Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1-bex5DrteRZUJhcC3cMWRbyjo4s.roa
File:                     1-bex5DrteRZUJhcC3cMWRbyjo4s.roa (raw, json)
Hash identifier:          xPp1ATln3R7hCMEVBC3kNy3m3vLHKGsFutXrofuCwLA=
Subject key identifier:   F9:B7:B1:E4:3A:ED:79:16:54:26:17:02:DD:C3:16:45:BC:A3:A3:8B
Certificate issuer:       /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial:       0185701ED7E7ACFE0D0377F04C7987757D4A
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1-bex5DrteRZUJhcC3cMWRbyjo4s.roa
Signing time:             Mon 02 Jan 2023 01:35:47 +0000
ROA not before:           Mon 02 Jan 2023 01:35:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204895
IP address blocks:        46.148.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:d7:e7:ac:fe:0d:03:77:f0:4c:79:87:75:7d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
        Validity
            Not Before: Jan  2 01:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9b7b1e43aed791654261702ddc31645bca3a38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:6c:ee:bb:40:69:4e:57:1c:c2:eb:ad:d9:
                    b8:73:f8:0b:bd:da:a4:9e:c5:d6:62:cf:a4:ce:6a:
                    fe:df:6d:8f:94:ab:8d:7c:f0:55:7d:e1:ae:18:cc:
                    d0:19:8c:1b:45:90:b8:01:23:a8:b6:0b:ab:b3:e3:
                    78:b4:21:4f:b0:a4:92:8a:57:2c:b4:9e:dc:5d:ec:
                    76:08:bf:cf:ac:14:6f:34:e9:10:22:3e:dd:01:6d:
                    2c:79:3a:d0:0b:7d:fa:b6:f2:ac:8c:5f:85:c6:99:
                    bf:ef:1b:bb:ed:4e:b9:dc:6c:56:1e:00:e6:5d:da:
                    1d:d8:53:a2:78:f8:ff:a7:42:46:68:dd:5f:d6:9a:
                    94:c0:8b:39:97:91:3f:f0:7d:2b:ca:4e:de:f7:54:
                    d5:c6:59:c2:f5:c8:07:7d:1e:2c:c1:8a:64:2e:92:
                    47:c3:30:66:ac:08:7f:81:82:ac:a4:cc:0f:1a:c6:
                    97:62:07:46:7f:b2:f3:21:5e:c3:e9:c3:b6:79:3b:
                    55:d2:b6:17:d4:9d:85:d1:b4:d6:ac:a6:2c:94:29:
                    bf:a4:0b:65:83:58:64:6c:8f:83:ae:43:35:c5:84:
                    06:76:3f:dc:dc:e4:95:14:b8:8f:19:38:3f:9b:37:
                    50:1b:55:74:3e:99:ac:59:23:73:06:1a:11:36:c5:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:B1:E4:3A:ED:79:16:54:26:17:02:DD:C3:16:45:BC:A3:A3:8B
            X509v3 Authority Key Identifier:
                keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/1-bex5DrteRZUJhcC3cMWRbyjo4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a0:6f:97:e7:89:a0:41:47:7f:5b:d0:05:bb:5d:08:3a:4f:
         12:f8:4f:8d:50:43:ee:8c:dc:6f:dd:ec:7e:40:82:8d:32:6a:
         2f:26:97:66:ed:4b:84:74:0b:d4:1c:ef:f4:be:ca:4f:c1:0d:
         9c:cc:a3:2c:e5:47:85:5b:fe:44:c9:81:3e:d7:bf:36:3f:f6:
         af:b8:17:5b:01:e0:09:38:79:61:af:68:81:ea:09:99:84:f6:
         1b:13:14:60:da:5d:7f:40:bf:8e:62:ed:88:82:d2:be:18:7f:
         24:cb:76:37:ef:8a:b0:5b:2e:47:f7:99:7d:d1:42:5b:67:bd:
         bb:04:94:48:db:2d:f7:62:94:52:38:1d:7e:84:70:99:f3:8e:
         39:e3:85:5b:d9:6c:ed:4b:90:b1:e0:ca:f2:10:35:7d:66:45:
         ff:e8:72:21:c1:d2:0b:a8:d1:55:df:c2:88:b6:8d:66:0a:62:
         60:23:7b:50:e2:07:d8:c0:79:cb:dd:ed:fb:fc:09:f0:1b:83:
         01:3e:15:f1:be:42:30:b6:8e:df:77:ab:fd:6f:ad:56:68:b0:
         3c:03:7a:d0:3b:f7:a4:78:3b:3c:53:ee:2c:2c:02:35:84:62:
         bf:e9:5a:9d:5e:29:54:f6:c9:e0:5c:36:73:e1:39:b6:00:cf:
         f5:dc:cb:78
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwHtfnrP4NA3fwTHmHdX1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYWY5YTBkNzhhNjgxMWNkMTY4NmRlYjExNzc4OGFmODY2
YzgwOTEwHhcNMjMwMTAyMDEzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWI3YjFlNDNhZWQ3OTE2NTQyNjE3MDJkZGMzMTY0NWJjYTNhMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJFs7rtAaU5XHMLrrdm4c/gLvdqk
nsXWYs+kzmr+322PlKuNfPBVfeGuGMzQGYwbRZC4ASOotgurs+N4tCFPsKSSilcs
tJ7cXex2CL/PrBRvNOkQIj7dAW0seTrQC336tvKsjF+Fxpm/7xu77U653GxWHgDm
Xdod2FOiePj/p0JGaN1f1pqUwIs5l5E/8H0ryk7e91TVxlnC9cgHfR4swYpkLpJH
wzBmrAh/gYKspMwPGsaXYgdGf7LzIV7D6cO2eTtV0rYX1J2F0bTWrKYslCm/pAtl
g1hkbI+DrkM1xYQGdj/c3OSVFLiPGTg/mzdQG1V0PpmsWSNzBhoRNsWmWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPm3seQ67XkWVCYXAt3DFkW8o6OLMB8GA1UdIwQY
MBaAFJyvmg14poEc0Wht6xF3iK+GbICRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkstYURYaW1nUnpSYUczckVYZUlyNFpzZ0pFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OTU5YzItZWUwYi00MmJkLWI0MmQt
YmY3ZmRjMjliZTZkLzEvMS1iZXg1RHJ0ZVJaVUpoY0MzY01XUmJ5am80cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvNjk1OWMyLWVlMGItNDJiZC1iNDJkLWJmN2ZkYzI5YmU2
ZC8xL25LLWFEWGltZ1J6UmFHM3JFWGVJcjRac2dKRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi6U0DAN
BgkqhkiG9w0BAQsFAAOCAQEApKBvl+eJoEFHf1vQBbtdCDpPEvhPjVBD7ozcb93s
fkCCjTJqLyaXZu1LhHQL1Bzv9L7KT8ENnMyjLOVHhVv+RMmBPte/Nj/2r7gXWwHg
CTh5Ya9ogeoJmYT2GxMUYNpdf0C/jmLtiILSvhh/JMt2N++KsFsuR/eZfdFCW2e9
uwSUSNst92KUUjgdfoRwmfOOOeOFW9ls7UuQseDK8hA1fWZF/+hyIcHSC6jRVd/C
iLaNZgpiYCN7UOIH2MB5y93t+/wJ8BuDAT4V8b5CMLaO33er/W+tVmiwPAN60Dv3
pHg7PFPuLCwCNYRiv+lanV4pVPbJ4Fw2c+E5tgDP9dzLeA==
-----END CERTIFICATE-----