Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa
File:                     s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa (raw, json)
Hash identifier:          o1A/D61mTObefyGMXQGq/PPzYZ9rfPRFXWY7y0B3fi8=
Subject key identifier:   B3:EC:30:26:3B:B2:AE:C4:AF:F7:F3:BC:BF:95:65:62:22:FA:5F:F7
Certificate issuer:       /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial:       01865F012B56229B0D410B1C971E7379A3CE
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa
Signing time:             Fri 17 Feb 2023 10:52:37 +0000
ROA not before:           Fri 17 Feb 2023 10:52:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50340
IP address blocks:        2001:67c:6d0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5f:01:2b:56:22:9b:0d:41:0b:1c:97:1e:73:79:a3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
        Validity
            Not Before: Feb 17 10:52:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3ec30263bb2aec4aff7f3bcbf95656222fa5ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:fb:06:fc:e4:1c:3e:99:b7:8d:cf:a9:8f:
                    12:aa:01:96:8a:ae:b2:e3:f9:f6:bd:8f:33:59:2f:
                    a1:bf:6f:bb:c9:db:7b:52:95:c5:c0:59:52:63:36:
                    75:93:a9:4e:17:4c:62:f3:8f:c1:af:22:cb:86:7d:
                    c4:1b:14:f0:57:dc:04:4b:bf:e0:a6:b8:35:74:ec:
                    fc:26:70:95:03:8b:35:76:5b:af:40:5d:5d:2f:a7:
                    a2:05:d3:91:eb:7d:d7:3b:a5:7b:28:72:fb:43:1d:
                    0e:6d:20:be:0a:82:7a:cb:d1:c0:14:d6:4e:f2:92:
                    5f:b6:68:69:91:bd:d5:6e:26:66:3c:5f:65:00:1b:
                    aa:05:78:0f:4a:c4:ba:e4:1c:ae:75:da:fb:58:fe:
                    65:27:83:a6:1f:f3:d9:07:63:ac:be:eb:e4:1f:20:
                    c5:c3:b4:26:16:47:de:0f:c3:10:01:8f:4b:9e:75:
                    c4:4d:19:95:67:38:8c:48:22:2b:9c:48:68:2c:83:
                    5e:ee:55:15:f2:f9:8f:19:72:b5:64:db:90:c8:be:
                    2c:d8:07:78:09:31:52:b9:f2:c3:ae:9d:67:13:f8:
                    6c:99:2f:0d:00:08:a5:29:ab:bd:cc:53:d1:39:03:
                    dd:4d:94:a4:c8:93:40:12:4a:23:e5:21:46:5e:d0:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:30:26:3B:B2:AE:C4:AF:F7:F3:BC:BF:95:65:62:22:FA:5F:F7
            X509v3 Authority Key Identifier:
                keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:6d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:75:e1:f3:cd:bb:98:f6:48:fd:82:86:70:15:e7:43:8b:2a:
         a4:42:92:bf:41:e6:96:f8:94:89:fc:a7:d8:aa:76:b6:86:66:
         82:f5:94:a3:b2:12:af:b9:fd:2a:9a:3f:44:52:62:85:c8:3f:
         74:86:7b:54:d1:84:69:6d:b7:16:19:bd:b2:1d:a0:e5:a8:b3:
         78:d3:72:37:14:46:8b:91:19:8b:87:33:aa:d3:d7:f6:c5:c8:
         ee:20:6e:47:c1:63:dc:8d:32:c9:82:17:3d:50:fd:0e:b2:5f:
         a3:88:c4:cd:5a:15:a4:73:16:a0:57:ec:32:e9:fd:05:24:95:
         97:43:f1:ac:c5:7c:77:f2:2e:2e:41:55:ac:e9:34:5c:47:a0:
         7b:13:90:f3:ab:04:a3:40:ff:cf:7f:75:e1:ec:1c:47:0a:48:
         ce:7e:02:6c:98:3e:73:a8:84:ef:53:91:88:f2:60:ca:ff:82:
         3a:2a:0e:21:d0:4e:ad:87:ea:57:a2:4e:43:f1:e9:57:4e:81:
         1d:01:17:d7:56:ae:1b:a1:f1:5e:00:6c:a4:d2:3e:a1:8d:8e:
         5c:75:6e:bf:39:bc:a9:3a:ee:a1:6a:35:be:ca:02:28:2e:6f:
         7d:50:7f:66:d8:b4:9e:02:72:93:8d:0d:c1:5a:fd:20:8e:6f:
         b2:a5:3b:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZfAStWIpsNQQsclx5zeaPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2
NTAyNTAwHhcNMjMwMjE3MTA1MjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2VjMzAyNjNiYjJhZWM0YWZmN2YzYmNiZjk1NjU2MjIyZmE1ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7b7BvzkHD6Zt43PqY8SqgGWiq6y
4/n2vY8zWS+hv2+7ydt7UpXFwFlSYzZ1k6lOF0xi84/BryLLhn3EGxTwV9wES7/g
prg1dOz8JnCVA4s1dluvQF1dL6eiBdOR633XO6V7KHL7Qx0ObSC+CoJ6y9HAFNZO
8pJftmhpkb3VbiZmPF9lABuqBXgPSsS65Byuddr7WP5lJ4OmH/PZB2OsvuvkHyDF
w7QmFkfeD8MQAY9LnnXETRmVZziMSCIrnEhoLINe7lUV8vmPGXK1ZNuQyL4s2Ad4
CTFSufLDrp1nE/hsmS8NAAilKau9zFPROQPdTZSkyJNAEkoj5SFGXtAlMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLPsMCY7sq7Er/fzvL+VZWIi+l/3MB8GA1UdIwQY
MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt
NTQxZjlmY2JhNzQyLzEvcy13d0pqdXlyc1N2OV9POHY1VmxZaUw2WF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy
LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAbdeHzzbuY9kj9goZwFedDiyqkQpK/QeaW+JSJ
/KfYqna2hmaC9ZSjshKvuf0qmj9EUmKFyD90hntU0YRpbbcWGb2yHaDlqLN403I3
FEaLkRmLhzOq09f2xcjuIG5HwWPcjTLJghc9UP0Osl+jiMTNWhWkcxagV+wy6f0F
JJWXQ/GsxXx38i4uQVWs6TRcR6B7E5DzqwSjQP/Pf3Xh7BxHCkjOfgJsmD5zqITv
U5GI8mDK/4I6Kg4h0E6th+pXok5D8elXToEdARfXVq4bofFeAGyk0j6hjY5cdW6/
ObypOu6hajW+ygIoLm99UH9m2LSeAnKTjQ3BWv0gjm+ypTth
-----END CERTIFICATE-----