Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/ZsYuP5u4VLTCnub5WTAp8MLR1w0.roa
File:                     ZsYuP5u4VLTCnub5WTAp8MLR1w0.roa (raw, json)
Hash identifier:          e3Rh+tcl4PQgu76NE39crf9wcmOx97ZjuXohwUSk6IE=
Subject key identifier:   66:C6:2E:3F:9B:B8:54:B4:C2:9E:E6:F9:59:30:29:F0:C2:D1:D7:0D
Certificate issuer:       /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial:       018572837A4A1E62BB195ED0647617374921
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/ZsYuP5u4VLTCnub5WTAp8MLR1w0.roa
Signing time:             Mon 02 Jan 2023 12:44:57 +0000
ROA not before:           Mon 02 Jan 2023 12:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6805
IP address blocks:        212.94.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:7a:4a:1e:62:bb:19:5e:d0:64:76:17:37:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
        Validity
            Not Before: Jan  2 12:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=66c62e3f9bb854b4c29ee6f9593029f0c2d1d70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:1e:31:03:e1:4e:5a:1a:58:2d:45:4d:d4:
                    af:2b:3b:bd:0e:9c:4f:9b:96:e9:5a:34:bc:2b:d6:
                    4b:6a:4e:5f:be:88:c0:28:26:5d:84:16:44:b7:f2:
                    2d:7c:ac:e4:85:1e:29:39:31:77:9d:34:31:c8:b3:
                    9d:51:02:6b:74:91:2c:0c:44:c3:df:7c:0e:27:7c:
                    d5:eb:03:d0:3c:f9:9d:e4:a3:36:59:44:9d:46:08:
                    4d:f8:a9:56:80:29:43:27:01:a3:2c:0b:94:d3:d6:
                    2f:ea:91:f6:9b:80:9b:74:a6:1e:7f:4c:a8:8b:6d:
                    f0:fb:13:12:03:39:46:ab:9c:93:65:2e:4d:6b:c6:
                    0d:6a:60:42:1c:58:a0:7d:1d:bf:2f:35:e3:46:97:
                    ee:75:a5:38:63:f0:cd:2f:38:12:94:7a:01:02:31:
                    7d:29:bc:ca:5d:9d:6f:32:cf:1d:3e:26:dd:fa:db:
                    6d:2e:01:84:0d:44:d0:47:c6:5d:9f:43:d9:df:68:
                    a6:25:c6:60:4c:3f:85:1b:b0:fa:e0:38:ca:ce:a8:
                    2e:38:13:31:46:09:9a:78:57:c1:1c:61:d4:90:64:
                    52:88:43:f1:10:40:29:66:08:5f:14:7d:3a:57:19:
                    b2:f4:e9:fd:01:8b:45:c2:fa:63:18:3a:c6:3c:01:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:2E:3F:9B:B8:54:B4:C2:9E:E6:F9:59:30:29:F0:C2:D1:D7:0D
            X509v3 Authority Key Identifier:
                keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/ZsYuP5u4VLTCnub5WTAp8MLR1w0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b1:e2:ad:76:5d:76:8f:27:c7:a9:ff:18:3b:0c:8d:26:16:f8:
         a4:a2:0e:25:36:fd:c4:c1:77:07:68:c7:6c:5e:fa:61:08:7e:
         84:c1:61:16:46:94:d1:90:46:b3:b2:52:c1:0b:a9:f2:e2:1d:
         5c:8c:f0:98:ab:cf:05:36:49:cc:ff:77:02:e2:22:f0:2f:ff:
         32:e7:af:46:6c:94:0b:26:17:32:37:75:47:ef:11:c7:50:4a:
         ca:52:89:07:8d:c8:d9:08:b6:2c:ae:9f:82:25:a8:dc:32:ae:
         8c:41:d8:e6:2a:76:70:21:53:f5:d8:1e:b8:3f:a7:ce:f4:a9:
         47:b0:fe:73:55:2d:cb:57:a8:32:6a:27:4f:d9:60:50:d1:b3:
         8f:83:05:58:27:02:12:f6:bd:42:6f:e5:16:24:97:98:98:de:
         a1:0b:65:10:9b:66:55:86:06:3b:98:a2:28:f6:5f:d2:88:8f:
         a6:c6:6d:4c:bb:f3:f7:70:b9:24:03:c2:df:68:eb:25:3f:48:
         b2:d1:35:77:67:42:10:bd:fb:0e:ce:a3:b8:46:db:19:7c:26:
         b5:aa:d1:7d:4b:2d:7a:47:5d:63:db:28:8e:e3:aa:0f:26:92:
         1e:3e:92:81:f9:d5:27:b6:47:6b:19:f7:a7:e6:cf:75:29:b3:
         b8:f3:a6:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg3pKHmK7GV7QZHYXN0khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0
YTQ5MGQwHhcNMjMwMTAyMTI0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmM2MmUzZjliYjg1NGI0YzI5ZWU2Zjk1OTMwMjlmMGMyZDFkNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94eMQPhTloaWC1FTdSvKzu9DpxP
m5bpWjS8K9ZLak5fvojAKCZdhBZEt/ItfKzkhR4pOTF3nTQxyLOdUQJrdJEsDETD
33wOJ3zV6wPQPPmd5KM2WUSdRghN+KlWgClDJwGjLAuU09Yv6pH2m4CbdKYef0yo
i23w+xMSAzlGq5yTZS5Na8YNamBCHFigfR2/LzXjRpfudaU4Y/DNLzgSlHoBAjF9
KbzKXZ1vMs8dPibd+tttLgGEDUTQR8Zdn0PZ32imJcZgTD+FG7D64DjKzqguOBMx
RgmaeFfBHGHUkGRSiEPxEEApZghfFH06Vxmy9On9AYtFwvpjGDrGPAGL+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGbGLj+buFS0wp7m+VkwKfDC0dcNMB8GA1UdIwQY
MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt
Nzk4YWI3NzNlYWZhLzEvWnNZdVA1dTRWTFRDbnViNVdUQXA4TUxSMXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh
LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1F7gMA0G
CSqGSIb3DQEBCwUAA4IBAQCx4q12XXaPJ8ep/xg7DI0mFvikog4lNv3EwXcHaMds
XvphCH6EwWEWRpTRkEazslLBC6ny4h1cjPCYq88FNknM/3cC4iLwL/8y569GbJQL
JhcyN3VH7xHHUErKUokHjcjZCLYsrp+CJajcMq6MQdjmKnZwIVP12B64P6fO9KlH
sP5zVS3LV6gyaidP2WBQ0bOPgwVYJwIS9r1Cb+UWJJeYmN6hC2UQm2ZVhgY7mKIo
9l/SiI+mxm1Mu/P3cLkkA8LfaOslP0iy0TV3Z0IQvfsOzqO4RtsZfCa1qtF9Sy16
R11j2yiO46oPJpIePpKB+dUntkdrGfen5s91KbO486bQ
-----END CERTIFICATE-----