Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/9dAUKbDwM_t_BQ9P-jMMXYQy8CA.roa
File:                     9dAUKbDwM_t_BQ9P-jMMXYQy8CA.roa (raw, json)
Hash identifier:          WPJhrIEu2UPQKRuwNsIF5ZudFELCtIGhuPka9XNDtbc=
Subject key identifier:   F5:D0:14:29:B0:F0:33:FB:7F:05:0F:4F:FA:33:0C:5D:84:32:F0:20
Certificate issuer:       /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial:       01856F1DB8A55C256563BB701148CC3DE373
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/9dAUKbDwM_t_BQ9P-jMMXYQy8CA.roa
Signing time:             Sun 01 Jan 2023 20:54:56 +0000
ROA not before:           Sun 01 Jan 2023 20:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206516
IP address blocks:        45.8.140.0/22 maxlen: 24
                          2a0e:8200::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:b8:a5:5c:25:65:63:bb:70:11:48:cc:3d:e3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
        Validity
            Not Before: Jan  1 20:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5d01429b0f033fb7f050f4ffa330c5d8432f020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:cd:cc:33:e5:b5:85:fa:72:56:c8:85:07:
                    7c:8e:5d:62:51:d6:58:10:28:4c:99:b7:e8:c0:5d:
                    67:13:ff:df:72:84:89:27:77:93:02:78:da:9a:14:
                    f7:a4:bc:0c:d5:4b:8c:5d:eb:a5:9d:bd:1e:c1:10:
                    b0:09:ee:fc:9c:ea:aa:5b:d4:2a:cc:6a:a8:cb:e6:
                    b7:2f:9a:42:18:27:fc:b1:b3:9b:dd:86:0f:7a:d5:
                    04:50:34:ee:31:7c:34:c2:ff:d4:8d:d9:2e:a9:ac:
                    a8:0f:95:6c:97:11:92:98:e3:f0:43:d3:70:14:09:
                    c4:49:cb:a8:cf:95:1c:ef:ab:18:36:3a:6c:81:0c:
                    ed:59:d9:e1:b4:25:6f:90:58:e7:7e:35:04:ee:a4:
                    5a:36:b5:9e:7a:5d:c2:0c:d7:73:3c:89:71:a7:cf:
                    dc:89:ee:03:83:85:c5:71:64:fd:b5:78:7a:34:50:
                    68:1b:95:4a:77:2e:ac:49:76:fe:c2:8f:92:20:74:
                    67:98:37:24:7b:d8:df:e1:de:22:1d:70:07:de:1f:
                    3d:08:da:0a:d5:0f:48:64:aa:26:49:0b:d1:7c:d3:
                    dd:a9:33:30:09:ed:2d:ce:78:d1:c3:c6:5c:d8:71:
                    cf:53:f5:ad:23:9a:ff:cb:97:fd:2b:9a:b5:98:13:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D0:14:29:B0:F0:33:FB:7F:05:0F:4F:FA:33:0C:5D:84:32:F0:20
            X509v3 Authority Key Identifier:
                keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/9dAUKbDwM_t_BQ9P-jMMXYQy8CA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.140.0/22
                IPv6:
                  2a0e:8200::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:5f:c0:e8:29:83:0f:49:0f:d9:62:d3:36:d2:91:60:66:a1:
         a2:e7:77:7e:a1:37:53:43:45:2c:88:00:39:35:aa:18:b0:5a:
         6a:43:9b:52:ca:34:7d:4c:96:83:05:71:ac:e5:15:ba:6f:f2:
         b6:1a:7a:e6:ce:86:01:fc:7d:da:02:0e:2a:64:8d:57:7d:e1:
         ff:55:32:72:fb:64:43:88:14:57:35:fb:a4:b8:81:69:ee:6e:
         aa:75:c8:16:3a:c7:b5:e9:e7:d3:4b:a1:66:76:4a:4e:99:ec:
         e9:7e:24:17:fc:1a:5e:1d:40:77:30:25:d3:98:1b:5d:c9:53:
         d1:2c:4f:eb:6d:63:8c:41:48:7e:65:d7:c5:f2:90:bd:12:7f:
         a9:16:6c:23:75:7a:22:73:3f:f5:ab:bf:28:e0:b1:ab:11:c4:
         db:b0:87:60:00:de:f9:c1:6a:4a:a4:2d:0c:0f:c6:3b:88:e3:
         0d:68:42:74:69:77:11:d2:50:4b:ef:36:ea:a5:ff:29:de:56:
         db:4e:9e:9b:7a:ef:b0:6d:82:bd:69:9c:7b:fc:7c:31:b2:35:
         77:62:2c:30:71:19:6f:1d:ca:1f:65:ec:ce:17:ea:34:15:82:
         27:af:b1:5e:ed:5f:d2:0c:58:2b:9a:7d:16:73:78:e6:b7:b7:
         22:5b:8c:29
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvHbilXCVlY7twEUjMPeNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmRmNjgzOGQwMzM4MDE0MWViN2U0ZWU1NWRjMDVkODcw
NjFkYzkwHhcNMjMwMTAxMjA1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQwMTQyOWIwZjAzM2ZiN2YwNTBmNGZmYTMzMGM1ZDg0MzJmMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB7NzDPltYX6clbIhQd8jl1iUdZY
EChMmbfowF1nE//fcoSJJ3eTAnjamhT3pLwM1UuMXeulnb0ewRCwCe78nOqqW9Qq
zGqoy+a3L5pCGCf8sbOb3YYPetUEUDTuMXw0wv/UjdkuqayoD5VslxGSmOPwQ9Nw
FAnEScuoz5Uc76sYNjpsgQztWdnhtCVvkFjnfjUE7qRaNrWeel3CDNdzPIlxp8/c
ie4Dg4XFcWT9tXh6NFBoG5VKdy6sSXb+wo+SIHRnmDcke9jf4d4iHXAH3h89CNoK
1Q9IZKomSQvRfNPdqTMwCe0tznjRw8Zc2HHPU/WtI5r/y5f9K5q1mBOknwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPXQFCmw8DP7fwUPT/ozDF2EMvAgMB8GA1UdIwQY
MBaAFE5t9oONAzgBQet+TuVdwF2HBh3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2Qt
MzE4MzYyMDA0ZThhLzEvOWRBVUtiRHdNX3RfQlE5UC1qTU1YWVF5OENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82ZWViNWMtZDI1MS00NzBhLWE3Y2QtMzE4MzYyMDA0ZThh
LzEvVG0zMmc0MERPQUZCNjM1TzVWM0FYWWNHSGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQiMMA0E
AgACMAcDBQMqDoIAMA0GCSqGSIb3DQEBCwUAA4IBAQA2X8DoKYMPSQ/ZYtM20pFg
ZqGi53d+oTdTQ0UsiAA5NaoYsFpqQ5tSyjR9TJaDBXGs5RW6b/K2GnrmzoYB/H3a
Ag4qZI1XfeH/VTJy+2RDiBRXNfukuIFp7m6qdcgWOse16efTS6FmdkpOmezpfiQX
/BpeHUB3MCXTmBtdyVPRLE/rbWOMQUh+ZdfF8pC9En+pFmwjdXoicz/1q78o4LGr
EcTbsIdgAN75wWpKpC0MD8Y7iOMNaEJ0aXcR0lBL7zbqpf8p3lbbTp6beu+wbYK9
aZx7/HwxsjV3YiwwcRlvHcofZezOF+o0FYInr7Fe7V/SDFgrmn0Wc3jmt7ciW4wp
-----END CERTIFICATE-----