Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/N8ulJOVUX_VEuVg1w6dgCtst9Y8.roa
File:                     N8ulJOVUX_VEuVg1w6dgCtst9Y8.roa (raw, json)
Hash identifier:          DlPBxkVw1+G4N4cdEZaQjG5Ez/AFEi6dzVCGX4/dR/I=
Subject key identifier:   37:CB:A5:24:E5:54:5F:F5:44:B9:58:35:C3:A7:60:0A:DB:2D:F5:8F
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       01894EDF1A60341BCF009729DF3E7B656FA4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/N8ulJOVUX_VEuVg1w6dgCtst9Y8.roa
Signing time:             Thu 13 Jul 2023 10:49:51 +0000
ROA not before:           Thu 13 Jul 2023 10:49:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21082
IP address blocks:        85.133.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4e:df:1a:60:34:1b:cf:00:97:29:df:3e:7b:65:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Jul 13 10:49:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37cba524e5545ff544b95835c3a7600adb2df58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:d4:ae:4e:9f:d7:5c:fb:36:e7:0e:40:99:
                    c3:32:6b:06:be:4a:23:dc:2f:fa:33:60:68:10:15:
                    63:74:9b:7b:db:f2:2c:5b:2b:8c:35:94:99:84:33:
                    b6:8b:95:52:74:a2:7c:f1:ae:6f:71:14:24:a2:36:
                    8d:ff:87:1d:f4:56:f9:76:ab:de:b2:09:9f:ca:6f:
                    23:54:60:d4:1b:96:d9:b0:18:ae:67:00:e3:56:ef:
                    15:dd:6c:62:a0:82:11:11:ed:7f:c5:d3:c4:fa:6c:
                    fd:37:e5:0f:ab:41:44:87:7a:06:8c:06:e6:e7:2a:
                    84:43:f4:f4:14:4f:69:99:78:6f:70:e7:cd:98:9c:
                    58:a9:ee:ca:1c:5e:be:ea:9c:72:c1:37:c8:f4:9b:
                    d6:26:08:32:4a:65:23:52:8e:21:24:94:6f:e2:3e:
                    f7:05:06:82:f9:e4:24:1b:67:65:39:79:b4:4b:2f:
                    6b:37:2c:98:4d:5f:11:9f:3d:bb:f2:02:13:e5:a5:
                    61:00:18:ff:27:d0:3a:91:5d:9b:17:e1:c0:99:00:
                    37:cf:bf:d8:23:f3:b9:16:4c:c6:98:d6:1f:29:03:
                    b2:f1:8d:d9:5f:ac:02:8d:01:32:5b:6e:71:ee:8b:
                    54:39:73:73:51:46:82:5f:81:d9:5e:67:fa:6e:ce:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CB:A5:24:E5:54:5F:F5:44:B9:58:35:C3:A7:60:0A:DB:2D:F5:8F
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/N8ulJOVUX_VEuVg1w6dgCtst9Y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:22:31:fd:c9:0f:48:69:44:13:26:01:4a:65:2e:0a:ab:e5:
         aa:8e:d4:dc:f9:c6:2e:af:ca:96:fc:f8:2e:7e:a4:58:0b:55:
         be:33:ad:af:2b:e0:3b:ec:2e:20:97:45:c3:e4:16:62:23:af:
         40:ed:66:2e:dd:e7:a2:ed:eb:28:8a:71:d6:b4:ed:63:f1:1c:
         c3:0b:dc:84:e4:ff:d6:03:60:8d:a6:46:b8:47:b5:3c:de:da:
         4a:62:cf:fa:de:10:09:4e:ab:05:0d:b6:e4:f8:ba:16:35:d7:
         8c:48:dc:c8:bd:28:9f:63:92:ed:d4:74:4b:97:5e:2f:5d:73:
         4f:fd:23:ee:3d:e2:7e:e6:d2:68:1b:33:eb:53:83:88:59:8c:
         67:aa:c6:a3:71:8d:0e:8c:f2:30:97:40:0d:21:d2:c7:88:43:
         3e:72:75:28:1f:3d:f3:9c:5e:49:17:1c:95:a3:96:5d:e5:82:
         57:a9:c0:ef:25:84:04:e2:ac:8e:e6:56:e0:e1:66:a5:f1:d3:
         71:6a:1d:f6:7c:60:81:49:4d:5a:ff:52:47:72:b8:22:a4:98:
         54:e2:d6:ff:d6:2c:08:bb:60:bb:cb:3a:d0:d6:af:f7:4d:e7:
         9c:45:59:49:26:9e:7e:bf:31:33:57:19:e7:10:ac:67:35:55:
         e4:bf:9e:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlO3xpgNBvPAJcp3z57ZW+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNzEzMTA0OTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2NiYTUyNGU1NTQ1ZmY1NDRiOTU4MzVjM2E3NjAwYWRiMmRmNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxvUrk6f11z7NucOQJnDMmsGvkoj
3C/6M2BoEBVjdJt72/IsWyuMNZSZhDO2i5VSdKJ88a5vcRQkojaN/4cd9Fb5dqve
sgmfym8jVGDUG5bZsBiuZwDjVu8V3WxioIIREe1/xdPE+mz9N+UPq0FEh3oGjAbm
5yqEQ/T0FE9pmXhvcOfNmJxYqe7KHF6+6pxywTfI9JvWJggySmUjUo4hJJRv4j73
BQaC+eQkG2dlOXm0Sy9rNyyYTV8Rnz278gIT5aVhABj/J9A6kV2bF+HAmQA3z7/Y
I/O5FkzGmNYfKQOy8Y3ZX6wCjQEyW25x7otUOXNzUUaCX4HZXmf6bs6N8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfLpSTlVF/1RLlYNcOnYArbLfWPMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvTjh1bEpPVlVYX1ZFdVZnMXc2ZGdDdHN0OVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXdMA0G
CSqGSIb3DQEBCwUAA4IBAQAHIjH9yQ9IaUQTJgFKZS4Kq+WqjtTc+cYur8qW/Pgu
fqRYC1W+M62vK+A77C4gl0XD5BZiI69A7WYu3eei7esoinHWtO1j8RzDC9yE5P/W
A2CNpka4R7U83tpKYs/63hAJTqsFDbbk+LoWNdeMSNzIvSifY5Lt1HRLl14vXXNP
/SPuPeJ+5tJoGzPrU4OIWYxnqsajcY0OjPIwl0ANIdLHiEM+cnUoHz3znF5JFxyV
o5Zd5YJXqcDvJYQE4qyO5lbg4Wal8dNxah32fGCBSU1a/1JHcrgipJhU4tb/1iwI
u2C7yzrQ1q/3TeecRVlJJp5+vzEzVxnnEKxnNVXkv55G
-----END CERTIFICATE-----