:07:1a:ee:4f:5f:ef:85:9e:c2:54:18:66:65:
                    84:36:e6:75:be:0d:15:54:bb:00:a1:13:e0:db:3a:
                    0e:c2:4e:9e:c9:c6:c4:c0:25:5a:fe:b5:03:d5:cd:
                    bb:00:47:33:f1:b3:09:4d:ac:43:90:c5:e1:41:95:
                    2c:d3:d0:34:64:bd:cd:03:46:52:51:ad:73:23:e6:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:31:C6:88:96:95:02:73:42:33:08:E2:31:0F:A1:F1:73:15:EA
            X509v3 Authority Key Identifier:
                keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/Z_kxxoiWlQJzQjMI4jEPofFzFeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.178.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:76:cb:4d:96:f5:7d:9d:3a:43:96:41:cb:b8:61:1c:1a:3a:
         00:b2:b7:96:d5:7f:86:47:eb:e2:6c:cb:28:36:37:9f:5c:0e:
         2a:66:7d:c1:62:72:3a:4a:84:8a:46:72:33:ee:53:b2:75:a2:
         49:e0:18:50:7c:0a:eb:5b:cd:51:f1:b6:3b:6a:7a:d9:8e:99:
         2a:9f:98:0f:66:2a:6e:2e:7f:9b:1b:df:4a:d4:8c:3b:21:61:
         73:8b:1f:2e:92:41:8c:7c:6b:77:e4:dc:2c:74:c8:06:c5:ec:
         3c:fc:10:d6:e3:f4:42:d0:a7:5a:e1:c9:c1:65:0f:3c:6e:a6:
         41:fd:c1:31:69:30:cb:52:d8:40:89:5d:46:b3:f1:0d:e5:af:
         b4:6f:70:05:6e:4a:64:50:e5:e8:dc:19:c6:42:4b:6f:59:82:
         f4:9b:3a:50:68:bd:b6:ab:83:20:c9:1b:6f:86:a1:ce:ed:48:
         c3:af:e6:8b:b2:45:a4:4b:b5:ee:a8:08:59:f1:cb:63:23:7b:
         3d:ac:7b:ef:c5:f9:2f:b7:c9:58:14:fa:30:b1:3d:ce:fe:2c:
         82:61:37:23:b6:c9:90:36:5d:29:39:11:8f:d3:98:28:2b:ef:
         34:ba:fc:f3:ec:ec:38:df:b8:23:95:80:a0:86:e2:eb:2f:14:
         c1:58:18:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTBE2Lf9yl/LO+McZsl8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTNiZjgyMjU5MmJkMWI1NGI3N2NjMmMxY2M0MmIyOGNj
ZjE2NjkwHhcNMjMwMTAyMDcwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2Y5MzFjNjg4OTY5NTAyNzM0MjMzMDhlMjMxMGZhMWYxNzMxNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre6zM+ncn5zjDXCv6oVQZonX6Ycf
YRUjEtDem4Hip7xYkhJqlaS9K+xzcBuphXX2g6mXHDjOo44yG/xvTddvI/8Q1NdP
PHPkrU846r1Qz5R2q32hDD6ho/W6z3I+tNzJXCefVxeNJAwdYi9WoRetO6wZKCXF
GDlWfTMo7q3nLBS0xd8zD5+vHVQRpHsOYX9iom8Fzst5YRipGNteiHK4nMkzTXZ0
eDLwSuha1Z6CdYLPEJQh4Aca7k9f74WewlQYZmWENuZ1vg0VVLsAoRPg2zoOwk6e
ycbEwCVa/rUD1c27AEcz8bMJTaxDkMXhQZUs09A0ZL3NA0ZSUa1zI+aPVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGf5McaIlpUCc0IzCOIxD6HxcxXqMB8GA1UdIwQY
MBaAFDsTv4Ilkr0bVLd8wsHMQrKMzxZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAt
NWFmZGUyOTRkMWMyLzEvWl9reHhvaVdsUUp6UWpNSTRqRVBvZkZ6RmVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAtNWFmZGUyOTRkMWMy
LzEvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bKMMA0G
CSqGSIb3DQEBCwUAA4IBAQCudstNlvV9nTpDlkHLuGEcGjoAsreW1X+GR+vibMso
NjefXA4qZn3BYnI6SoSKRnIz7lOydaJJ4BhQfArrW81R8bY7anrZjpkqn5gPZipu
Ln+bG99K1Iw7IWFzix8ukkGMfGt35NwsdMgGxew8/BDW4/RC0Kda4cnBZQ88bqZB
/cExaTDLUthAiV1Gs/EN5a+0b3AFbkpkUOXo3BnGQktvWYL0mzpQaL22q4MgyRtv
hqHO7UjDr+aLskWkS7XuqAhZ8ctjI3s9rHvvxfkvt8lYFPowsT3O/iyCYTcjtsmQ
Nl0pORGP05goK+80uvzz7Ow437gjlYCghuLrLxTBWBgd
-----END CERTIFICATE-----