Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/f2QW57NLBOnO50V_lU58OMmy7pY.roa
File:                     f2QW57NLBOnO50V_lU58OMmy7pY.roa (raw, json)
Hash identifier:          vGEWlVx449jIjQvUS2pR3MqLxoVgoEw/dhp7euVadFE=
Subject key identifier:   7F:64:16:E7:B3:4B:04:E9:CE:E7:45:7F:95:4E:7C:38:C9:B2:EE:96
Certificate issuer:       /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial:       018A4083E1DE8EEBC57FFB230C86C21F1F4B
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/f2QW57NLBOnO50V_lU58OMmy7pY.roa
Signing time:             Tue 29 Aug 2023 08:58:19 +0000
ROA not before:           Tue 29 Aug 2023 08:58:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64449
IP address blocks:        2001:678:1d4::/48 maxlen: 48
                          2001:67c:d08::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:83:e1:de:8e:eb:c5:7f:fb:23:0c:86:c2:1f:1f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
        Validity
            Not Before: Aug 29 08:58:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f6416e7b34b04e9cee7457f954e7c38c9b2ee96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:b1:fc:e2:a5:76:3b:92:59:ce:dd:38:c0:
                    5f:17:ac:ee:1e:41:96:e3:b4:df:6f:60:d8:ad:8d:
                    d7:98:00:9b:f0:cc:55:d7:5d:88:3b:3f:81:ca:da:
                    56:2b:8d:e5:f8:db:ec:1f:91:7a:cb:7f:da:15:9b:
                    70:75:2f:be:8e:8f:e7:89:8b:63:5f:18:39:16:0f:
                    80:50:c4:8a:5a:ce:d0:28:d9:39:45:f3:a0:7a:e7:
                    6b:7d:b4:1a:53:4e:9b:c4:bf:dd:78:38:77:b5:bf:
                    50:f0:0c:a2:08:03:cb:ef:d6:1b:f1:5f:fd:63:bc:
                    84:09:fb:4a:84:c0:d9:65:64:d7:6c:de:aa:7a:7f:
                    95:94:ba:b4:dc:87:1d:ef:a1:7a:e5:44:8b:46:52:
                    f4:11:9e:b3:e4:37:7f:d6:db:5e:99:7e:5b:b1:7f:
                    31:1a:09:d6:9c:cc:f9:7d:04:34:8c:b9:db:b7:7e:
                    68:ab:9e:f2:d8:bd:48:26:fd:f3:4e:a6:6f:37:8c:
                    77:98:47:76:24:4e:54:85:d2:48:11:49:8f:95:6d:
                    ae:f4:34:0c:f2:f0:1c:4f:ce:d4:f2:09:4b:42:16:
                    7f:d6:a2:d4:05:3e:9b:9f:9e:a1:fc:5d:a4:7b:b0:
                    f8:05:05:b1:64:99:c2:af:fa:be:9f:ce:6a:2b:42:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:16:E7:B3:4B:04:E9:CE:E7:45:7F:95:4E:7C:38:C9:B2:EE:96
            X509v3 Authority Key Identifier:
                keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/f2QW57NLBOnO50V_lU58OMmy7pY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1d4::/48
                  2001:67c:d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:ee:d7:93:d8:45:28:6a:e0:1a:6f:b4:07:5b:58:a9:5c:
         03:28:fb:f2:d1:1e:06:1f:df:45:ef:5a:7b:67:09:68:f0:0f:
         9f:c3:14:2a:59:70:ef:96:89:a1:fa:e8:c9:34:df:5c:c2:4f:
         1c:64:a0:cb:c0:59:10:41:ac:fb:cc:c8:92:9f:ba:23:81:f3:
         fd:6c:ae:d2:f3:4a:f2:4a:84:c4:77:d1:33:56:0a:97:e9:17:
         bd:47:fa:09:1c:66:2e:f0:05:5d:9e:a5:f0:39:9b:ca:c9:8f:
         6b:4f:d1:3b:46:e9:73:d1:22:a3:9c:43:ad:f8:31:e9:95:02:
         62:2a:85:f6:6a:34:9d:28:26:26:d7:69:4e:00:3b:72:d8:c0:
         16:be:9e:c8:40:0c:2a:69:0e:cb:4a:1a:3b:d0:1b:18:eb:6f:
         31:c1:90:2b:53:ca:8c:af:f6:9b:fe:ab:d0:8b:ea:43:92:4c:
         19:e3:01:1a:98:fc:4a:0f:3a:aa:fd:a2:75:94:ba:9c:a2:7d:
         72:8a:3c:39:78:c0:c0:1b:25:9c:ee:fd:70:4a:36:97:15:1b:
         b1:97:66:31:8b:b1:e4:63:85:3e:cc:ca:30:8e:aa:a0:23:21:
         ef:64:52:63:e1:af:8e:b7:e7:3b:35:8e:36:bb:ff:6f:94:c4:
         85:8a:1e:a0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYpAg+HejuvFf/sjDIbCHx9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzQ4MGJhYzk3MjYwN2ZkYWI2MDU1OTNhODRiODM2NGM2
YWIxYjAwHhcNMjMwODI5MDg1ODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjY0MTZlN2IzNGIwNGU5Y2VlNzQ1N2Y5NTRlN2MzOGM5YjJlZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBGx/OKldjuSWc7dOMBfF6zuHkGW
47Tfb2DYrY3XmACb8MxV112IOz+BytpWK43l+NvsH5F6y3/aFZtwdS++jo/niYtj
Xxg5Fg+AUMSKWs7QKNk5RfOgeudrfbQaU06bxL/deDh3tb9Q8AyiCAPL79Yb8V/9
Y7yECftKhMDZZWTXbN6qen+VlLq03Icd76F65USLRlL0EZ6z5Dd/1ttemX5bsX8x
GgnWnMz5fQQ0jLnbt35oq57y2L1IJv3zTqZvN4x3mEd2JE5UhdJIEUmPlW2u9DQM
8vAcT87U8glLQhZ/1qLUBT6bn56h/F2ke7D4BQWxZJnCr/q+n85qK0LxiQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH9kFuezSwTpzudFf5VOfDjJsu6WMB8GA1UdIwQY
MBaAFNbEgLrJcmB/2rYFWTqEuDZMarGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMt
OTdjNzNiZTkzYmNkLzEvZjJRVzU3TkxCT25PNTBWX2xVNThPTW15N3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84OTE4ZmEtZjRhYi00YjE5LTk0NTMtOTdjNzNiZTkzYmNk
LzEvMXNTQXVzbHlZSF9hdGdWWk9vUzROa3hxc2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAHU
AwcAIAEGfA0IMA0GCSqGSIb3DQEBCwUAA4IBAQCW/O7Xk9hFKGrgGm+0B1tYqVwD
KPvy0R4GH99F71p7Zwlo8A+fwxQqWXDvlomh+ujJNN9cwk8cZKDLwFkQQaz7zMiS
n7ojgfP9bK7S80rySoTEd9EzVgqX6Re9R/oJHGYu8AVdnqXwOZvKyY9rT9E7Rulz
0SKjnEOt+DHplQJiKoX2ajSdKCYm12lOADty2MAWvp7IQAwqaQ7LSho70BsY628x
wZArU8qMr/ab/qvQi+pDkkwZ4wEamPxKDzqq/aJ1lLqcon1yijw5eMDAGyWc7v1w
SjaXFRuxl2Yxi7HkY4U+zMowjqqgIyHvZFJj4a+Ot+c7NY42u/9vlMSFih6g
-----END CERTIFICATE-----