Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa
File:                     EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa (raw, json)
Hash identifier:          r1W0CK2mKP06SgwbuohFbGJVFeQuJVnW7IRmUvgIkzA=
Subject key identifier:   11:DA:EB:5F:A3:F3:B3:CF:FD:A5:8E:6A:2D:3D:F3:2F:0B:69:6B:7C
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53F38AE93D6F21F7BFA17F2C040ABD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa
Signing time:             Sun 01 Jan 2023 07:55:19 +0000
ROA not before:           Sun 01 Jan 2023 07:55:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43350
IP address blocks:        185.142.141.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:f3:8a:e9:3d:6f:21:f7:bf:a1:7f:2c:04:0a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11daeb5fa3f3b3cffda58e6a2d3df32f0b696b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:ee:7a:3e:bd:b3:bf:1e:9b:f3:6b:e6:d9:
                    3d:ef:ea:0b:cb:a0:75:f6:c9:63:13:17:d1:9c:6c:
                    f9:95:f4:04:c5:07:b7:b4:48:0c:c4:fe:4e:eb:a9:
                    90:dd:87:0f:97:66:83:e9:c4:de:8d:c9:1d:52:53:
                    78:81:9f:63:b3:b7:1f:38:6b:75:de:0b:a7:b5:11:
                    5a:33:e2:8c:4c:3d:79:95:08:c2:2a:33:aa:2e:fa:
                    75:36:34:32:12:a0:1a:71:e5:ac:fb:ff:34:c4:8c:
                    73:10:92:f0:3f:b5:03:08:f1:a0:f4:39:62:fd:68:
                    ce:db:6a:7c:d6:38:a5:c4:39:95:25:0f:c1:fc:0d:
                    83:10:fd:ff:9b:26:52:99:af:01:30:c2:59:c1:59:
                    62:fa:47:c0:7e:33:3d:48:84:c1:04:f4:3b:67:c5:
                    19:e6:5f:f5:d6:d6:2a:3c:f7:63:8c:28:ee:3d:56:
                    c2:b0:77:2e:c6:41:15:e4:80:c7:bf:b1:78:27:4e:
                    21:13:3d:2e:b9:c7:a1:f2:22:20:15:a9:6f:70:18:
                    cb:78:74:27:b4:e9:bb:5d:98:fd:1c:db:1c:05:e1:
                    93:5f:5b:27:f3:42:4f:95:17:68:1c:29:c9:3e:6c:
                    a3:60:da:d3:6b:84:af:31:6d:37:fb:fc:1f:ee:3a:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:EB:5F:A3:F3:B3:CF:FD:A5:8E:6A:2D:3D:F3:2F:0B:69:6B:7C
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EdrrX6Pzs8_9pY5qLT3zLwtpa3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:80:e3:a4:a9:f3:34:da:c0:5c:a8:38:7c:37:f5:f9:0e:
         a8:ef:2a:77:e0:1e:80:41:c6:aa:d7:9c:0b:84:70:63:a8:41:
         b2:e2:82:ab:6b:e2:e8:55:3b:7e:83:3c:0b:ea:c1:70:1e:bc:
         2a:11:d0:ad:e2:5a:99:e4:c3:ce:0c:d6:02:cb:41:9a:bd:45:
         dc:8a:c6:e0:27:a3:43:34:7e:d4:6d:05:4d:42:52:00:fd:a6:
         de:09:f9:f0:8f:46:79:20:ad:d8:3f:93:20:cc:36:62:e9:25:
         be:ca:df:1b:9c:f8:9e:5f:d2:29:53:23:36:74:b8:1d:11:cf:
         90:99:ea:5a:03:02:5d:43:a3:df:3b:7a:ec:b3:c9:8a:af:1d:
         7c:c4:fd:d7:5a:0e:9a:5b:23:01:70:8f:49:2a:b8:48:9c:81:
         ff:cf:5c:ca:22:2e:62:18:f2:1b:9f:77:e5:ff:d4:fb:68:4a:
         28:8e:ab:04:87:af:7b:65:87:cd:bf:09:b1:97:d4:ac:4d:2b:
         36:40:d2:2b:33:83:77:03:af:41:16:53:e3:53:38:cb:57:9a:
         fd:8c:4a:11:72:f7:5d:dc:6c:37:6e:0c:1f:7b:c9:83:f7:8d:
         76:d3:90:a9:c5:0c:c4:4e:a7:85:ee:31:b8:2a:46:14:55:b6:
         4d:21:95:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU/OK6T1vIfe/oX8sBAq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWRhZWI1ZmEzZjNiM2NmZmRhNThlNmEyZDNkZjMyZjBiNjk2YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/vuej69s78em/Nr5tk97+oLy6B1
9sljExfRnGz5lfQExQe3tEgMxP5O66mQ3YcPl2aD6cTejckdUlN4gZ9js7cfOGt1
3guntRFaM+KMTD15lQjCKjOqLvp1NjQyEqAaceWs+/80xIxzEJLwP7UDCPGg9Dli
/WjO22p81jilxDmVJQ/B/A2DEP3/myZSma8BMMJZwVli+kfAfjM9SITBBPQ7Z8UZ
5l/11tYqPPdjjCjuPVbCsHcuxkEV5IDHv7F4J04hEz0uuceh8iIgFalvcBjLeHQn
tOm7XZj9HNscBeGTX1sn80JPlRdoHCnJPmyjYNrTa4SvMW03+/wf7jq41QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHa61+j87PP/aWOai098y8LaWt8MB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvRWRyclg2UHpzOF85cFk1cUxUM3pMd3RwYTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY6NMA0G
CSqGSIb3DQEBCwUAA4IBAQBnLYDjpKnzNNrAXKg4fDf1+Q6o7yp34B6AQcaq15wL
hHBjqEGy4oKra+LoVTt+gzwL6sFwHrwqEdCt4lqZ5MPODNYCy0GavUXcisbgJ6ND
NH7UbQVNQlIA/abeCfnwj0Z5IK3YP5MgzDZi6SW+yt8bnPieX9IpUyM2dLgdEc+Q
mepaAwJdQ6PfO3rss8mKrx18xP3XWg6aWyMBcI9JKrhInIH/z1zKIi5iGPIbn3fl
/9T7aEoojqsEh697ZYfNvwmxl9SsTSs2QNIrM4N3A69BFlPjUzjLV5r9jEoRcvdd
3Gw3bgwfe8mD941205CpxQzETqeF7jG4KkYUVbZNIZUn
-----END CERTIFICATE-----