Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa
File:                     dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa (raw, json)
Hash identifier:          ksZ4ZfjAkoXfUYdn2AZtn+KzLfrCj0ERJ5A696QeL+8=
Subject key identifier:   75:6E:F2:E9:B4:A9:C0:52:AE:87:21:5E:EB:7F:F9:2D:0D:64:39:5B
Certificate issuer:       /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial:       0187A2BF57D27C732DFB2F33AC469E2BBE8A
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa
Signing time:             Fri 21 Apr 2023 07:37:41 +0000
ROA not before:           Fri 21 Apr 2023 07:37:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212669
IP address blocks:        194.180.26.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a2:bf:57:d2:7c:73:2d:fb:2f:33:ac:46:9e:2b:be:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
        Validity
            Not Before: Apr 21 07:37:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=756ef2e9b4a9c052ae87215eeb7ff92d0d64395b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:40:5b:f7:7a:01:a2:d3:90:87:45:af:51:
                    d5:8f:56:64:fa:05:a8:e8:5a:95:b8:6d:a9:41:ca:
                    9d:bc:cf:38:dd:01:37:59:d9:c8:02:52:ad:a2:48:
                    5c:3a:89:e5:06:de:25:01:03:2f:91:be:c0:c2:d5:
                    58:1a:f3:4e:e3:e3:6d:26:86:e0:96:72:be:44:5a:
                    03:2f:95:33:a4:f0:59:4f:ed:66:25:e3:f1:95:7a:
                    4b:d9:15:5f:9f:28:8e:62:6e:b7:fe:2d:a0:13:44:
                    d2:a4:4f:e1:11:6b:ff:f7:e7:bb:16:11:f0:fd:35:
                    c2:87:7a:4f:c9:2d:b8:0c:44:35:d4:c0:08:7b:2e:
                    22:10:ea:19:5e:17:60:8a:20:94:f3:ee:5c:6c:49:
                    26:76:64:77:6f:58:3d:82:76:bb:4b:70:9a:d9:9d:
                    db:e1:00:e7:da:02:4d:a6:e1:93:4b:d3:e0:13:44:
                    b2:68:3f:a9:be:93:53:73:73:e1:75:6c:c4:b3:d7:
                    35:3f:b1:5c:69:03:b6:38:37:60:ca:3b:d7:ec:85:
                    44:93:68:3d:16:c0:f2:cc:8b:80:a2:b1:5e:fc:5a:
                    c0:35:d2:61:2e:19:a7:9a:77:f1:38:e3:7e:f5:9f:
                    9e:0a:e6:70:18:03:9e:a6:6b:9b:10:90:71:45:b9:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6E:F2:E9:B4:A9:C0:52:AE:87:21:5E:EB:7F:F9:2D:0D:64:39:5B
            X509v3 Authority Key Identifier:
                keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dW7y6bSpwFKuhyFe63_5LQ1kOVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:00:0d:8a:32:b1:91:19:ee:d2:d3:0f:eb:c2:a3:e3:a2:
         ed:31:dc:ed:87:ea:34:6e:cc:11:b6:3b:80:60:35:63:2f:d3:
         77:0c:8e:ca:af:92:56:cf:bf:dc:a4:91:c0:90:c9:65:d4:e9:
         17:f2:d8:80:34:39:f3:9e:0f:5b:0d:f2:ac:84:02:d0:aa:88:
         1c:c5:8f:b1:8a:f7:ea:4b:93:c8:0e:ab:fd:d5:c7:50:65:78:
         2f:0a:fa:28:f3:a2:b7:9e:9b:a5:22:5e:61:46:53:84:77:52:
         1b:ce:51:29:2e:4b:f5:a4:06:03:03:c8:db:86:eb:64:79:37:
         e7:e1:2b:1e:d8:42:17:5a:50:97:86:aa:2e:89:ff:05:86:01:
         24:05:c0:b2:ce:ab:01:97:91:c3:b3:8f:d5:d3:ac:e7:cb:b7:
         c2:ae:8a:bf:cf:d9:39:89:10:47:e4:3c:6d:7b:fe:5a:05:09:
         3f:85:e8:c7:50:a0:2d:22:cc:80:f6:03:ff:91:6c:db:7b:2b:
         65:f8:67:d5:a2:21:53:93:24:d2:92:1a:e4:64:df:18:9f:81:
         3e:04:bd:e6:e9:f7:44:b0:1e:6c:3f:08:e7:5a:b1:15:ee:e3:
         62:2f:40:1a:6a:5c:e4:d2:c6:68:ae:d5:14:83:73:43:8c:fd:
         aa:c8:56:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeiv1fSfHMt+y8zrEaeK76KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjMwNDIxMDczNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTZlZjJlOWI0YTljMDUyYWU4NzIxNWVlYjdmZjkyZDBkNjQzOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nxAW/d6AaLTkIdFr1HVj1Zk+gWo
6FqVuG2pQcqdvM843QE3WdnIAlKtokhcOonlBt4lAQMvkb7AwtVYGvNO4+NtJobg
lnK+RFoDL5UzpPBZT+1mJePxlXpL2RVfnyiOYm63/i2gE0TSpE/hEWv/9+e7FhHw
/TXCh3pPyS24DEQ11MAIey4iEOoZXhdgiiCU8+5cbEkmdmR3b1g9gna7S3Ca2Z3b
4QDn2gJNpuGTS9PgE0SyaD+pvpNTc3PhdWzEs9c1P7FcaQO2ODdgyjvX7IVEk2g9
FsDyzIuAorFe/FrANdJhLhmnmnfxOON+9Z+eCuZwGAOepmubEJBxRbkCDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHVu8um0qcBSrochXut/+S0NZDlbMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvZFc3eTZiU3B3Rkt1aHlGZTYzXzVMUTFrT1ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwrQaMA0G
CSqGSIb3DQEBCwUAA4IBAQCFsgANijKxkRnu0tMP68Kj46LtMdzth+o0bswRtjuA
YDVjL9N3DI7Kr5JWz7/cpJHAkMll1OkX8tiANDnzng9bDfKshALQqogcxY+xivfq
S5PIDqv91cdQZXgvCvoo86K3npulIl5hRlOEd1IbzlEpLkv1pAYDA8jbhutkeTfn
4Sse2EIXWlCXhqouif8FhgEkBcCyzqsBl5HDs4/V06zny7fCroq/z9k5iRBH5Dxt
e/5aBQk/hejHUKAtIsyA9gP/kWzbeytl+GfVoiFTkyTSkhrkZN8Yn4E+BL3m6fdE
sB5sPwjnWrEV7uNiL0Aaalzk0sZortUUg3NDjP2qyFau
-----END CERTIFICATE-----