Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa
File:                     Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa (raw, json)
Hash identifier:          Y4MPceEyz7rY67MTQeopEJWV8L+EQxi8lmjJVdmSztQ=
Subject key identifier:   02:EE:26:37:73:62:9F:F4:25:F2:1E:E6:CC:0E:22:84:A8:BB:36:7C
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       018572DF0C81818995DC8BEA0E5F26738C27
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa
Signing time:             Mon 02 Jan 2023 14:24:58 +0000
ROA not before:           Mon 02 Jan 2023 14:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57037
IP address blocks:        146.247.96.0/19 maxlen: 24
                          2a01:b180::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:df:0c:81:81:89:95:dc:8b:ea:0e:5f:26:73:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan  2 14:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02ee263773629ff425f21ee6cc0e2284a8bb367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:38:eb:73:24:44:95:e3:e3:a0:81:4b:3c:
                    a4:10:62:f3:89:d6:af:e4:d2:b3:44:f2:74:76:6c:
                    0c:12:96:97:0d:74:0a:31:b3:27:4a:ed:a5:50:3e:
                    d8:0c:71:34:10:47:3e:4f:ab:b3:c1:fd:b1:c5:38:
                    f2:a1:ed:62:66:17:75:6c:98:f7:99:13:1b:48:02:
                    c4:8f:d9:2d:c2:e4:74:4c:b0:7a:59:fb:7d:ba:90:
                    6a:ac:ee:f6:6f:65:35:40:88:ef:cc:c8:c1:e3:b4:
                    4e:90:3c:6d:7b:89:fb:87:ed:ff:1d:fb:ac:78:64:
                    19:c4:6a:8b:25:39:c9:d9:c0:11:8b:19:2b:54:f7:
                    74:28:56:26:39:35:56:f1:3c:2c:f8:2f:0a:25:56:
                    fb:9b:c8:fe:91:74:bd:fd:0d:1b:ed:ed:4d:09:35:
                    7f:45:12:82:aa:43:02:8a:bb:b7:4f:53:a1:ea:44:
                    1e:24:dc:7b:e5:1b:36:cf:fc:ad:d1:e2:bc:9b:fa:
                    c7:26:28:43:30:46:87:dc:ae:2a:6e:4b:3a:97:fa:
                    ba:7b:39:91:ba:47:23:a2:b9:bc:3f:30:49:49:15:
                    e6:4f:74:20:96:13:d5:20:5d:9d:63:28:41:fe:cd:
                    06:69:95:0d:c6:70:8c:98:19:1f:9f:c4:0a:23:bc:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:26:37:73:62:9F:F4:25:F2:1E:E6:CC:0E:22:84:A8:BB:36:7C
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Au4mN3Nin_Ql8h7mzA4ihKi7Nnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.96.0/19
                IPv6:
                  2a01:b180::/29

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:24:2c:08:64:95:02:43:a7:70:13:37:21:8d:09:db:93:
         65:1a:f5:46:a2:21:29:51:63:d3:4b:0d:2c:52:bb:e6:2e:b2:
         43:04:c3:1d:7e:da:c4:ca:73:e2:7c:fb:43:bf:0c:24:73:eb:
         47:45:7a:ca:9f:a5:c5:16:27:83:ae:64:c7:85:f6:52:7b:59:
         2a:4c:87:79:8c:53:0a:f0:de:5e:ee:ab:c7:f8:8a:64:1d:6d:
         1d:5d:c4:22:af:34:bb:95:b7:58:22:c7:3c:e0:ff:6a:8c:b6:
         95:ff:8d:d6:15:8d:76:ae:f4:62:e6:b3:f8:a9:f1:17:53:ea:
         a2:2d:b1:94:56:fb:d0:d5:92:20:a4:2d:42:90:cc:ef:15:ce:
         b7:5d:e1:cd:b9:24:1c:0e:93:41:8c:cc:1e:e1:09:2d:17:0a:
         df:1e:05:9d:7b:32:e7:86:3d:a6:1d:b8:99:95:6f:bd:e6:f1:
         b9:5a:3d:be:96:58:e5:a7:53:93:6d:83:82:91:ff:be:0b:d8:
         2b:55:64:3f:d2:cb:dc:27:3c:c7:32:a6:66:8f:e6:aa:d4:9a:
         66:12:21:28:fc:44:61:9d:de:50:f1:28:a0:da:16:cc:9c:b0:
         36:e2:8c:4d:d4:c3:9e:b3:87:34:a2:54:7f:5e:72:ed:34:71:
         55:39:a0:c8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVy3wyBgYmV3IvqDl8mc4wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMTAyMTQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVlMjYzNzczNjI5ZmY0MjVmMjFlZTZjYzBlMjI4NGE4YmIzNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTA463MkRJXj46CBSzykEGLzidav
5NKzRPJ0dmwMEpaXDXQKMbMnSu2lUD7YDHE0EEc+T6uzwf2xxTjyoe1iZhd1bJj3
mRMbSALEj9ktwuR0TLB6Wft9upBqrO72b2U1QIjvzMjB47ROkDxte4n7h+3/Hfus
eGQZxGqLJTnJ2cARixkrVPd0KFYmOTVW8Tws+C8KJVb7m8j+kXS9/Q0b7e1NCTV/
RRKCqkMCiru3T1Oh6kQeJNx75Rs2z/yt0eK8m/rHJihDMEaH3K4qbks6l/q6ezmR
ukcjorm8PzBJSRXmT3QglhPVIF2dYyhB/s0GaZUNxnCMmBkfn8QKI7z65QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFALuJjdzYp/0JfIe5swOIoSouzZ8MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvQXU0bU4zTmluX1FsOGg3bXpBNGloS2k3Tm53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFkvdgMA0E
AgACMAcDBQMqAbGAMA0GCSqGSIb3DQEBCwUAA4IBAQA1HyQsCGSVAkOncBM3IY0J
25NlGvVGoiEpUWPTSw0sUrvmLrJDBMMdftrEynPifPtDvwwkc+tHRXrKn6XFFieD
rmTHhfZSe1kqTId5jFMK8N5e7qvH+IpkHW0dXcQirzS7lbdYIsc84P9qjLaV/43W
FY12rvRi5rP4qfEXU+qiLbGUVvvQ1ZIgpC1CkMzvFc63XeHNuSQcDpNBjMwe4Qkt
FwrfHgWdezLnhj2mHbiZlW+95vG5Wj2+lljlp1OTbYOCkf++C9grVWQ/0svcJzzH
MqZmj+aq1JpmEiEo/ERhnd5Q8Sig2hbMnLA24oxN1MOes4c0olR/XnLtNHFVOaDI
-----END CERTIFICATE-----