Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/K51kt0YxCMmoqxyHRnIy8kwGWEw.roa
File:                     K51kt0YxCMmoqxyHRnIy8kwGWEw.roa (raw, json)
Hash identifier:          xj6+F6c2BuMtwzHOJH6VeLJDyNM8Du3vAVRLadyVNI8=
Subject key identifier:   2B:9D:64:B7:46:31:08:C9:A8:AB:1C:87:46:72:32:F2:4C:06:58:4C
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBC25240BA21851B00FEC51CB518C5
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/K51kt0YxCMmoqxyHRnIy8kwGWEw.roa
Signing time:             Mon 02 Jan 2023 05:37:05 +0000
ROA not before:           Mon 02 Jan 2023 05:37:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        5.180.194.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:c2:52:40:ba:21:85:1b:00:fe:c5:1c:b5:18:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b9d64b7463108c9a8ab1c87467232f24c06584c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:29:6e:6b:06:e2:38:27:a0:b9:3c:52:ff:
                    4b:03:44:40:6c:01:81:a2:f5:be:8d:74:13:1a:7a:
                    41:96:44:61:2f:9a:9f:4d:d0:5b:72:c7:8e:91:c1:
                    2a:08:5a:52:65:51:b7:68:18:8b:94:be:7a:ef:69:
                    ea:65:eb:36:fa:98:ca:c4:ae:2f:fd:22:2b:d9:bf:
                    27:02:70:4b:86:25:af:2c:9a:5f:b8:65:30:05:ff:
                    28:f2:81:33:93:52:d8:a0:e1:65:91:08:b4:27:d6:
                    2d:c3:b8:e4:d7:92:84:21:0c:03:76:f3:ee:37:7a:
                    65:de:55:56:d8:f1:1e:2f:34:bd:9b:48:27:49:5c:
                    63:79:a1:7b:29:39:56:39:b7:7d:c5:cd:b5:68:23:
                    91:07:a9:07:b3:88:5a:ae:a6:d6:8c:94:4c:0e:c4:
                    46:8d:1a:30:6d:8a:34:44:1b:6d:2d:dc:53:9a:52:
                    7f:07:44:20:11:d5:fc:e3:ec:fb:a3:54:80:6b:84:
                    e6:46:b3:ad:8c:a9:9c:44:97:76:de:71:bb:bb:f8:
                    1d:8d:82:e0:03:cc:af:cc:10:92:16:f9:22:f1:05:
                    6a:52:31:7b:06:38:ff:03:8e:c1:04:8e:1b:ea:68:
                    e9:3b:4a:bc:44:8d:a4:04:ad:53:f3:cf:bb:a2:be:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:64:B7:46:31:08:C9:A8:AB:1C:87:46:72:32:F2:4C:06:58:4C
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/K51kt0YxCMmoqxyHRnIy8kwGWEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:36:b9:0e:00:63:dc:cd:f7:1a:09:30:fe:70:a0:c8:e3:ef:
         7a:b3:d7:b8:4a:a2:d3:77:b8:c4:66:e1:06:17:b0:23:2c:bf:
         4d:a8:79:9a:43:c5:00:06:d1:84:4f:bf:0d:8a:88:c4:10:2b:
         53:5c:2c:fc:d6:dc:2f:24:80:f2:66:94:73:d1:fa:c4:eb:20:
         3c:7d:61:b3:57:1f:7a:bb:50:b1:d2:e2:8f:14:2c:7e:99:4c:
         b6:88:22:f0:71:aa:59:73:45:6e:35:5f:e3:14:1e:fc:b9:20:
         a8:e4:23:b9:7d:e7:eb:88:17:6c:85:ab:1b:87:86:6e:67:2c:
         22:33:2d:75:de:cc:86:e0:ef:65:5c:14:2f:32:87:1c:8c:37:
         14:36:6c:95:0f:e0:57:6f:d5:c1:39:6b:45:98:d3:23:38:17:
         6d:b5:74:00:64:cd:51:e6:f4:91:cd:c7:c3:4b:99:00:e3:61:
         da:a1:92:ac:3b:a2:7e:e6:10:14:93:67:4e:d2:8a:de:0d:2b:
         9a:af:75:b0:9a:9f:e5:a6:47:18:1c:35:4a:03:b7:fb:cf:04:
         5b:ff:a4:26:8c:ac:af:12:a1:aa:1a:6f:16:6c:0f:02:81:92:
         3c:bc:02:e6:80:b5:1c:68:d7:90:a5:84:5b:4b:b9:7c:1f:f0:
         c6:be:6e:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+8JSQLohhRsA/sUctRjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwMTAyMDUzNzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjlkNjRiNzQ2MzEwOGM5YThhYjFjODc0NjcyMzJmMjRjMDY1ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64gpbmsG4jgnoLk8Uv9LA0RAbAGB
ovW+jXQTGnpBlkRhL5qfTdBbcseOkcEqCFpSZVG3aBiLlL5672nqZes2+pjKxK4v
/SIr2b8nAnBLhiWvLJpfuGUwBf8o8oEzk1LYoOFlkQi0J9Ytw7jk15KEIQwDdvPu
N3pl3lVW2PEeLzS9m0gnSVxjeaF7KTlWObd9xc21aCORB6kHs4harqbWjJRMDsRG
jRowbYo0RBttLdxTmlJ/B0QgEdX84+z7o1SAa4TmRrOtjKmcRJd23nG7u/gdjYLg
A8yvzBCSFvki8QVqUjF7Bjj/A47BBI4b6mjpO0q8RI2kBK1T88+7or6YrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCudZLdGMQjJqKsch0ZyMvJMBlhMMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvSzUxa3QwWXhDTW1vcXh5SFJuSXk4a3dHV0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbTCMA0G
CSqGSIb3DQEBCwUAA4IBAQACNrkOAGPczfcaCTD+cKDI4+96s9e4SqLTd7jEZuEG
F7AjLL9NqHmaQ8UABtGET78NiojEECtTXCz81twvJIDyZpRz0frE6yA8fWGzVx96
u1Cx0uKPFCx+mUy2iCLwcapZc0VuNV/jFB78uSCo5CO5fefriBdshasbh4ZuZywi
My113syG4O9lXBQvMoccjDcUNmyVD+BXb9XBOWtFmNMjOBdttXQAZM1R5vSRzcfD
S5kA42HaoZKsO6J+5hAUk2dO0oreDSuar3Wwmp/lpkcYHDVKA7f7zwRb/6QmjKyv
EqGqGm8WbA8CgZI8vALmgLUcaNeQpYRbS7l8H/DGvm6y
-----END CERTIFICATE-----