Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9BNsvFGI9A_b78TqgzXFPRHYKc8.roa
File:                     9BNsvFGI9A_b78TqgzXFPRHYKc8.roa (raw, json)
Hash identifier:          q86dvOEjUocouT+tcwX94ViUN9dudC5cKa2f7LsMfyo=
Subject key identifier:   F4:13:6C:BC:51:88:F4:0F:DB:EF:C4:EA:83:35:C5:3D:11:D8:29:CF
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53FC81CD4DFF38DE62D9FE142C2068
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9BNsvFGI9A_b78TqgzXFPRHYKc8.roa
Signing time:             Sun 01 Jan 2023 07:55:21 +0000
ROA not before:           Sun 01 Jan 2023 07:55:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56894
IP address blocks:        185.214.71.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:fc:81:cd:4d:ff:38:de:62:d9:fe:14:2c:20:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f4136cbc5188f40fdbefc4ea8335c53d11d829cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:9e:5b:87:f3:55:77:27:01:11:76:e1:37:
                    09:cb:b0:8d:89:88:38:b5:67:00:9e:2a:01:32:12:
                    03:c8:86:25:2c:b2:58:78:d1:57:77:2f:38:ee:c7:
                    4e:12:33:e5:7f:3b:dc:26:b6:1f:f0:6a:09:a6:12:
                    19:58:2e:d1:b0:80:f1:e4:b6:9f:36:3d:0a:40:04:
                    4b:fd:81:3e:bc:f0:96:c5:5a:ae:fe:91:54:df:c8:
                    77:2c:b9:84:53:91:b9:ea:10:f4:2f:21:e8:1a:13:
                    51:3d:4c:b1:29:eb:b6:af:42:00:b3:00:b5:07:d5:
                    3a:4f:5e:a3:6c:ae:0b:8d:6b:07:c0:8b:c7:b9:b9:
                    19:53:ff:05:db:d1:39:09:ac:35:06:62:1e:e4:65:
                    69:d4:38:d8:7e:8b:7a:6e:c4:dc:7a:83:8c:ac:56:
                    6c:eb:a9:71:84:80:e5:ce:a3:56:aa:b7:66:c4:0f:
                    69:67:14:af:20:79:6b:d9:24:62:ca:71:89:7a:41:
                    96:d0:db:67:85:0e:b8:c9:61:04:31:7a:d9:e4:cf:
                    e6:17:88:a7:a1:63:d4:86:63:fb:74:1b:f2:b4:5d:
                    b8:ed:8e:94:3b:f6:91:29:53:16:73:b9:e0:f0:68:
                    83:84:7e:10:eb:ee:6e:74:09:80:35:7b:8f:59:a7:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:6C:BC:51:88:F4:0F:DB:EF:C4:EA:83:35:C5:3D:11:D8:29:CF
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/9BNsvFGI9A_b78TqgzXFPRHYKc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:4e:32:df:25:a7:4f:35:74:74:dc:1a:ae:99:0d:49:52:
         c2:92:a2:7f:d2:11:51:06:f3:70:e2:ba:d8:24:c2:04:0c:ab:
         d4:ac:1a:f7:c9:c2:a6:27:53:65:d6:c0:aa:93:65:18:83:d3:
         5f:db:17:d9:bb:55:ad:c8:e7:a6:1d:74:d0:9f:ed:1b:1e:52:
         26:de:16:b8:36:fa:6f:b2:01:45:89:c3:98:a3:ed:60:79:69:
         fb:a5:72:a8:c9:fc:9f:c0:a3:6b:24:df:96:e6:9a:34:bd:13:
         4e:1e:b7:24:ae:bf:06:63:79:a6:b2:d1:b6:58:87:0f:70:52:
         93:05:ab:93:cd:f6:f0:e7:cb:dc:9a:fc:aa:14:05:74:c7:d5:
         83:65:b9:93:30:40:16:7e:0a:c6:2f:f3:2a:44:aa:94:49:17:
         41:02:f0:90:75:25:d0:7b:57:40:81:c8:70:4c:9f:a9:f4:5f:
         57:58:e1:48:5b:b2:37:68:f7:dd:5c:6e:dc:44:de:64:34:62:
         fd:06:ea:b1:7d:0a:9e:05:5b:c0:b3:85:11:d9:33:bc:60:7a:
         a9:85:31:96:32:98:84:4a:27:06:af:2e:45:a0:ad:72:ee:ae:
         28:4d:f3:51:70:98:6c:97:2b:88:a3:92:ea:a0:12:1b:90:49:
         95:2b:4a:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU/yBzU3/ON5i2f4ULCBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDEzNmNiYzUxODhmNDBmZGJlZmM0ZWE4MzM1YzUzZDExZDgyOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8GeW4fzVXcnARF24TcJy7CNiYg4
tWcAnioBMhIDyIYlLLJYeNFXdy847sdOEjPlfzvcJrYf8GoJphIZWC7RsIDx5Laf
Nj0KQARL/YE+vPCWxVqu/pFU38h3LLmEU5G56hD0LyHoGhNRPUyxKeu2r0IAswC1
B9U6T16jbK4LjWsHwIvHubkZU/8F29E5Caw1BmIe5GVp1DjYfot6bsTceoOMrFZs
66lxhIDlzqNWqrdmxA9pZxSvIHlr2SRiynGJekGW0NtnhQ64yWEEMXrZ5M/mF4in
oWPUhmP7dBvytF247Y6UO/aRKVMWc7ng8GiDhH4Q6+5udAmANXuPWacFSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQTbLxRiPQP2+/E6oM1xT0R2CnPMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvOUJOc3ZGR0k5QV9iNzhUcWd6WEZQUkhZS2M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZHMA0G
CSqGSIb3DQEBCwUAA4IBAQBN804y3yWnTzV0dNwarpkNSVLCkqJ/0hFRBvNw4rrY
JMIEDKvUrBr3ycKmJ1Nl1sCqk2UYg9Nf2xfZu1WtyOemHXTQn+0bHlIm3ha4Nvpv
sgFFicOYo+1geWn7pXKoyfyfwKNrJN+W5po0vRNOHrckrr8GY3mmstG2WIcPcFKT
BauTzfbw58vcmvyqFAV0x9WDZbmTMEAWfgrGL/MqRKqUSRdBAvCQdSXQe1dAgchw
TJ+p9F9XWOFIW7I3aPfdXG7cRN5kNGL9BuqxfQqeBVvAs4UR2TO8YHqphTGWMpiE
SicGry5FoK1y7q4oTfNRcJhslyuIo5LqoBIbkEmVK0qa
-----END CERTIFICATE-----