Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oOsgK7opHTfMAi853HZOSSovmfo.roa
File:                     oOsgK7opHTfMAi853HZOSSovmfo.roa (raw, json)
Hash identifier:          sA3DriwTe8a6sMNQ+BysHq2g7MFfybx14FVTSctCGWw=
Subject key identifier:   A0:EB:20:2B:BA:29:1D:37:CC:02:2F:39:DC:76:4E:49:2A:2F:99:FA
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       01877BDEA69DE6860EA0687749823F42F93D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oOsgK7opHTfMAi853HZOSSovmfo.roa
Signing time:             Thu 13 Apr 2023 18:26:41 +0000
ROA not before:           Thu 13 Apr 2023 18:26:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        85.133.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7b:de:a6:9d:e6:86:0e:a0:68:77:49:82:3f:42:f9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Apr 13 18:26:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0eb202bba291d37cc022f39dc764e492a2f99fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:b2:36:2b:a5:29:01:58:4d:4c:62:8a:92:
                    b1:5d:95:c6:01:69:9e:fe:06:61:60:8e:78:59:2b:
                    29:dd:4e:e1:14:9c:96:38:38:42:aa:1d:87:82:2f:
                    13:db:c4:18:bb:42:a8:1e:9d:69:e4:4c:6b:92:9e:
                    88:49:ac:2f:79:cb:5f:5b:51:71:d9:ed:6e:d3:d0:
                    da:1c:1c:30:6e:43:44:1d:80:11:76:75:5d:55:24:
                    1a:e1:ad:8f:90:8f:cb:cc:98:74:8f:f1:c5:30:8f:
                    6e:cb:d1:09:80:ad:ba:c9:09:95:7f:02:8e:78:c1:
                    e3:bf:6f:6a:7e:df:c1:cf:f3:ae:d0:08:ea:87:0d:
                    49:d0:38:9a:bb:6a:17:65:d8:75:71:d8:54:63:0b:
                    82:49:63:d1:90:89:f6:31:b3:99:7c:07:d0:55:65:
                    f0:65:e1:09:e1:78:f0:38:52:b8:3e:7e:8d:5b:70:
                    83:79:76:90:93:0d:0c:1c:7d:b0:92:db:1f:09:63:
                    db:96:c3:09:99:33:71:76:9b:76:0c:36:e9:d8:1f:
                    a5:3e:d4:a7:a8:15:e6:6d:60:b7:aa:c4:0d:d3:34:
                    da:8e:b6:49:0b:3e:e0:ce:b6:9b:ce:98:64:d6:ab:
                    b6:db:33:d8:1a:c6:1d:e1:fd:62:57:68:78:f2:ed:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:20:2B:BA:29:1D:37:CC:02:2F:39:DC:76:4E:49:2A:2F:99:FA
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/oOsgK7opHTfMAi853HZOSSovmfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:86:de:e0:b9:4f:3d:27:f9:8f:54:44:37:a9:62:fc:63:34:
         e4:aa:7c:d8:d7:61:a8:f6:5f:9f:04:31:f0:23:4d:c9:be:07:
         5c:b1:47:9c:94:1f:26:3b:16:08:43:25:f7:b7:a0:28:8b:8f:
         dd:f8:05:4d:7b:c4:c1:48:cb:28:fc:41:1e:f4:18:7e:6e:82:
         bd:1f:87:be:50:83:af:33:a7:a9:e5:e8:1d:7f:f5:08:ea:18:
         04:1b:45:fd:d5:2d:a9:60:c4:a3:1c:ea:d4:03:e5:2d:55:55:
         3b:5a:85:00:ae:eb:e8:5a:a0:39:4b:37:a0:5d:8d:70:f0:43:
         cc:0c:32:04:5b:df:ed:7e:d0:21:51:ff:96:71:60:d2:78:d4:
         cf:0a:24:b1:04:fe:24:38:9f:2c:3e:f0:74:30:09:0c:91:72:
         33:45:8c:ca:a7:b9:41:4d:1d:48:4f:62:51:6f:4f:06:37:77:
         20:2c:b9:35:a6:0d:1d:8c:89:d0:8f:1f:75:2f:ec:85:10:d9:
         56:da:01:b5:a5:fc:0d:f6:2b:80:15:37:f3:63:7d:66:1d:77:
         e3:bf:c9:77:1d:69:e6:07:3d:da:98:5b:9d:81:70:74:73:78:
         35:aa:ab:88:dd:75:ac:e6:da:44:4e:7c:a0:d3:99:ce:d4:25:
         14:19:8f:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd73qad5oYOoGh3SYI/Qvk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNDEzMTgyNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGViMjAyYmJhMjkxZDM3Y2MwMjJmMzlkYzc2NGU0OTJhMmY5OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8SyNiulKQFYTUxiipKxXZXGAWme
/gZhYI54WSsp3U7hFJyWODhCqh2Hgi8T28QYu0KoHp1p5Exrkp6ISawvectfW1Fx
2e1u09DaHBwwbkNEHYARdnVdVSQa4a2PkI/LzJh0j/HFMI9uy9EJgK26yQmVfwKO
eMHjv29qft/Bz/Ou0Ajqhw1J0Diau2oXZdh1cdhUYwuCSWPRkIn2MbOZfAfQVWXw
ZeEJ4XjwOFK4Pn6NW3CDeXaQkw0MHH2wktsfCWPblsMJmTNxdpt2DDbp2B+lPtSn
qBXmbWC3qsQN0zTajrZJCz7gzrabzphk1qu22zPYGsYd4f1iV2h48u1hewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDrICu6KR03zAIvOdx2TkkqL5n6MB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvb09zZ0s3b3BIVGZNQWk4NTNIWk9TU292bWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYWSMA0G
CSqGSIb3DQEBCwUAA4IBAQClht7guU89J/mPVEQ3qWL8YzTkqnzY12Go9l+fBDHw
I03JvgdcsUeclB8mOxYIQyX3t6Aoi4/d+AVNe8TBSMso/EEe9Bh+boK9H4e+UIOv
M6ep5egdf/UI6hgEG0X91S2pYMSjHOrUA+UtVVU7WoUAruvoWqA5SzegXY1w8EPM
DDIEW9/tftAhUf+WcWDSeNTPCiSxBP4kOJ8sPvB0MAkMkXIzRYzKp7lBTR1IT2JR
b08GN3cgLLk1pg0djInQjx91L+yFENlW2gG1pfwN9iuAFTfzY31mHXfjv8l3HWnm
Bz3amFudgXB0c3g1qquI3XWs5tpETnyg05nO1CUUGY9x
-----END CERTIFICATE-----