Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa
File:                     SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa (raw, json)
Hash identifier:          qTic5jV+jeIjvBAuvsV3np0/9Rsb3l3bXx/Ghtwrw+s=
Subject key identifier:   48:FD:9A:5B:92:E4:07:53:E1:EC:E8:A3:14:F3:19:08:2D:DF:36:C2
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       0188C3B734ED002D15FF930E3C69A30DB8DA
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa
Signing time:             Fri 16 Jun 2023 10:19:03 +0000
ROA not before:           Fri 16 Jun 2023 10:19:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        185.69.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c3:b7:34:ed:00:2d:15:ff:93:0e:3c:69:a3:0d:b8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Jun 16 10:19:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48fd9a5b92e40753e1ece8a314f319082ddf36c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:5b:c5:26:87:71:3c:e3:ad:2a:fa:3c:bf:
                    ee:f7:c4:07:98:60:d2:19:35:42:0b:05:d0:25:bb:
                    27:04:a2:e1:3d:ca:ed:c6:e1:f7:30:66:26:54:52:
                    90:b9:b8:6b:0f:8c:d8:29:26:dc:4a:56:58:fe:b9:
                    91:cd:59:25:4c:65:e7:06:3f:97:d5:ac:58:04:14:
                    f2:a2:ff:f7:32:03:cf:4a:d4:59:93:31:49:f7:fa:
                    a3:82:3a:f3:e8:37:38:22:bd:ac:9b:34:09:70:3a:
                    ea:ce:60:4c:7b:06:4c:cc:77:26:38:e8:b1:04:5d:
                    40:28:b0:ef:9d:4e:0f:36:8b:bc:4e:12:f5:cf:c0:
                    8d:36:5f:57:6c:9a:e5:de:a2:8d:55:c0:b2:18:d2:
                    98:68:08:95:a9:21:36:b8:f7:f0:8f:2c:ff:da:36:
                    d8:c3:04:a1:87:af:d8:2a:b1:a5:06:2b:4a:6c:d9:
                    73:a1:14:b8:ef:25:5d:2e:0e:47:43:8b:52:ab:6a:
                    f2:12:66:ab:61:e5:0b:14:b2:13:76:d0:af:ac:35:
                    f1:d8:ab:e6:73:22:ca:cc:7a:fc:3b:e9:cc:6e:98:
                    68:51:19:4d:7a:77:bc:ae:bb:6b:82:2e:5d:9e:27:
                    28:35:20:e1:4d:8c:92:d8:99:5a:54:ad:83:22:92:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FD:9A:5B:92:E4:07:53:E1:EC:E8:A3:14:F3:19:08:2D:DF:36:C2
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/SP2aW5LkB1Ph7OijFPMZCC3fNsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:44:e8:f6:93:03:d8:f1:42:5a:91:81:15:e8:79:fd:e2:
         96:6e:58:a7:5d:5d:b8:b1:33:4a:c1:ff:06:e6:64:77:06:f0:
         78:00:42:4e:67:fc:22:e0:5c:c8:13:de:af:48:a2:a9:66:49:
         a6:e2:37:ee:1b:ce:19:cf:19:3b:89:34:8c:4d:f4:cd:2b:69:
         01:0c:a2:3f:84:cc:38:05:51:4f:2f:83:a7:99:c7:f8:6b:47:
         df:12:53:85:38:06:af:1d:35:5d:b6:20:a6:74:3d:00:5d:80:
         71:89:cc:f1:5e:70:9c:8c:00:b4:2b:19:9e:ca:85:a8:05:5c:
         ea:3a:c6:84:04:87:f4:a3:6d:21:10:03:0a:ea:ad:ee:ad:66:
         49:d2:56:37:a3:4f:b5:9c:c9:50:d4:5a:1f:c3:ba:ac:11:92:
         e6:18:52:b9:72:5d:df:47:80:54:b5:fe:51:59:92:07:21:5b:
         ea:d2:b3:ec:ea:65:81:41:ec:f8:2c:c2:49:8d:10:66:b1:88:
         5c:b3:c4:3b:99:7f:ce:92:d5:36:50:92:c6:9e:a1:aa:2e:e1:
         16:d1:6f:d9:9c:20:33:77:a1:73:84:eb:41:5e:8f:f6:1d:c4:
         7a:73:ca:1b:3c:7a:03:84:9b:55:96:13:b7:79:c6:06:88:9d:
         50:7e:69:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjDtzTtAC0V/5MOPGmjDbjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjMwNjE2MTAxOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZkOWE1YjkyZTQwNzUzZTFlY2U4YTMxNGYzMTkwODJkZGYzNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0FbxSaHcTzjrSr6PL/u98QHmGDS
GTVCCwXQJbsnBKLhPcrtxuH3MGYmVFKQubhrD4zYKSbcSlZY/rmRzVklTGXnBj+X
1axYBBTyov/3MgPPStRZkzFJ9/qjgjrz6Dc4Ir2smzQJcDrqzmBMewZMzHcmOOix
BF1AKLDvnU4PNou8ThL1z8CNNl9XbJrl3qKNVcCyGNKYaAiVqSE2uPfwjyz/2jbY
wwShh6/YKrGlBitKbNlzoRS47yVdLg5HQ4tSq2ryEmarYeULFLITdtCvrDXx2Kvm
cyLKzHr8O+nMbphoURlNene8rrtrgi5dnicoNSDhTYyS2JlaVK2DIpIdcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEj9mluS5AdT4ezooxTzGQgt3zbCMB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvU1AyYVc1TGtCMVBoN09pakZQTVpDQzNmTnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5
LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUV4MA0G
CSqGSIb3DQEBCwUAA4IBAQCHLUTo9pMD2PFCWpGBFeh5/eKWblinXV24sTNKwf8G
5mR3BvB4AEJOZ/wi4FzIE96vSKKpZkmm4jfuG84Zzxk7iTSMTfTNK2kBDKI/hMw4
BVFPL4Onmcf4a0ffElOFOAavHTVdtiCmdD0AXYBxiczxXnCcjAC0KxmeyoWoBVzq
OsaEBIf0o20hEAMK6q3urWZJ0lY3o0+1nMlQ1Fofw7qsEZLmGFK5cl3fR4BUtf5R
WZIHIVvq0rPs6mWBQez4LMJJjRBmsYhcs8Q7mX/OktU2UJLGnqGqLuEW0W/ZnCAz
d6FzhOtBXo/2HcR6c8obPHoDhJtVlhO3ecYGiJ1QfmnH
-----END CERTIFICATE-----