Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/p2D6ODWfe37tQ_t0c_-OE-mtaB4.roa
File:                     p2D6ODWfe37tQ_t0c_-OE-mtaB4.roa (raw, json)
Hash identifier:          k9jG9//PqWgAdMzcRpGyXu5b76BW+hw5lNEnT3PxPMs=
Subject key identifier:   A7:60:FA:38:35:9F:7B:7E:ED:43:FB:74:73:FF:8E:13:E9:AD:68:1E
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       01856C6F19E03B594EF845EDC3F93F679750
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/p2D6ODWfe37tQ_t0c_-OE-mtaB4.roa
Signing time:             Sun 01 Jan 2023 08:24:58 +0000
ROA not before:           Sun 01 Jan 2023 08:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3177
IP address blocks:        185.129.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6f:19:e0:3b:59:4e:f8:45:ed:c3:f9:3f:67:97:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jan  1 08:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a760fa38359f7b7eed43fb7473ff8e13e9ad681e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:89:e3:46:c1:13:fd:f1:7d:ed:64:bb:ad:9e:
                    1e:c5:cf:8c:9b:1f:94:68:b2:15:d2:1a:7d:d1:d0:
                    79:d7:1f:1d:0b:a4:32:cf:23:66:a5:44:85:ec:cf:
                    a6:05:2d:dc:61:4f:50:23:6a:94:ae:66:ed:ee:ee:
                    08:d5:ec:c3:e9:19:76:a2:95:3b:a9:76:67:ca:d8:
                    10:67:36:4e:de:42:f6:0e:3d:7e:5d:bb:31:04:08:
                    c2:0a:a2:ac:8e:e9:c2:f6:a2:f5:5d:dd:41:f8:f2:
                    73:e9:cf:78:a7:87:af:3e:26:f8:ae:62:a5:4a:a9:
                    c3:ef:aa:81:b1:e7:48:1d:a5:e9:8b:86:a6:9b:9d:
                    70:3f:4a:76:52:bb:1e:a1:b8:35:90:32:f3:fd:67:
                    c2:f2:7c:b4:79:3b:ff:80:b1:09:5e:59:e7:1f:83:
                    ca:db:2a:4a:77:f0:14:3d:7e:24:45:ff:c7:11:61:
                    9e:47:7d:dd:69:4c:4a:a9:1f:07:e1:9f:e7:1a:e9:
                    1b:94:16:17:d1:7b:1b:95:c3:15:e1:27:28:01:a9:
                    2c:ce:d3:f0:fb:61:ed:9d:bf:a1:d3:6f:22:7f:75:
                    2b:fd:4f:87:70:8d:fc:bc:5c:fd:6c:bf:30:bf:b1:
                    c8:d0:f6:ce:c2:b6:3a:ca:6d:a3:3f:80:89:5c:45:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:FA:38:35:9F:7B:7E:ED:43:FB:74:73:FF:8E:13:E9:AD:68:1E
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/p2D6ODWfe37tQ_t0c_-OE-mtaB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:11:3a:4d:f6:4d:66:d8:b6:dc:95:5b:e2:e9:ca:56:43:
         43:a5:a6:1c:f0:9f:21:d8:c3:13:1b:20:e4:a2:17:ee:28:0a:
         26:50:fa:c5:e0:15:e6:b1:f4:07:31:c0:c1:92:0f:7b:5f:de:
         c6:6d:33:72:7c:e5:a0:db:90:75:81:28:36:65:9f:23:2d:bb:
         46:27:54:c0:c5:eb:9e:53:75:a0:c7:5f:1d:9c:a6:8b:8f:86:
         2f:49:d5:96:bc:74:71:1c:ba:24:a3:cd:90:67:f6:8d:ba:cb:
         f5:f2:b7:e1:4d:8a:88:9b:ab:2c:80:a1:fe:95:82:87:80:66:
         dc:32:a3:13:73:da:df:d3:dc:8f:62:38:37:56:e7:4b:48:ac:
         96:25:24:4d:b8:d7:6b:28:a2:e6:b5:e9:7a:9c:93:7f:b2:a4:
         1d:d6:82:45:a9:63:20:2c:eb:77:99:ea:d1:da:0a:96:82:0d:
         20:5f:94:7c:78:77:a7:99:d6:46:67:53:e2:26:a9:e9:75:68:
         73:2b:6f:3c:22:7c:bc:c1:8b:3f:6c:56:90:8d:cb:d0:f5:0e:
         6b:4e:3b:3c:f4:64:55:79:39:2f:ba:43:db:7e:f1:e3:d4:0c:
         8a:4e:af:51:a3:83:cf:98:a5:d4:2a:ff:40:2a:3e:0e:a2:6e:
         18:df:79:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbxngO1lO+EXtw/k/Z5dQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjMwMTAxMDgyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzYwZmEzODM1OWY3YjdlZWQ0M2ZiNzQ3M2ZmOGUxM2U5YWQ2ODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYnjRsET/fF97WS7rZ4exc+Mmx+U
aLIV0hp90dB51x8dC6QyzyNmpUSF7M+mBS3cYU9QI2qUrmbt7u4I1ezD6Rl2opU7
qXZnytgQZzZO3kL2Dj1+XbsxBAjCCqKsjunC9qL1Xd1B+PJz6c94p4evPib4rmKl
SqnD76qBsedIHaXpi4amm51wP0p2Urseobg1kDLz/WfC8ny0eTv/gLEJXlnnH4PK
2ypKd/AUPX4kRf/HEWGeR33daUxKqR8H4Z/nGukblBYX0XsblcMV4ScoAaksztPw
+2Htnb+h028if3Ur/U+HcI38vFz9bL8wv7HI0PbOwrY6ym2jP4CJXEUpxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdg+jg1n3t+7UP7dHP/jhPprWgeMB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvcDJENk9EV2ZlMzd0UV90MGNfLU9FLW10YUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYG4MA0G
CSqGSIb3DQEBCwUAA4IBAQBprRE6TfZNZti23JVb4unKVkNDpaYc8J8h2MMTGyDk
ohfuKAomUPrF4BXmsfQHMcDBkg97X97GbTNyfOWg25B1gSg2ZZ8jLbtGJ1TAxeue
U3Wgx18dnKaLj4YvSdWWvHRxHLoko82QZ/aNusv18rfhTYqIm6ssgKH+lYKHgGbc
MqMTc9rf09yPYjg3VudLSKyWJSRNuNdrKKLmtel6nJN/sqQd1oJFqWMgLOt3merR
2gqWgg0gX5R8eHenmdZGZ1PiJqnpdWhzK288Iny8wYs/bFaQjcvQ9Q5rTjs89GRV
eTkvukPbfvHj1AyKTq9Ro4PPmKXUKv9AKj4Oom4Y33l7
-----END CERTIFICATE-----