Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/hfX347rS88Yml2kcDOrvQM0mJAE.roa
File:                     hfX347rS88Yml2kcDOrvQM0mJAE.roa (raw, json)
Hash identifier:          F3aef94r6aZEdZzJw5nYsfxxm9LdrDaqvC47avMBgN0=
Subject key identifier:   85:F5:F7:E3:BA:D2:F3:C6:26:97:69:1C:0C:EA:EF:40:CD:26:24:01
Certificate issuer:       /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial:       01856ECBA83B462C36529611ACABE88AE880
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/hfX347rS88Yml2kcDOrvQM0mJAE.roa
Signing time:             Sun 01 Jan 2023 19:25:18 +0000
ROA not before:           Sun 01 Jan 2023 19:25:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210664
IP address blocks:        185.150.88.0/22 maxlen: 22
                          2a05:4b40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:a8:3b:46:2c:36:52:96:11:ac:ab:e8:8a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
        Validity
            Not Before: Jan  1 19:25:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=85f5f7e3bad2f3c62697691c0ceaef40cd262401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:9d:a5:f4:74:93:41:86:9a:f3:c2:98:15:
                    12:fe:94:8d:6e:a1:c0:ed:2c:a7:75:17:29:85:26:
                    cf:d1:3f:ba:9a:bf:7c:49:f1:f6:2b:a3:d8:68:a7:
                    ae:a5:02:95:fa:d5:9c:f0:5a:71:ea:2f:73:ca:9c:
                    34:72:d6:97:71:38:d7:be:93:c2:3c:d4:a8:e0:52:
                    63:9f:09:a6:ef:5e:1b:e6:74:8b:15:9a:ff:31:42:
                    98:b6:91:94:b3:f6:7c:0d:f2:50:8b:71:05:43:08:
                    9f:0e:77:96:fd:10:fb:32:eb:3d:8c:fe:bb:6f:01:
                    d3:46:e0:98:ae:98:80:88:60:0c:ca:b0:9f:dd:61:
                    8f:9d:ab:6a:a1:ce:63:fb:f6:aa:4c:8a:ad:aa:9c:
                    af:47:ef:de:d0:ee:30:90:13:d3:e6:92:01:eb:ae:
                    a0:43:f1:29:0a:c7:6e:b1:84:da:17:4d:26:6d:17:
                    d4:91:ed:1a:29:69:e6:a9:a6:db:6a:6e:34:5c:dc:
                    5d:b1:fc:05:61:0a:eb:57:ec:ab:a3:6c:58:9b:85:
                    55:dd:50:2a:fa:4a:fc:f2:df:7b:11:33:36:18:f1:
                    01:17:5a:41:bd:f9:9c:fa:7d:89:5d:9b:72:c9:e0:
                    94:49:38:74:d9:4c:30:b1:b9:45:fb:82:f5:c8:21:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F5:F7:E3:BA:D2:F3:C6:26:97:69:1C:0C:EA:EF:40:CD:26:24:01
            X509v3 Authority Key Identifier:
                keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/hfX347rS88Yml2kcDOrvQM0mJAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.88.0/22
                IPv6:
                  2a05:4b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:1a:05:37:8a:69:ca:0f:8b:9e:92:f7:8e:fe:e9:de:c7:92:
         e8:5b:c4:4f:33:ac:6b:e1:e6:75:79:f8:8f:d6:77:e9:47:3b:
         07:fb:51:ba:93:c5:04:48:31:1a:4a:c4:7d:43:37:b0:64:d2:
         a4:e8:10:b0:60:b3:f6:79:5b:17:30:e9:af:c9:5e:38:9d:2c:
         fe:78:4a:20:26:46:9d:9e:0d:f5:66:70:6f:30:57:8c:ba:61:
         d2:56:a6:8c:2f:22:b7:a8:9a:a5:e3:36:02:9c:69:70:dd:e6:
         ec:c2:0a:7f:1a:61:f6:12:40:bd:ad:f5:67:18:1c:da:cd:79:
         b6:a4:d7:99:a7:57:5b:7d:3b:7d:4d:88:46:97:13:24:20:11:
         1e:9c:ce:08:70:e8:85:74:21:bb:bd:d5:ac:9f:59:17:26:64:
         cc:9c:74:2c:e3:b7:1a:36:94:b4:f0:13:b3:20:d7:f0:fd:d8:
         ae:85:3d:cd:f6:4a:3d:b7:93:d2:5e:26:f4:15:e0:7c:f1:13:
         37:e5:b2:4a:2a:c2:1a:9b:e6:db:4b:c6:6a:2f:b4:b1:46:72:
         8b:d6:04:4e:8b:78:45:ba:b0:59:74:32:af:26:7e:58:2b:cc:
         e1:f0:ae:02:aa:19:82:f3:7a:fd:50:f1:5e:05:a7:a5:1f:7a:
         ab:98:79:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVuy6g7Riw2UpYRrKvoiuiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWFmMDQzZmUyMDljMDM0NTM2MjIwNWY4Y2M3Y2Q2MTk1
MWMyN2UwHhcNMjMwMTAxMTkyNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWY1ZjdlM2JhZDJmM2M2MjY5NzY5MWMwY2VhZWY0MGNkMjYyNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpudpfR0k0GGmvPCmBUS/pSNbqHA
7SyndRcphSbP0T+6mr98SfH2K6PYaKeupQKV+tWc8Fpx6i9zypw0ctaXcTjXvpPC
PNSo4FJjnwmm714b5nSLFZr/MUKYtpGUs/Z8DfJQi3EFQwifDneW/RD7Mus9jP67
bwHTRuCYrpiAiGAMyrCf3WGPnatqoc5j+/aqTIqtqpyvR+/e0O4wkBPT5pIB666g
Q/EpCsdusYTaF00mbRfUke0aKWnmqabbam40XNxdsfwFYQrrV+yro2xYm4VV3VAq
+kr88t97ETM2GPEBF1pBvfmc+n2JXZtyyeCUSTh02UwwsblF+4L1yCEumwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIX19+O60vPGJpdpHAzq70DNJiQBMB8GA1UdIwQY
MBaAFMGq8EP+IJwDRTYiBfjMfNYZUcJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQt
Yjc1NzhiMTBiYTdlLzEvaGZYMzQ3clM4OFltbDJrY0RPcnZRTTBtSkFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YzI3ZjAtMTM3ZC00NzFiLTlkMWQtYjc1NzhiMTBiYTdl
LzEvd2Fyd1FfNGduQU5GTmlJRi1NeDgxaGxSd240LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZZYMA0E
AgACMAcDBQAqBUtAMA0GCSqGSIb3DQEBCwUAA4IBAQC0GgU3imnKD4uekveO/une
x5LoW8RPM6xr4eZ1efiP1nfpRzsH+1G6k8UESDEaSsR9QzewZNKk6BCwYLP2eVsX
MOmvyV44nSz+eEogJkadng31ZnBvMFeMumHSVqaMLyK3qJql4zYCnGlw3ebswgp/
GmH2EkC9rfVnGBzazXm2pNeZp1dbfTt9TYhGlxMkIBEenM4IcOiFdCG7vdWsn1kX
JmTMnHQs47caNpS08BOzINfw/diuhT3N9ko9t5PSXib0FeB88RM35bJKKsIam+bb
S8ZqL7SxRnKL1gROi3hFurBZdDKvJn5YK8zh8K4CqhmC83r9UPFeBaelH3qrmHlM
-----END CERTIFICATE-----