Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/F7l4r5_ch2OmlglXvZqugyXJyxs.roa
File:                     F7l4r5_ch2OmlglXvZqugyXJyxs.roa (raw, json)
Hash identifier:          TUIGp9TcHV/oz5FP5j/7/k0ueD77nNsLOa5okRZqOOM=
Subject key identifier:   17:B9:78:AF:9F:DC:87:63:A6:96:09:57:BD:9A:AE:83:25:C9:CB:1B
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       018573686D19C33EC8EF5150FE32A95B06F1
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/F7l4r5_ch2OmlglXvZqugyXJyxs.roa
Signing time:             Mon 02 Jan 2023 16:55:01 +0000
ROA not before:           Mon 02 Jan 2023 16:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41637
IP address blocks:        194.50.113.0/24 maxlen: 24
                          2001:4d8f::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:68:6d:19:c3:3e:c8:ef:51:50:fe:32:a9:5b:06:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Jan  2 16:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17b978af9fdc8763a6960957bd9aae8325c9cb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:1f:05:a3:37:b8:02:2d:25:22:5f:0a:c1:
                    b9:bb:35:4a:18:56:f3:0a:ad:84:4a:70:83:54:a0:
                    58:12:d0:0f:0e:8a:a8:eb:6a:c5:ac:48:53:87:b5:
                    9e:53:69:15:00:64:5d:17:b7:41:c9:4c:9c:7e:04:
                    2d:d6:26:fa:cd:3f:ce:98:ef:0d:3c:6f:f9:5e:97:
                    ad:8b:4c:b0:ca:04:c7:4c:65:f4:8e:d1:b1:20:12:
                    dd:36:90:cf:96:ca:4b:4e:61:c6:c9:b9:b9:c8:b0:
                    aa:d6:76:e6:cc:cb:12:de:e9:79:30:ab:31:e4:d0:
                    46:b1:3a:d6:9a:e9:2b:be:50:d0:a1:d6:33:c8:2c:
                    92:4e:ff:ad:45:9d:cb:90:a0:5e:d5:81:0d:9e:b8:
                    55:b3:d5:d6:01:bf:d1:07:51:73:59:1c:b6:79:25:
                    a3:f9:f7:20:19:36:c8:15:3a:12:03:b2:33:75:a2:
                    e2:51:e0:fe:e2:d5:6e:f8:78:f6:64:e3:5a:76:89:
                    09:d6:b0:ed:bf:a1:2e:da:66:b8:ee:d8:b4:7b:1d:
                    9b:ea:ed:7d:15:0a:c2:68:67:23:48:2e:2f:b0:db:
                    0b:5b:bf:22:b1:08:6e:4f:d3:bf:8c:7a:e4:bf:d8:
                    f7:d4:2f:da:95:c5:ad:43:6b:54:4f:f3:3c:e0:5d:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B9:78:AF:9F:DC:87:63:A6:96:09:57:BD:9A:AE:83:25:C9:CB:1B
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/F7l4r5_ch2OmlglXvZqugyXJyxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.113.0/24
                IPv6:
                  2001:4d8f::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:76:5a:54:08:c7:8c:b3:a1:ff:90:6d:c8:4a:4b:ed:8b:9f:
         f6:2e:dd:27:e0:eb:a5:d8:de:69:f2:11:2c:ea:90:8a:88:26:
         78:7e:d2:14:fe:b0:0b:e7:49:17:4b:23:7e:04:9f:da:af:f9:
         32:f6:a8:d9:52:ae:3b:36:cc:1f:75:f3:88:03:03:fd:f6:9e:
         d4:d0:ae:f7:ee:8a:aa:d0:f5:be:6a:ad:c5:53:7a:59:6d:28:
         7e:17:f0:c1:6e:51:c7:92:6f:45:a6:00:e4:1e:91:6d:f6:2e:
         3c:82:bb:30:89:f3:c5:f0:56:de:05:ff:49:9a:5d:c4:41:b8:
         96:d6:f4:ba:bc:67:93:5f:f4:dd:66:1c:c9:35:f2:7b:dc:b4:
         20:29:66:ca:54:13:d5:d6:83:ab:4e:c3:11:f6:b0:1b:b7:7d:
         5f:03:0b:7c:a8:e3:71:77:be:0e:6b:14:2f:f9:71:1a:db:4c:
         2c:2a:de:4d:50:f0:55:8f:18:99:56:b8:d8:cd:dd:10:98:42:
         da:38:7e:f6:0a:39:30:81:b2:58:f1:cd:e8:24:04:98:d0:bd:
         93:dc:de:a9:69:ec:cb:1d:94:60:03:31:7f:5e:77:64:91:8c:
         b6:12:26:d0:b1:79:b8:c2:ec:a2:87:7a:70:aa:6e:c3:49:0e:
         ee:82:08:65
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVzaG0Zwz7I71FQ/jKpWwbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4
NTE4YmUwHhcNMjMwMTAyMTY1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2I5NzhhZjlmZGM4NzYzYTY5NjA5NTdiZDlhYWU4MzI1YzljYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jgfBaM3uAItJSJfCsG5uzVKGFbz
Cq2ESnCDVKBYEtAPDoqo62rFrEhTh7WeU2kVAGRdF7dByUycfgQt1ib6zT/OmO8N
PG/5Xpeti0ywygTHTGX0jtGxIBLdNpDPlspLTmHGybm5yLCq1nbmzMsS3ul5MKsx
5NBGsTrWmukrvlDQodYzyCySTv+tRZ3LkKBe1YENnrhVs9XWAb/RB1FzWRy2eSWj
+fcgGTbIFToSA7IzdaLiUeD+4tVu+Hj2ZONadokJ1rDtv6Eu2ma47ti0ex2b6u19
FQrCaGcjSC4vsNsLW78isQhuT9O/jHrkv9j31C/alcWtQ2tUT/M84F2x4wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBe5eK+f3IdjppYJV72aroMlycsbMB8GA1UdIwQY
MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt
MGUyZDY5N2IyN2UzLzEvRjdsNHI1X2NoMk9tbGdsWHZacXVneVhKeXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz
LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwjJxMA0E
AgACMAcDBQAgAU2PMA0GCSqGSIb3DQEBCwUAA4IBAQAJdlpUCMeMs6H/kG3ISkvt
i5/2Lt0n4Oul2N5p8hEs6pCKiCZ4ftIU/rAL50kXSyN+BJ/ar/ky9qjZUq47Nswf
dfOIAwP99p7U0K737oqq0PW+aq3FU3pZbSh+F/DBblHHkm9FpgDkHpFt9i48grsw
ifPF8FbeBf9Jml3EQbiW1vS6vGeTX/TdZhzJNfJ73LQgKWbKVBPV1oOrTsMR9rAb
t31fAwt8qONxd74OaxQv+XEa20wsKt5NUPBVjxiZVrjYzd0QmELaOH72CjkwgbJY
8c3oJASY0L2T3N6paezLHZRgAzF/XndkkYy2EibQsXm4wuyih3pwqm7DSQ7ugghl
-----END CERTIFICATE-----