Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa
File:                     xVU-upMRFCGYFNTgw9SRm2JMRWI.roa (raw, json)
Hash identifier:          cxcVrIGNNTBPqOumybfBtNrGc5wS+BFxJC+Y0+aC+rg=
Subject key identifier:   C5:55:3E:BA:93:11:14:21:98:14:D4:E0:C3:D4:91:9B:62:4C:45:62
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0189067414FA4C4510E1D2F55F892B29C2F0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa
Signing time:             Thu 29 Jun 2023 09:20:18 +0000
ROA not before:           Thu 29 Jun 2023 09:20:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207084
IP address blocks:        85.133.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:06:74:14:fa:4c:45:10:e1:d2:f5:5f:89:2b:29:c2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Jun 29 09:20:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5553eba931114219814d4e0c3d4919b624c4562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:7c:d8:82:6a:48:b5:48:6a:ad:04:19:74:
                    06:d3:7b:75:8b:79:04:38:85:b4:09:2a:d1:5a:98:
                    40:af:8f:6b:77:44:f8:96:75:c3:2b:2b:6b:5f:d9:
                    ea:26:d0:36:f4:8e:e5:ed:c2:83:f4:e9:7c:cb:30:
                    64:ba:75:0c:67:e5:24:84:77:91:42:43:b7:08:91:
                    e7:1f:74:e1:e5:30:79:d0:1f:52:76:f6:4d:86:df:
                    9f:87:9e:59:53:87:d3:a9:45:23:b0:72:43:13:25:
                    33:e6:58:5e:ac:40:67:bd:c4:86:ab:d4:cb:bb:b8:
                    c6:47:44:3d:c0:62:ec:0b:e0:88:f3:7c:de:3a:ff:
                    10:52:cc:3f:4f:98:0f:41:53:d7:d5:92:a6:cd:55:
                    c0:06:54:d6:24:f5:3a:2c:34:a1:ca:e1:f7:11:e6:
                    d4:7d:ed:fb:bd:f9:56:11:50:36:4d:b1:58:0b:65:
                    5a:5a:2e:8e:8e:a7:37:9e:16:7a:6e:c5:0d:b6:00:
                    7b:61:07:b3:6f:5e:a1:b9:50:4a:3d:3c:26:31:ee:
                    47:43:47:c5:dd:52:c2:70:3f:93:c3:17:35:86:04:
                    d8:b4:ef:00:39:9b:ac:75:8c:1d:bd:e7:c4:f2:9c:
                    86:9e:8e:1f:a8:03:a2:4c:ce:bf:15:be:ed:fd:6b:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:3E:BA:93:11:14:21:98:14:D4:E0:C3:D4:91:9B:62:4C:45:62
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:67:98:b7:50:d1:81:f6:16:0d:7d:26:78:ac:54:7c:e1:03:
         94:f3:6d:cf:68:24:3e:ca:32:df:36:c0:bf:fd:38:80:70:01:
         c5:58:1f:a7:50:6f:c1:6f:f2:2f:1e:a8:e7:d8:86:72:d6:37:
         f4:b8:74:7c:a0:18:da:ba:2c:0f:ad:db:26:0a:a2:88:1c:aa:
         0d:44:a7:97:22:c3:f0:2e:8c:11:a6:33:5d:07:60:50:2d:4c:
         f4:d1:97:02:82:12:2c:ca:de:6c:e2:f3:4c:ad:be:5e:7f:fa:
         9d:98:da:16:5e:cb:7c:8c:77:90:d8:e1:43:cb:c9:76:e6:d0:
         67:72:2a:ad:eb:50:23:e4:36:0e:a0:fd:9a:54:62:e8:00:c2:
         b9:0a:fc:3e:bb:2b:92:0a:4f:dc:87:39:e6:69:97:f8:99:ad:
         2b:61:0d:f7:22:88:2b:ea:a7:e4:a7:f8:03:47:6a:08:f9:cc:
         8f:08:73:b9:39:38:29:b3:6a:1e:fa:31:58:b5:33:7a:54:e0:
         2b:12:31:5c:81:8f:14:f1:8d:9e:0e:e8:42:03:de:80:de:2b:
         d3:df:e2:dd:7b:8c:ab:a6:6b:ad:d8:f3:d4:ef:77:45:bb:0c:
         ce:af:47:0e:8c:46:bd:de:f2:81:1f:30:19:0b:b9:a9:19:64:
         25:86:d2:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkGdBT6TEUQ4dL1X4krKcLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjMwNjI5MDkyMDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTU1M2ViYTkzMTExNDIxOTgxNGQ0ZTBjM2Q0OTE5YjYyNGM0NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pR82IJqSLVIaq0EGXQG03t1i3kE
OIW0CSrRWphAr49rd0T4lnXDKytrX9nqJtA29I7l7cKD9Ol8yzBkunUMZ+UkhHeR
QkO3CJHnH3Th5TB50B9SdvZNht+fh55ZU4fTqUUjsHJDEyUz5lherEBnvcSGq9TL
u7jGR0Q9wGLsC+CI83zeOv8QUsw/T5gPQVPX1ZKmzVXABlTWJPU6LDShyuH3EebU
fe37vflWEVA2TbFYC2VaWi6Ojqc3nhZ6bsUNtgB7YQezb16huVBKPTwmMe5HQ0fF
3VLCcD+Twxc1hgTYtO8AOZusdYwdvefE8pyGno4fqAOiTM6/Fb7t/WvMqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMVVPrqTERQhmBTU4MPUkZtiTEViMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEveFZVLXVwTVJGQ0dZRk5UZ3c5U1JtMkpNUldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXHMA0G
CSqGSIb3DQEBCwUAA4IBAQBDZ5i3UNGB9hYNfSZ4rFR84QOU823PaCQ+yjLfNsC/
/TiAcAHFWB+nUG/Bb/IvHqjn2IZy1jf0uHR8oBjauiwPrdsmCqKIHKoNRKeXIsPw
LowRpjNdB2BQLUz00ZcCghIsyt5s4vNMrb5ef/qdmNoWXst8jHeQ2OFDy8l25tBn
ciqt61Aj5DYOoP2aVGLoAMK5Cvw+uyuSCk/chznmaZf4ma0rYQ33Iogr6qfkp/gD
R2oI+cyPCHO5OTgps2oe+jFYtTN6VOArEjFcgY8U8Y2eDuhCA96A3ivT3+Lde4yr
pmut2PPU73dFuwzOr0cOjEa93vKBHzAZC7mpGWQlhtLa
-----END CERTIFICATE-----