Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/b72XZPKTMwKbxUWymPsTexfSl98.roa
File:                     b72XZPKTMwKbxUWymPsTexfSl98.roa (raw, json)
Hash identifier:          MYA+PKlnfDP+k+JHoAfuYWbrDx6QKoxu2YMNrgS9pnY=
Subject key identifier:   6F:BD:97:64:F2:93:33:02:9B:C5:45:B2:98:FB:13:7B:17:D2:97:DF
Certificate issuer:       /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial:       018760C2F63BE221C76045091D9B166EFB38
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/b72XZPKTMwKbxUWymPsTexfSl98.roa
Signing time:             Sat 08 Apr 2023 12:06:42 +0000
ROA not before:           Sat 08 Apr 2023 12:06:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18811
IP address blocks:        91.221.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:60:c2:f6:3b:e2:21:c7:60:45:09:1d:9b:16:6e:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
        Validity
            Not Before: Apr  8 12:06:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fbd9764f29333029bc545b298fb137b17d297df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:45:3f:9e:4a:45:da:dd:84:c5:f8:38:b7:
                    8b:a0:f4:61:70:5c:1d:37:b6:53:ef:c2:c6:4c:ae:
                    9e:16:70:1b:46:5a:53:2e:23:56:dc:b7:e4:cf:93:
                    94:e9:48:e2:9d:96:21:f5:be:1c:9c:d2:65:40:2b:
                    60:c4:46:2f:14:d4:e8:7b:c6:b8:d4:13:4c:fc:d4:
                    15:d3:49:31:1b:d1:14:6d:87:29:a2:4f:70:f0:da:
                    46:f5:9f:d1:f2:03:e3:3c:e5:29:b2:be:a6:3e:9d:
                    f4:38:30:54:f1:6b:50:c1:d1:ec:9c:ad:d3:73:50:
                    f8:db:d6:5a:fd:77:96:30:be:d8:12:ff:7a:59:eb:
                    04:71:e4:f2:a7:85:60:4b:dd:9a:43:d5:1f:fb:f4:
                    ea:80:5a:b4:33:37:0d:22:97:cf:fb:18:36:e8:88:
                    ae:4d:be:cf:bf:d2:4d:be:d4:71:26:1f:bf:a5:ec:
                    ed:db:e5:65:27:9a:c7:e4:84:2b:fd:0c:3c:2b:ac:
                    0f:51:11:0c:5c:60:57:49:6f:f2:45:22:36:07:b3:
                    a3:08:7f:19:eb:67:cb:2c:7f:cc:a8:44:33:90:ae:
                    e9:85:38:9a:9e:f9:74:b2:31:72:7c:fa:63:f5:69:
                    1b:05:dd:f6:86:f7:8a:54:ec:68:ba:d1:cd:a0:c8:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:97:64:F2:93:33:02:9B:C5:45:B2:98:FB:13:7B:17:D2:97:DF
            X509v3 Authority Key Identifier:
                keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/b72XZPKTMwKbxUWymPsTexfSl98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.221.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:d2:32:b2:48:09:2f:ac:53:5d:5f:10:7d:83:f6:d9:87:
         47:e9:f1:78:e0:fb:1a:94:3b:d4:d8:08:69:89:0a:33:d2:b0:
         88:57:cb:29:a1:89:c1:f0:7b:7c:76:41:3e:cc:a3:b5:b0:ed:
         32:5c:92:50:2a:0f:80:8c:cd:db:64:31:28:ad:4a:0c:15:cf:
         26:27:7a:7d:14:3f:ad:20:0c:ce:1c:e2:f9:92:72:2e:50:f8:
         8b:64:47:26:fb:c7:57:77:7c:10:d0:18:04:f4:56:ac:f6:8d:
         b4:a8:0e:6e:4e:1f:60:5e:a7:87:85:73:85:75:d2:70:25:66:
         98:64:e6:70:63:40:ee:5e:20:1a:38:e8:c3:fa:d4:2c:e2:a8:
         96:4d:b7:51:8c:82:5a:93:ef:79:c0:57:9b:19:25:8e:b7:a1:
         60:de:ba:67:aa:7e:c1:3c:62:43:bc:94:12:c4:f3:04:b3:72:
         18:87:c5:50:83:d3:08:81:29:c2:1c:88:54:bf:07:89:d7:b5:
         e5:f3:83:ef:48:01:d8:86:0a:ab:5c:6a:93:2c:c4:72:e3:6e:
         a4:b6:2b:a2:ee:bb:5f:8b:44:ce:79:28:f8:3a:77:2b:ff:c6:
         09:e8:d9:a0:1f:d2:aa:ca:9f:fc:2c:da:4a:19:c8:4a:1d:89:
         51:a4:7c:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdgwvY74iHHYEUJHZsWbvs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTRiZjU5ODc3YTNiMmVmMTRmNWYxMjBhNjc1MGRjMTQ5
MzljNmIwHhcNMjMwNDA4MTIwNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmJkOTc2NGYyOTMzMzAyOWJjNTQ1YjI5OGZiMTM3YjE3ZDI5N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijtFP55KRdrdhMX4OLeLoPRhcFwd
N7ZT78LGTK6eFnAbRlpTLiNW3Lfkz5OU6UjinZYh9b4cnNJlQCtgxEYvFNToe8a4
1BNM/NQV00kxG9EUbYcpok9w8NpG9Z/R8gPjPOUpsr6mPp30ODBU8WtQwdHsnK3T
c1D429Za/XeWML7YEv96WesEceTyp4VgS92aQ9Uf+/TqgFq0MzcNIpfP+xg26Iiu
Tb7Pv9JNvtRxJh+/pezt2+VlJ5rH5IQr/Qw8K6wPUREMXGBXSW/yRSI2B7OjCH8Z
62fLLH/MqEQzkK7phTianvl0sjFyfPpj9WkbBd32hveKVOxoutHNoMhYEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+9l2TykzMCm8VFspj7E3sX0pffMB8GA1UdIwQY
MBaAFInkv1mHejsu8U9fEgpnUNwUk5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUt
MjNiYjQyMDNlYjU3LzEvYjcyWFpQS1RNd0tieFVXeW1Qc1RleGZTbDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8wNzViYzEtMmI1NS00MGIxLTk5MGUtMjNiYjQyMDNlYjU3
LzEvaWVTX1dZZDZPeTd4VDE4U0NtZFEzQlNUbkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW92+MA0G
CSqGSIb3DQEBCwUAA4IBAQAECtIyskgJL6xTXV8QfYP22YdH6fF44PsalDvU2Ahp
iQoz0rCIV8spoYnB8Ht8dkE+zKO1sO0yXJJQKg+AjM3bZDEorUoMFc8mJ3p9FD+t
IAzOHOL5knIuUPiLZEcm+8dXd3wQ0BgE9Fas9o20qA5uTh9gXqeHhXOFddJwJWaY
ZOZwY0DuXiAaOOjD+tQs4qiWTbdRjIJak+95wFebGSWOt6Fg3rpnqn7BPGJDvJQS
xPMEs3IYh8VQg9MIgSnCHIhUvweJ17Xl84PvSAHYhgqrXGqTLMRy426ktiui7rtf
i0TOeSj4Oncr/8YJ6NmgH9Kqyp/8LNpKGchKHYlRpHxl
-----END CERTIFICATE-----