Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/L1acdV-On76K1QRlbk6GGcN9QWs.roa
File:                     L1acdV-On76K1QRlbk6GGcN9QWs.roa (raw, json)
Hash identifier:          7KLRy0Un5pMmob0eiOshoAoPyCK4fgzIKx5V3lT/pO4=
Subject key identifier:   2F:56:9C:75:5F:8E:9F:BE:8A:D5:04:65:6E:4E:86:19:C3:7D:41:6B
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       018948C8E4153BF3F25429B6D2C5024D391A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/L1acdV-On76K1QRlbk6GGcN9QWs.roa
Signing time:             Wed 12 Jul 2023 06:27:52 +0000
ROA not before:           Wed 12 Jul 2023 06:27:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25211
IP address blocks:        109.160.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:48:c8:e4:15:3b:f3:f2:54:29:b6:d2:c5:02:4d:39:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jul 12 06:27:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f569c755f8e9fbe8ad504656e4e8619c37d416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:7c:28:e7:d4:f9:dd:91:61:6f:94:eb:28:
                    a4:8f:3e:7c:36:ca:e0:e5:e4:bf:2d:8b:7b:97:c0:
                    49:09:d4:18:fe:86:e1:7d:63:16:75:30:a3:f9:72:
                    8b:0f:c9:79:d3:e7:f8:1c:1b:34:a6:db:ed:9d:d9:
                    7f:23:99:92:8d:aa:fe:9a:ff:49:d9:30:3d:ed:93:
                    6e:06:d6:04:9a:9b:13:cf:0c:af:41:90:e3:c4:50:
                    9e:13:bf:ca:0d:73:fd:d8:c1:d6:b3:a2:aa:ec:cb:
                    7c:a2:dc:fc:a9:e6:c6:0d:0b:89:ad:86:5d:52:6f:
                    02:6d:9f:a8:5c:cf:c4:9a:e4:e0:e6:97:1e:0d:d5:
                    15:0a:f1:bb:ec:10:8c:25:12:59:57:09:43:60:54:
                    44:7a:f5:7a:3a:62:01:ea:29:8f:bf:c2:09:33:a4:
                    3e:7c:20:f9:e8:75:8f:25:17:50:a7:90:a1:a7:13:
                    c9:ab:88:f0:72:0d:40:95:0a:77:67:d8:3a:d3:a0:
                    b4:cb:ce:01:ab:44:97:83:ef:fe:5e:65:3f:9c:0a:
                    73:77:d2:cb:2f:86:1d:90:e9:8a:49:5d:19:a8:b8:
                    d9:f8:d5:ac:12:42:43:9f:8e:eb:65:58:0e:f9:2b:
                    c0:3b:a6:d1:00:8f:07:c0:10:45:61:d6:b4:1c:d9:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:9C:75:5F:8E:9F:BE:8A:D5:04:65:6E:4E:86:19:C3:7D:41:6B
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/L1acdV-On76K1QRlbk6GGcN9QWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.160.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:11:7f:e3:27:2f:97:3d:fc:25:3d:00:9d:cc:be:a1:6b:
         6c:f8:81:e5:f6:45:50:5b:bb:26:5f:11:11:90:41:37:c9:75:
         7a:f6:56:2a:c9:b7:ad:46:05:2c:1c:e1:be:a2:8b:2d:70:66:
         6a:e4:65:ea:08:e6:66:f2:3a:59:dd:57:61:f1:ba:81:ef:35:
         3e:cf:c4:42:aa:6c:76:cd:8b:b3:25:2e:6b:1f:16:31:87:d9:
         8b:88:7a:da:bd:d8:77:45:15:4a:e4:d8:b0:87:82:91:dd:b9:
         9e:f1:c4:e3:29:03:2c:89:f2:db:46:60:8f:0b:16:e6:ae:c3:
         51:85:c2:4f:c9:7b:70:6e:6e:78:35:8c:90:bd:19:94:40:2f:
         46:dc:4a:7b:18:fa:19:2a:cd:67:bc:bc:7f:6f:ff:a6:12:b3:
         33:6a:6e:d6:54:24:1c:0a:a0:6e:23:b1:78:54:1b:45:b5:49:
         1f:e5:aa:f6:c5:f0:55:98:08:ac:6b:3a:76:7e:82:5a:86:9d:
         7e:61:5d:68:68:a4:a8:ab:f8:54:c4:a2:e4:fa:dd:df:62:20:
         35:ef:dd:67:80:b9:1f:13:5a:ef:20:af:ea:17:0a:40:7c:7c:
         ae:93:c9:79:08:47:c0:21:9c:38:96:ea:66:cf:2b:2a:fe:58:
         cf:b8:3a:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlIyOQVO/PyVCm20sUCTTkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwNzEyMDYyNzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjU2OWM3NTVmOGU5ZmJlOGFkNTA0NjU2ZTRlODYxOWMzN2Q0MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rp8KOfU+d2RYW+U6yikjz58Nsrg
5eS/LYt7l8BJCdQY/obhfWMWdTCj+XKLD8l50+f4HBs0ptvtndl/I5mSjar+mv9J
2TA97ZNuBtYEmpsTzwyvQZDjxFCeE7/KDXP92MHWs6Kq7Mt8otz8qebGDQuJrYZd
Um8CbZ+oXM/EmuTg5pceDdUVCvG77BCMJRJZVwlDYFREevV6OmIB6imPv8IJM6Q+
fCD56HWPJRdQp5ChpxPJq4jwcg1AlQp3Z9g606C0y84Bq0SXg+/+XmU/nApzd9LL
L4YdkOmKSV0ZqLjZ+NWsEkJDn47rZVgO+SvAO6bRAI8HwBBFYda0HNnRswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9WnHVfjp++itUEZW5OhhnDfUFrMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvTDFhY2RWLU9uNzZLMVFSbGJrNkdHY045UVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbaAgMA0G
CSqGSIb3DQEBCwUAA4IBAQAUzxF/4ycvlz38JT0Ancy+oWts+IHl9kVQW7smXxER
kEE3yXV69lYqybetRgUsHOG+oostcGZq5GXqCOZm8jpZ3Vdh8bqB7zU+z8RCqmx2
zYuzJS5rHxYxh9mLiHravdh3RRVK5Niwh4KR3bme8cTjKQMsifLbRmCPCxbmrsNR
hcJPyXtwbm54NYyQvRmUQC9G3Ep7GPoZKs1nvLx/b/+mErMzam7WVCQcCqBuI7F4
VBtFtUkf5ar2xfBVmAisazp2foJahp1+YV1oaKSoq/hUxKLk+t3fYiA1791ngLkf
E1rvIK/qFwpAfHyuk8l5CEfAIZw4lupmzysq/ljPuDpc
-----END CERTIFICATE-----