Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/w_eBsPAoYA5mdIG8dCXBMDzKvD4.roa
File:                     w_eBsPAoYA5mdIG8dCXBMDzKvD4.roa (raw, json)
Hash identifier:          sHiKk+aPHXv7GOhxI92v27pbLLFpUnAJdCeb/oxERLw=
Subject key identifier:   C3:F7:81:B0:F0:28:60:0E:66:74:81:BC:74:25:C1:30:3C:CA:BC:3E
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       01856CB848142458400C63574B74D9236AC6
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/w_eBsPAoYA5mdIG8dCXBMDzKvD4.roa
Signing time:             Sun 01 Jan 2023 09:44:54 +0000
ROA not before:           Sun 01 Jan 2023 09:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        185.217.166.0/24 maxlen: 24
                          2a10:d504::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:48:14:24:58:40:0c:63:57:4b:74:d9:23:6a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 09:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3f781b0f028600e667481bc7425c1303ccabc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:d7:cb:06:52:0c:b9:1a:64:7b:6d:6d:ad:
                    ae:da:56:7a:55:54:b9:51:01:79:cc:bd:5d:c1:3e:
                    8a:c1:f2:b7:5f:f7:57:37:85:d7:fe:5e:9b:41:a2:
                    5f:4a:c0:29:01:fd:d9:b6:bc:50:8a:3d:46:0d:f3:
                    9a:0f:d2:77:58:40:7a:f2:63:0b:ae:d6:c5:df:9d:
                    85:a4:3b:29:d3:70:e7:e9:ed:4a:62:a6:ef:d6:c1:
                    5e:d3:ea:bd:3d:06:f5:bc:3c:65:f1:be:2c:31:a0:
                    99:c4:07:de:8d:ac:d3:6b:ae:45:2e:de:a0:9d:31:
                    b6:bd:98:78:49:da:d7:8a:24:77:4b:ae:6a:d6:a0:
                    bc:3b:12:1f:1c:dd:3a:d2:a5:94:85:73:71:ec:47:
                    c7:14:0f:b3:d4:d3:fb:73:1f:c1:de:ee:41:f9:f2:
                    eb:a3:d8:88:86:09:b2:16:74:24:41:9e:61:ca:40:
                    42:24:b5:f2:cf:ab:11:da:0c:02:2f:1a:01:7b:7b:
                    c5:25:26:1a:e8:e9:e8:c2:f4:2b:6d:8a:cf:dd:ea:
                    13:56:a6:8d:c5:08:03:66:4d:81:c5:6f:c6:24:59:
                    7e:07:c6:65:7c:78:82:80:22:b3:41:c7:80:e0:46:
                    fe:43:1b:54:0f:23:51:4d:0a:a1:1a:28:5a:79:5e:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:81:B0:F0:28:60:0E:66:74:81:BC:74:25:C1:30:3C:CA:BC:3E
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/w_eBsPAoYA5mdIG8dCXBMDzKvD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.166.0/24
                IPv6:
                  2a10:d504::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:f9:ce:1d:4f:ed:ed:1a:c4:49:fa:87:29:69:aa:b8:9a:
         f0:6a:3e:09:31:cd:f6:a5:cc:3d:92:86:29:25:dd:96:a2:f5:
         19:29:74:ab:61:88:60:b4:24:98:a1:8f:0d:87:55:05:1f:a2:
         1c:0b:cd:99:24:36:5e:40:a0:6a:78:ed:76:30:db:0a:61:f3:
         fe:af:3f:9b:22:f1:24:8e:f9:89:ca:07:63:81:f4:4d:27:05:
         1d:fa:d1:ea:9b:2d:84:c2:a6:52:78:d1:a1:02:dd:e0:a4:bb:
         86:9f:ec:66:f0:ed:21:7b:4b:2d:12:4b:45:0a:32:4e:ef:86:
         44:8f:90:80:dc:4f:22:fd:5c:c4:bc:7c:72:c9:91:ae:91:ef:
         e7:b6:be:cd:81:dc:57:6d:47:9b:92:78:47:12:bb:f7:ca:e0:
         5d:e9:c1:fc:4d:a9:6e:50:0c:e3:2b:b8:9f:fc:e8:e8:b8:fd:
         14:ae:a5:ca:89:c3:db:2c:6e:ec:48:1f:2c:8e:9f:2b:08:2f:
         95:49:6d:4f:48:8c:63:ce:7c:c5:96:5f:a8:9b:6a:42:0e:75:
         72:85:1e:9a:30:2d:6f:52:a6:4c:08:75:5a:68:7c:76:6a:36:
         10:17:a9:e2:21:28:42:37:8e:0e:13:71:54:0a:db:09:21:45:
         10:3e:ac:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVsuEgUJFhADGNXS3TZI2rGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTQ2ODdhYjhiMWViNmRlMWFiZDA0YTA3NjE3Yzg2ZDEx
ODUxOGQwHhcNMjMwMTAxMDk0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Y3ODFiMGYwMjg2MDBlNjY3NDgxYmM3NDI1YzEzMDNjY2FiYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiTXywZSDLkaZHttba2u2lZ6VVS5
UQF5zL1dwT6KwfK3X/dXN4XX/l6bQaJfSsApAf3ZtrxQij1GDfOaD9J3WEB68mML
rtbF352FpDsp03Dn6e1KYqbv1sFe0+q9PQb1vDxl8b4sMaCZxAfejazTa65FLt6g
nTG2vZh4SdrXiiR3S65q1qC8OxIfHN060qWUhXNx7EfHFA+z1NP7cx/B3u5B+fLr
o9iIhgmyFnQkQZ5hykBCJLXyz6sR2gwCLxoBe3vFJSYa6OnowvQrbYrP3eoTVqaN
xQgDZk2BxW/GJFl+B8ZlfHiCgCKzQceA4Eb+QxtUDyNRTQqhGihaeV7/VQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMP3gbDwKGAOZnSBvHQlwTA8yrw+MB8GA1UdIwQY
MBaAFObkaHq4sett4avQSgdhfIbRGFGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMt
MTM4YmJhYWM3ZmUyLzEvd19lQnNQQW9ZQTVtZElHOGRDWEJNRHpLdkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS82ZmQ1ZDItYjdjZS00YjNkLThmMmMtMTM4YmJhYWM3ZmUy
LzEvNXVSb2VyaXg2MjNocTlCS0IyRjhodEVZVVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAudmmMA8E
AgACMAkDBwAqENUEAAAwDQYJKoZIhvcNAQELBQADggEBAIUd+c4dT+3tGsRJ+ocp
aaq4mvBqPgkxzfalzD2Shikl3Zai9RkpdKthiGC0JJihjw2HVQUfohwLzZkkNl5A
oGp47XYw2wph8/6vP5si8SSO+YnKB2OB9E0nBR360eqbLYTCplJ40aEC3eCku4af
7Gbw7SF7Sy0SS0UKMk7vhkSPkIDcTyL9XMS8fHLJka6R7+e2vs2B3FdtR5uSeEcS
u/fK4F3pwfxNqW5QDOMruJ/86Oi4/RSupcqJw9ssbuxIHyyOnysIL5VJbU9IjGPO
fMWWX6ibakIOdXKFHpowLW9SpkwIdVpofHZqNhAXqeIhKEI3jg4TcVQK2wkhRRA+
rM4=
-----END CERTIFICATE-----