Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ntOLcwenrR-ndZ0CJFdTiXbyLkk.roa
File:                     ntOLcwenrR-ndZ0CJFdTiXbyLkk.roa (raw, json)
Hash identifier:          D20ulTtvnrgLmUdR42YQAfdN3/E5A45a63t412igpYI=
Subject key identifier:   9E:D3:8B:73:07:A7:AD:1F:A7:75:9D:02:24:57:53:89:76:F2:2E:49
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       0185706726B9A403001B392A71EC80B52B69
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ntOLcwenrR-ndZ0CJFdTiXbyLkk.roa
Signing time:             Mon 02 Jan 2023 02:54:46 +0000
ROA not before:           Mon 02 Jan 2023 02:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        81.22.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:26:b9:a4:03:00:1b:39:2a:71:ec:80:b5:2b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Jan  2 02:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ed38b7307a7ad1fa7759d022457538976f22e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:43:28:54:f6:0b:ae:ad:d7:3f:6d:42:9b:
                    eb:4c:31:f5:d1:76:03:b3:7c:9e:f4:4c:82:69:39:
                    8e:24:ce:7e:7b:4e:ff:06:54:25:aa:f7:5e:cc:eb:
                    b9:9c:7c:97:f3:f7:fd:57:a0:d7:70:b6:af:bc:e7:
                    ce:e5:e6:b7:76:08:c5:38:b5:eb:c9:0d:0d:1a:4e:
                    31:43:2b:d3:88:76:83:97:88:30:31:f4:9a:00:ff:
                    5b:75:cd:8e:28:ed:e9:9d:da:04:40:70:77:e4:b4:
                    b6:70:38:44:c6:e4:8d:1f:e9:74:ec:05:e2:54:02:
                    2c:b4:30:3a:d1:78:d3:e1:9b:b5:d1:b5:5f:bb:7b:
                    b5:f1:5d:16:e6:ff:cf:87:16:b0:ce:c1:23:43:b6:
                    d5:86:4f:96:a1:cb:6f:24:8a:12:76:2d:8c:67:ea:
                    14:ba:0c:25:7e:58:ff:1e:59:50:a4:c4:4e:89:52:
                    11:6c:34:f9:2f:93:52:0b:bd:9a:82:33:17:20:36:
                    29:38:19:d8:1a:f3:1f:5f:79:a9:ee:0c:2d:b2:5c:
                    e3:8d:e4:d9:38:81:08:69:6e:b8:0a:38:39:21:89:
                    2b:19:bb:1b:82:a4:a6:64:d2:b2:23:f1:ca:fd:aa:
                    37:09:46:36:0d:60:ab:be:ad:96:36:f0:67:5e:52:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D3:8B:73:07:A7:AD:1F:A7:75:9D:02:24:57:53:89:76:F2:2E:49
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ntOLcwenrR-ndZ0CJFdTiXbyLkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:c9:ff:37:fe:7f:3f:63:81:f3:2c:a8:5f:10:19:ae:9c:
         a6:21:b7:b3:7e:24:86:c8:25:1c:4d:10:ad:a2:9f:ed:03:27:
         ca:4d:09:30:ad:98:88:6d:40:8a:74:c0:85:44:4f:8c:cc:db:
         7e:4c:82:e5:16:e0:86:fd:d8:ac:ab:3e:b1:69:de:4d:05:e2:
         29:a9:84:14:59:d2:68:c6:55:99:3b:ca:42:63:94:92:86:90:
         87:29:61:e6:ce:bb:96:89:31:f9:2a:4f:4d:cb:1d:72:75:d6:
         1b:9d:cb:20:28:7b:fe:f2:2d:7d:d3:fe:d7:a0:d0:cc:bf:9d:
         d7:d7:64:48:d7:f6:ac:57:0e:fb:e8:77:a2:fa:1b:d3:a8:8f:
         b7:11:c4:05:b4:84:b4:46:ab:4b:15:12:bc:a8:66:d6:09:2b:
         81:ed:0d:a7:08:73:9b:f4:fa:dc:a8:00:26:25:3f:11:75:f3:
         72:ba:13:49:8b:ac:36:30:43:a3:51:a4:5b:33:eb:d2:5d:a2:
         09:18:cc:d3:cf:0b:0e:ff:a1:a1:af:84:2b:b2:74:34:cf:db:
         05:fd:fe:8b:79:85:77:f1:4f:ad:d6:07:f4:73:4e:d3:ed:64:
         03:66:b4:2b:1b:01:fb:18:1e:f1:d2:a7:ce:1b:a5:85:7d:5b:
         3c:87:38:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZya5pAMAGzkqceyAtStpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwMTAyMDI1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWQzOGI3MzA3YTdhZDFmYTc3NTlkMDIyNDU3NTM4OTc2ZjIyZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZDKFT2C66t1z9tQpvrTDH10XYD
s3ye9EyCaTmOJM5+e07/BlQlqvdezOu5nHyX8/f9V6DXcLavvOfO5ea3dgjFOLXr
yQ0NGk4xQyvTiHaDl4gwMfSaAP9bdc2OKO3pndoEQHB35LS2cDhExuSNH+l07AXi
VAIstDA60XjT4Zu10bVfu3u18V0W5v/PhxawzsEjQ7bVhk+WoctvJIoSdi2MZ+oU
ugwlflj/HllQpMROiVIRbDT5L5NSC72agjMXIDYpOBnYGvMfX3mp7gwtslzjjeTZ
OIEIaW64Cjg5IYkrGbsbgqSmZNKyI/HK/ao3CUY2DWCrvq2WNvBnXlIXTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ7Ti3MHp60fp3WdAiRXU4l28i5JMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvbnRPTGN3ZW5yUi1uZFowQ0pGZFRpWGJ5TGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCURaIMA0G
CSqGSIb3DQEBCwUAA4IBAQAr58n/N/5/P2OB8yyoXxAZrpymIbezfiSGyCUcTRCt
op/tAyfKTQkwrZiIbUCKdMCFRE+MzNt+TILlFuCG/disqz6xad5NBeIpqYQUWdJo
xlWZO8pCY5SShpCHKWHmzruWiTH5Kk9Nyx1yddYbncsgKHv+8i190/7XoNDMv53X
12RI1/asVw776Hei+hvTqI+3EcQFtIS0RqtLFRK8qGbWCSuB7Q2nCHOb9PrcqAAm
JT8RdfNyuhNJi6w2MEOjUaRbM+vSXaIJGMzTzwsO/6Ghr4QrsnQ0z9sF/f6LeYV3
8U+t1gf0c07T7WQDZrQrGwH7GB7x0qfOG6WFfVs8hziQ
-----END CERTIFICATE-----