Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/xe7Tv-jFx1n3dEipojhfmvnopyU.roa
File:                     xe7Tv-jFx1n3dEipojhfmvnopyU.roa (raw, json)
Hash identifier:          pMVws8aUrMUtiBkteK50nOErV3pzzyto26xWQ4p3lfI=
Subject key identifier:   C5:EE:D3:BF:E8:C5:C7:59:F7:74:48:A9:A2:38:5F:9A:F9:E8:A7:25
Certificate issuer:       /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial:       01856B77AA64717EFDB2F3AD06DCA8A55878
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/xe7Tv-jFx1n3dEipojhfmvnopyU.roa
Signing time:             Sun 01 Jan 2023 03:54:42 +0000
ROA not before:           Sun 01 Jan 2023 03:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209566
IP address blocks:        194.62.129.0/24 maxlen: 24
                          2a0d:8c40:209::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:77:aa:64:71:7e:fd:b2:f3:ad:06:dc:a8:a5:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
        Validity
            Not Before: Jan  1 03:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5eed3bfe8c5c759f77448a9a2385f9af9e8a725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:ab:02:1e:11:65:61:98:bd:f4:a8:66:98:
                    39:1b:8e:dc:52:53:f1:dc:69:07:57:b2:b3:93:bb:
                    18:1b:ee:74:ab:24:d9:73:a5:3b:df:54:4b:38:8e:
                    c6:66:e4:34:2f:94:20:a0:b4:7f:04:4b:92:79:9b:
                    10:4d:19:30:5f:9d:72:45:7b:6f:af:02:4b:8f:34:
                    60:3b:77:e0:05:36:a5:c2:f6:d7:39:09:c9:38:ac:
                    d3:e0:fa:bd:0e:bc:ad:34:a0:75:d9:fe:2f:c9:be:
                    5c:4a:2f:12:8f:5d:55:b8:85:0d:d0:05:a6:99:ec:
                    de:7d:f9:0a:7f:12:98:eb:fa:6d:46:80:aa:ae:9b:
                    63:c5:b0:ae:97:03:36:de:89:3e:5c:cf:bd:b8:4b:
                    ba:cb:11:5a:71:74:3e:f0:3f:92:5d:6e:62:13:44:
                    a5:dc:7a:87:02:08:b6:97:3d:d4:bc:92:4b:43:2b:
                    49:1b:29:14:3e:6d:bc:de:27:1c:8c:02:ee:de:e4:
                    0b:4d:87:3e:52:85:0f:1d:74:1c:1b:32:05:51:9c:
                    b5:b3:d2:d5:46:cf:18:a4:97:b0:ec:88:71:c7:19:
                    08:eb:ab:6a:ca:13:3d:cb:13:ec:82:05:2e:aa:5b:
                    0b:31:b9:83:65:5b:6f:28:43:fb:48:ba:3d:fa:f7:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:D3:BF:E8:C5:C7:59:F7:74:48:A9:A2:38:5F:9A:F9:E8:A7:25
            X509v3 Authority Key Identifier:
                keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/xe7Tv-jFx1n3dEipojhfmvnopyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.129.0/24
                IPv6:
                  2a0d:8c40:209::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:90:5c:62:b8:09:d4:31:93:a6:ed:0a:81:40:2a:37:46:c3:
         3b:0c:2c:38:a9:47:a9:8f:80:8a:6e:cc:3a:93:f1:d6:1c:d2:
         3d:e1:85:9a:84:39:f9:c1:35:c5:90:3c:fd:a8:43:f1:0f:7d:
         c1:b8:6b:e7:ac:c7:b2:e3:8e:71:03:57:42:99:18:0d:ca:30:
         06:6c:81:f5:96:cc:cf:f9:6d:45:cc:15:1b:4f:ca:d7:5f:88:
         8d:86:2e:fc:75:2d:6b:54:a6:25:8d:bc:5c:8d:d4:07:34:d3:
         ee:98:2a:c4:a2:9a:68:83:a0:30:80:eb:38:8c:dd:f2:fc:b4:
         fa:b7:ea:6c:88:8c:30:99:d4:6f:f8:fd:5e:e7:13:2d:18:37:
         6e:18:01:f5:6c:ae:e7:13:71:f7:03:6c:e3:51:84:ac:21:8d:
         ee:1c:dc:9a:ce:2c:33:bf:78:c2:e0:02:a7:ae:2d:06:d7:fc:
         50:fd:e3:7c:b4:a2:f8:5a:82:6a:fc:96:d3:72:5f:53:ca:db:
         bb:5a:e2:ba:37:16:62:c7:8b:33:50:fa:06:18:d8:49:ab:0e:
         a7:83:43:a7:96:cd:40:01:8b:6d:08:96:2e:70:a8:59:cd:27:
         a8:b3:b1:ce:c7:3d:db:0f:10:fe:76:5a:54:9b:fc:27:5c:bf:
         a0:37:61:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVrd6pkcX79svOtBtyopVh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjAzNTcwNzIwMmQ0MDEzYTQ0NzliZTUxMTJkN2ZhMjI3
YjcyNzUwHhcNMjMwMTAxMDM1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWVlZDNiZmU4YzVjNzU5Zjc3NDQ4YTlhMjM4NWY5YWY5ZThhNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaKrAh4RZWGYvfSoZpg5G47cUlPx
3GkHV7Kzk7sYG+50qyTZc6U731RLOI7GZuQ0L5QgoLR/BEuSeZsQTRkwX51yRXtv
rwJLjzRgO3fgBTalwvbXOQnJOKzT4Pq9DrytNKB12f4vyb5cSi8Sj11VuIUN0AWm
mezeffkKfxKY6/ptRoCqrptjxbCulwM23ok+XM+9uEu6yxFacXQ+8D+SXW5iE0Sl
3HqHAgi2lz3UvJJLQytJGykUPm283iccjALu3uQLTYc+UoUPHXQcGzIFUZy1s9LV
Rs8YpJew7IhxxxkI66tqyhM9yxPsggUuqlsLMbmDZVtvKEP7SLo9+vdczwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMXu07/oxcdZ93RIqaI4X5r56KclMB8GA1UdIwQY
MBaAFCywNXByAtQBOkR5vlES1/oie3J1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEt
MDYzMDhhNDQ4NTZkLzEveGU3VHYtakZ4MW4zZEVpcG9qaGZtdm5vcHlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEtMDYzMDhhNDQ4NTZk
LzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj6BMA8E
AgACMAkDBwAqDYxAAgkwDQYJKoZIhvcNAQELBQADggEBABWQXGK4CdQxk6btCoFA
KjdGwzsMLDipR6mPgIpuzDqT8dYc0j3hhZqEOfnBNcWQPP2oQ/EPfcG4a+esx7Lj
jnEDV0KZGA3KMAZsgfWWzM/5bUXMFRtPytdfiI2GLvx1LWtUpiWNvFyN1Ac00+6Y
KsSimmiDoDCA6ziM3fL8tPq36myIjDCZ1G/4/V7nEy0YN24YAfVsrucTcfcDbONR
hKwhje4c3JrOLDO/eMLgAqeuLQbX/FD943y0ovhagmr8ltNyX1PK27ta4ro3FmLH
izNQ+gYY2EmrDqeDQ6eWzUABi20Ili5wqFnNJ6izsc7HPdsPEP52WlSb/Cdcv6A3
Yck=
-----END CERTIFICATE-----