Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa
File:                     gw2Yu5GTBcjmop7UX00AbSmQjHY.roa (raw, json)
Hash identifier:          rp20o5L5ZZCbwPdbh6rRG3zhPY27mxOjmY7YdFVgvZw=
Subject key identifier:   83:0D:98:BB:91:93:05:C8:E6:A2:9E:D4:5F:4D:00:6D:29:90:8C:76
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       018670E54017EB30D21E3F4456143A4E3895
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa
Signing time:             Mon 20 Feb 2023 22:15:17 +0000
ROA not before:           Mon 20 Feb 2023 22:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        14.102.228.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:70:e5:40:17:eb:30:d2:1e:3f:44:56:14:3a:4e:38:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Feb 20 22:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=830d98bb919305c8e6a29ed45f4d006d29908c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:0e:22:f2:81:82:1c:14:d0:02:68:0a:cc:
                    0a:f1:45:75:d0:e6:33:61:28:04:62:ad:66:cd:a3:
                    c7:c7:94:2c:3e:4c:ec:7a:37:5d:fc:68:b0:f9:3d:
                    c4:b9:ee:bd:27:99:23:d0:dc:7b:d8:7b:d5:87:3c:
                    02:b5:c2:f4:16:8c:50:2a:af:5a:eb:30:0c:e3:bc:
                    ac:b8:e6:11:84:72:96:0f:80:50:f2:ed:c7:fe:ec:
                    8e:0a:ba:9c:16:e1:6a:c2:6a:6c:c7:3a:8c:ab:84:
                    c3:35:45:c9:65:f4:11:30:49:f2:64:09:16:62:43:
                    26:05:19:15:5f:6e:80:7a:f5:a1:09:de:49:0a:d0:
                    05:88:38:04:cb:df:a5:49:6f:51:77:87:e7:7e:49:
                    8c:8b:f9:35:73:ed:ef:f1:e0:37:7a:1d:67:67:05:
                    ac:b2:58:d4:0c:f0:6a:20:94:26:0b:3c:85:3d:84:
                    9b:c1:d6:66:cf:4f:26:8e:8a:44:39:68:23:7b:39:
                    21:6d:db:75:ca:16:1f:e7:ab:bd:fb:96:14:29:f2:
                    03:2e:a1:58:a0:b0:f7:c0:5d:da:bc:72:87:b9:c4:
                    98:50:31:c5:2b:94:a7:d1:24:c6:1a:5d:68:44:7c:
                    88:d8:66:7e:60:ff:1e:fb:52:e1:c5:14:c1:ea:ca:
                    d0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0D:98:BB:91:93:05:C8:E6:A2:9E:D4:5F:4D:00:6D:29:90:8C:76
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:99:52:f5:44:ce:9f:0f:86:27:f2:30:64:87:f9:10:12:
         98:02:bf:07:91:e7:f3:39:8b:bd:d6:05:1e:a3:b9:49:1d:90:
         dd:9d:49:49:df:2a:18:51:0b:17:ae:bf:cd:5e:b9:db:90:c9:
         9a:8b:d6:84:34:ef:88:23:ca:f9:4b:55:60:8b:08:49:d2:21:
         3c:fa:e2:39:a7:9c:3c:85:a4:15:bf:fd:83:67:9d:35:e0:8c:
         54:d7:7a:bd:b2:6d:c0:54:4d:1c:4f:3a:33:78:34:e7:cc:93:
         e8:83:09:b7:2d:6c:19:65:b4:1a:19:60:6e:38:e9:92:a8:22:
         d7:c5:e8:71:bf:48:0c:91:a6:dd:c8:0c:5e:75:a8:e9:d4:8c:
         e3:6e:f9:73:86:3d:51:18:88:91:af:fc:ba:b9:4b:b6:c3:ac:
         db:27:57:9d:20:33:70:06:0f:e5:89:82:70:8e:e3:d6:90:16:
         92:0e:29:75:94:9d:17:12:85:44:6f:7c:cc:3e:97:49:2d:4a:
         38:6d:3b:d1:4a:7b:a7:b0:82:14:1e:54:9d:27:ad:94:c3:72:
         63:cc:25:fa:83:6e:e6:74:6a:8d:ed:e1:fa:29:e3:4e:eb:ce:
         b9:5c:b2:e3:bd:c6:c5:29:a4:fe:90:02:d6:89:8c:a1:95:f8:
         70:b7:cb:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZw5UAX6zDSHj9EVhQ6TjiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwMjIwMjIxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzBkOThiYjkxOTMwNWM4ZTZhMjllZDQ1ZjRkMDA2ZDI5OTA4Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+EOIvKBghwU0AJoCswK8UV10OYz
YSgEYq1mzaPHx5QsPkzsejdd/Giw+T3Eue69J5kj0Nx72HvVhzwCtcL0FoxQKq9a
6zAM47ysuOYRhHKWD4BQ8u3H/uyOCrqcFuFqwmpsxzqMq4TDNUXJZfQRMEnyZAkW
YkMmBRkVX26AevWhCd5JCtAFiDgEy9+lSW9Rd4fnfkmMi/k1c+3v8eA3eh1nZwWs
sljUDPBqIJQmCzyFPYSbwdZmz08mjopEOWgjezkhbdt1yhYf56u9+5YUKfIDLqFY
oLD3wF3avHKHucSYUDHFK5Sn0STGGl1oRHyI2GZ+YP8e+1LhxRTB6srQSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMNmLuRkwXI5qKe1F9NAG0pkIx2MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvZ3cyWXU1R1RCY2ptb3A3VVgwMEFiU21RakhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCDmbkMA0G
CSqGSIb3DQEBCwUAA4IBAQCcH5lS9UTOnw+GJ/IwZIf5EBKYAr8HkefzOYu91gUe
o7lJHZDdnUlJ3yoYUQsXrr/NXrnbkMmai9aENO+II8r5S1VgiwhJ0iE8+uI5p5w8
haQVv/2DZ5014IxU13q9sm3AVE0cTzozeDTnzJPogwm3LWwZZbQaGWBuOOmSqCLX
xehxv0gMkabdyAxedajp1Izjbvlzhj1RGIiRr/y6uUu2w6zbJ1edIDNwBg/liYJw
juPWkBaSDil1lJ0XEoVEb3zMPpdJLUo4bTvRSnunsIIUHlSdJ62Uw3JjzCX6g27m
dGqN7eH6KeNO6865XLLjvcbFKaT+kALWiYyhlfhwt8s9
-----END CERTIFICATE-----