Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eXJ0TRCmj0voeypKBUjerjUsUqQ.roa
File:                     eXJ0TRCmj0voeypKBUjerjUsUqQ.roa (raw, json)
Hash identifier:          AnG9dPZOa9lwmnIfq8U3mQAlUZfqLOKBMNzMhXw2xUA=
Subject key identifier:   79:72:74:4D:10:A6:8F:4B:E8:7B:2A:4A:05:48:DE:AE:35:2C:52:A4
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBC8D9BD71B4098CE35D965222C593
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eXJ0TRCmj0voeypKBUjerjUsUqQ.roa
Signing time:             Mon 02 Jan 2023 05:37:07 +0000
ROA not before:           Mon 02 Jan 2023 05:37:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205632
IP address blocks:        5.1.71.0/24 maxlen: 32
                          2a07:6fc0:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:c8:d9:bd:71:b4:09:8c:e3:5d:96:52:22:c5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7972744d10a68f4be87b2a4a0548deae352c52a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:02:14:30:6c:d2:15:88:8b:66:e5:88:65:
                    71:7d:fb:fc:5f:ec:71:57:18:34:47:47:69:7f:17:
                    f5:a5:64:75:51:3e:5b:3c:f5:3c:d7:ef:71:ad:89:
                    fd:86:77:bf:21:25:c7:a4:68:0c:68:5e:e0:f7:b3:
                    53:e5:7e:64:ab:6c:88:2b:17:fa:4e:11:a3:cb:1b:
                    b3:58:f2:b4:3b:9e:5a:7c:20:ba:8b:97:30:07:61:
                    89:f8:7b:64:a0:7a:5d:74:b5:c9:7a:8e:05:03:ef:
                    9f:c2:9a:6a:bd:65:02:84:20:93:6c:c4:66:51:88:
                    82:3a:76:28:eb:51:ed:d8:64:46:67:c5:0a:a9:06:
                    99:52:a6:f9:4a:a2:7b:1f:8a:dd:cf:c4:29:b2:f9:
                    20:f0:82:80:ab:14:5f:26:21:a4:ec:1d:9e:6d:44:
                    16:c4:20:24:be:9d:41:a0:d8:33:09:70:e1:83:7d:
                    55:99:50:20:fa:e0:45:25:7d:ac:b1:91:3e:81:ae:
                    7b:a0:70:94:8b:69:b2:19:62:03:b2:1a:bf:a9:59:
                    08:82:7f:06:3a:5f:c0:97:a2:aa:49:30:48:80:fd:
                    0c:dc:98:af:68:72:74:36:26:b9:1d:7c:9c:21:4f:
                    5f:f4:f5:59:aa:c5:bf:7d:44:c6:26:05:18:2c:ff:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:74:4D:10:A6:8F:4B:E8:7B:2A:4A:05:48:DE:AE:35:2C:52:A4
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eXJ0TRCmj0voeypKBUjerjUsUqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.71.0/24
                IPv6:
                  2a07:6fc0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:27:19:3c:87:c8:04:af:28:f3:6f:5c:f1:57:dc:2c:5b:
         95:3f:88:cf:72:8f:59:83:87:7d:96:76:bd:b5:24:83:00:be:
         6f:52:61:0f:d5:cd:ba:36:71:cf:06:41:90:39:b5:98:60:21:
         78:d8:91:48:57:f8:f4:11:05:1b:a7:ec:b1:80:8a:3a:83:fd:
         90:c0:81:ef:97:06:a0:24:70:63:9c:71:8c:66:54:e8:65:0e:
         84:59:de:7e:94:7e:ec:81:9e:4b:3a:74:75:78:2b:22:e1:73:
         87:e1:f7:be:a6:3b:83:dc:b4:f9:1b:b0:b9:6a:75:b3:7c:1f:
         54:30:ad:ca:8f:ab:57:8f:78:61:ec:3f:98:52:b6:f7:f4:59:
         7e:cb:ea:7d:a5:7f:29:46:4f:13:b0:93:9f:ec:f3:50:b7:9e:
         aa:87:fd:48:9f:f9:4f:a2:e3:a1:cb:21:13:61:ed:a8:ef:fa:
         84:98:9a:4e:fb:f0:cc:29:b7:ca:fe:8b:f8:c2:4d:e8:a7:81:
         a0:ac:e2:48:df:40:d3:32:90:1a:14:88:eb:ab:68:54:5f:00:
         54:96:e6:04:3e:9b:b0:9c:61:7b:72:48:2d:c4:b1:b4:ff:6d:
         2a:db:14:5d:e3:5c:83:78:d2:f2:3f:53:c1:14:3b:96:0a:0a:
         3f:ca:0b:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVw+8jZvXG0CYzjXZZSIsWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwMTAyMDUzNzA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTcyNzQ0ZDEwYTY4ZjRiZTg3YjJhNGEwNTQ4ZGVhZTM1MmM1MmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYECFDBs0hWIi2bliGVxffv8X+xx
Vxg0R0dpfxf1pWR1UT5bPPU81+9xrYn9hne/ISXHpGgMaF7g97NT5X5kq2yIKxf6
ThGjyxuzWPK0O55afCC6i5cwB2GJ+HtkoHpddLXJeo4FA++fwppqvWUChCCTbMRm
UYiCOnYo61Ht2GRGZ8UKqQaZUqb5SqJ7H4rdz8Qpsvkg8IKAqxRfJiGk7B2ebUQW
xCAkvp1BoNgzCXDhg31VmVAg+uBFJX2ssZE+ga57oHCUi2myGWIDshq/qVkIgn8G
Ol/Al6KqSTBIgP0M3JivaHJ0Nia5HXycIU9f9PVZqsW/fUTGJgUYLP/gEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHlydE0Qpo9L6HsqSgVI3q41LFKkMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvZVhKMFRSQ21qMHZvZXlwS0JVamVyalVzVXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABQFHMA8E
AgACMAkDBwAqB2/AAAQwDQYJKoZIhvcNAQELBQADggEBAECxJxk8h8gEryjzb1zx
V9wsW5U/iM9yj1mDh32Wdr21JIMAvm9SYQ/Vzbo2cc8GQZA5tZhgIXjYkUhX+PQR
BRun7LGAijqD/ZDAge+XBqAkcGOccYxmVOhlDoRZ3n6UfuyBnks6dHV4KyLhc4fh
976mO4PctPkbsLlqdbN8H1QwrcqPq1ePeGHsP5hStvf0WX7L6n2lfylGTxOwk5/s
81C3nqqH/Uif+U+i46HLIRNh7ajv+oSYmk778Mwpt8r+i/jCTeingaCs4kjfQNMy
kBoUiOuraFRfAFSW5gQ+m7CcYXtySC3EsbT/bSrbFF3jXIN40vI/U8EUO5YKCj/K
C9U=
-----END CERTIFICATE-----