Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/056TBFv1N07GV4DE6kl_B1g9s3Y.roa
File:                     056TBFv1N07GV4DE6kl_B1g9s3Y.roa (raw, json)
Hash identifier:          9JwYpFs8j5ULnYIkjt9ugzVIOIEvA+pC+B4QkqIf5/w=
Subject key identifier:   D3:9E:93:04:5B:F5:37:4E:C6:57:80:C4:EA:49:7F:07:58:3D:B3:76
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       01893A6A4780A064BEF7EADD4BF8976194CE
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/056TBFv1N07GV4DE6kl_B1g9s3Y.roa
Signing time:             Sun 09 Jul 2023 11:29:50 +0000
ROA not before:           Sun 09 Jul 2023 11:29:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8895
IP address blocks:        212.138.115.0/24 maxlen: 24
                          2001:1490:106::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3a:6a:47:80:a0:64:be:f7:ea:dd:4b:f8:97:61:94:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Jul  9 11:29:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d39e93045bf5374ec65780c4ea497f07583db376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:a5:4d:7c:6e:ef:ad:f2:4d:95:38:45:8d:
                    07:62:24:d8:ac:da:75:89:f8:c1:fa:62:bf:53:df:
                    21:40:d1:a2:bd:e8:16:d9:c4:31:0a:73:38:2b:8b:
                    7a:3e:d8:97:f3:0e:b3:76:ab:c0:44:48:9c:3b:ee:
                    ad:4e:4e:c4:d1:16:c1:31:20:8e:78:d4:9a:57:05:
                    16:d4:33:ff:0f:ab:90:3f:f8:3e:6f:a5:bc:32:f6:
                    7a:c3:5f:eb:6f:0c:fb:6c:3b:fb:06:ce:9e:91:09:
                    9d:e8:3b:46:05:cc:3c:1c:39:72:90:03:7f:25:cd:
                    97:0d:15:5d:6c:5f:c5:61:9c:7d:0b:f1:4a:a0:c5:
                    be:37:a0:5a:b7:9e:71:8c:60:f2:d6:1d:41:3c:d0:
                    91:15:32:ab:be:1c:d3:f3:49:03:a7:5e:45:6a:95:
                    6c:86:e7:2f:5a:7c:c6:44:11:e7:b8:b1:95:23:49:
                    d6:7e:be:40:72:80:5e:da:85:89:bf:73:af:87:5d:
                    d6:d4:aa:74:24:3b:53:c1:ea:6a:93:ec:34:f9:5e:
                    6e:5a:45:d7:ff:27:31:f0:52:4b:d8:4d:ed:52:13:
                    0b:5b:6a:4b:a6:74:d9:c8:2e:05:1d:ad:7a:6b:ec:
                    71:7a:bd:da:c6:88:8e:61:11:b3:a9:88:15:9f:08:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:93:04:5B:F5:37:4E:C6:57:80:C4:EA:49:7F:07:58:3D:B3:76
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/056TBFv1N07GV4DE6kl_B1g9s3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.138.115.0/24
                IPv6:
                  2001:1490:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:74:8f:93:2a:3e:ad:80:b7:f1:cb:86:36:d9:53:39:ab:
         4c:ba:ce:1a:ed:30:34:a9:1b:46:9e:60:e5:f9:1d:e0:3d:70:
         6e:aa:9b:d4:92:26:83:d8:ca:eb:68:f0:b5:48:b3:58:8d:07:
         c3:2b:62:4b:2c:d3:05:ba:77:c9:ea:6e:31:e4:7e:b9:5d:78:
         32:64:ab:42:cb:cb:09:05:6f:e2:78:1d:9b:c5:6d:11:3e:f7:
         d5:75:68:36:71:a8:6a:82:f8:0a:2a:f8:f0:6e:fc:4c:8a:ff:
         69:44:e4:57:77:d4:d4:36:04:11:01:20:36:77:cf:57:67:cd:
         86:fc:ad:a5:f1:a2:c8:40:bb:95:20:2a:03:8a:b8:c9:f3:f9:
         1e:a7:b6:65:41:26:d0:18:44:7c:d5:ec:59:fd:dd:88:2c:20:
         b2:5b:7d:54:02:7d:38:f3:0b:71:eb:2f:c9:af:3d:6e:46:f3:
         1e:5f:32:03:67:4f:10:f2:df:36:55:06:dd:57:9a:e2:75:c1:
         d0:ca:4a:18:e2:a3:13:67:1c:47:95:21:56:d9:9b:0b:44:c4:
         32:6d:c7:5e:96:5c:72:47:8f:ee:c4:99:a2:06:6c:b5:45:fa:
         cb:67:5d:70:0e:5f:01:ff:8b:27:9a:b0:c5:c8:08:4a:9b:a6:
         c2:5b:85:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk6akeAoGS+9+rdS/iXYZTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2
NzA3ZjcwHhcNMjMwNzA5MTEyOTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzllOTMwNDViZjUzNzRlYzY1NzgwYzRlYTQ5N2YwNzU4M2RiMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZmlTXxu763yTZU4RY0HYiTYrNp1
ifjB+mK/U98hQNGivegW2cQxCnM4K4t6PtiX8w6zdqvAREicO+6tTk7E0RbBMSCO
eNSaVwUW1DP/D6uQP/g+b6W8MvZ6w1/rbwz7bDv7Bs6ekQmd6DtGBcw8HDlykAN/
Jc2XDRVdbF/FYZx9C/FKoMW+N6Bat55xjGDy1h1BPNCRFTKrvhzT80kDp15FapVs
hucvWnzGRBHnuLGVI0nWfr5AcoBe2oWJv3Ovh13W1Kp0JDtTwepqk+w0+V5uWkXX
/ycx8FJL2E3tUhMLW2pLpnTZyC4FHa16a+xxer3axoiOYRGzqYgVnwhtwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNOekwRb9TdOxleAxOpJfwdYPbN2MB8GA1UdIwQY
MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt
OTRjMmZkYTM5ZWFkLzEvMDU2VEJGdjFOMDdHVjRERTZrbF9CMWc5czNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk
LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1IpzMA8E
AgACMAkDBwAgARSQAQYwDQYJKoZIhvcNAQELBQADggEBALVjdI+TKj6tgLfxy4Y2
2VM5q0y6zhrtMDSpG0aeYOX5HeA9cG6qm9SSJoPYyuto8LVIs1iNB8MrYkss0wW6
d8nqbjHkfrldeDJkq0LLywkFb+J4HZvFbRE+99V1aDZxqGqC+Aoq+PBu/EyK/2lE
5Fd31NQ2BBEBIDZ3z1dnzYb8raXxoshAu5UgKgOKuMnz+R6ntmVBJtAYRHzV7Fn9
3YgsILJbfVQCfTjzC3HrL8mvPW5G8x5fMgNnTxDy3zZVBt1XmuJ1wdDKShjioxNn
HEeVIVbZmwtExDJtx16WXHJHj+7EmaIGbLVF+stnXXAOXwH/iyeasMXICEqbpsJb
hd0=
-----END CERTIFICATE-----