Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/rFAPGHuLgW8vqMC6-1TpbtWox0o.roa
File:                     rFAPGHuLgW8vqMC6-1TpbtWox0o.roa (raw, json)
Hash identifier:          XzAeW7vY05WhxX2p/hxLpnBi/ODf2KRBSZcYbyMXs7w=
Subject key identifier:   AC:50:0F:18:7B:8B:81:6F:2F:A8:C0:BA:FB:54:E9:6E:D5:A8:C7:4A
Certificate issuer:       /CN=55096c61153d2ab55077f1a30c245986001ba1d9
Certificate serial:       01856D787E8335D13B9DF63EAC5BF92E94E8
Authority key identifier: 55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/rFAPGHuLgW8vqMC6-1TpbtWox0o.roa
Signing time:             Sun 01 Jan 2023 13:14:51 +0000
ROA not before:           Sun 01 Jan 2023 13:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205934
IP address blocks:        195.245.235.0/24 maxlen: 24
                          2a0b:a340::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:7e:83:35:d1:3b:9d:f6:3e:ac:5b:f9:2e:94:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55096c61153d2ab55077f1a30c245986001ba1d9
        Validity
            Not Before: Jan  1 13:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac500f187b8b816f2fa8c0bafb54e96ed5a8c74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:fd:61:05:fc:60:2f:ac:04:e7:33:f3:de:
                    b0:49:15:22:a4:47:ec:da:f3:58:fa:d4:15:b4:6e:
                    6e:72:01:46:e1:8b:98:c4:fe:7d:7c:3a:4b:8b:33:
                    6c:07:5e:de:a0:67:18:41:ce:bf:67:f7:60:ed:91:
                    0f:a6:8b:5b:b6:11:cb:c8:b4:00:0c:1a:ad:ad:b6:
                    f5:1d:62:7a:df:7a:ee:f0:fa:a9:7c:69:93:de:df:
                    f0:d1:0e:dc:f7:67:cc:82:9b:34:1f:f4:65:77:74:
                    db:68:27:17:a6:89:88:ac:7e:68:4c:c4:8e:3a:19:
                    67:51:08:15:0c:17:be:28:a1:3f:aa:03:d2:d8:d9:
                    a8:55:7f:c4:49:2e:a1:f6:a3:f8:4a:8e:58:ca:e3:
                    7c:c3:f7:c4:c0:8c:a2:5b:4a:1d:f9:6c:35:fe:e1:
                    09:c8:93:2e:6a:78:c3:12:9c:02:ef:a0:67:52:ba:
                    61:cd:07:87:a2:18:8a:31:5f:1c:8a:e9:01:1b:b6:
                    82:f2:c4:9d:09:7b:a8:50:66:cb:af:f8:61:4e:ab:
                    2c:8f:f1:51:11:af:7f:cd:ec:2d:6b:e7:8e:67:e9:
                    35:e2:8a:d7:81:23:57:c9:aa:8d:89:c6:50:a7:8d:
                    34:7b:fb:5f:37:e8:27:5f:f1:0b:18:99:bd:da:b5:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:0F:18:7B:8B:81:6F:2F:A8:C0:BA:FB:54:E9:6E:D5:A8:C7:4A
            X509v3 Authority Key Identifier:
                keyid:55:09:6C:61:15:3D:2A:B5:50:77:F1:A3:0C:24:59:86:00:1B:A1:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQlsYRU9KrVQd_GjDCRZhgAbodk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/rFAPGHuLgW8vqMC6-1TpbtWox0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/49bfec-757f-4319-b45d-9b5d63b5cbf5/1/VQlsYRU9KrVQd_GjDCRZhgAbodk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.245.235.0/24
                IPv6:
                  2a0b:a340::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:38:a3:bc:22:a5:b7:02:23:c6:5b:7f:b6:59:48:9f:6d:2e:
         2f:3c:ea:87:37:c9:d8:88:cb:d8:80:2c:01:92:c4:9e:3d:4b:
         94:8c:65:9a:77:70:50:e2:d6:5a:32:8a:65:65:39:14:f7:53:
         ff:aa:ff:88:50:0b:3a:70:bf:f1:c1:84:f4:1b:6e:cc:25:3d:
         37:1d:14:a4:ae:67:4a:7a:43:d6:c5:d6:a9:23:54:eb:65:63:
         fe:f3:14:23:c9:2a:7b:3f:35:eb:d8:84:4a:46:10:9a:6d:80:
         4f:66:cf:c5:16:a4:95:1d:ca:30:15:bf:86:bc:aa:f9:02:de:
         2f:0c:6a:9e:b4:d5:e7:e6:21:89:bb:44:13:95:43:33:bc:dc:
         5a:3a:b3:2f:5e:fc:45:49:a9:e5:1c:f9:81:6d:c3:57:2a:eb:
         c9:73:4d:8b:2e:22:99:b7:62:3f:bd:1e:cf:ce:d3:5b:83:a1:
         6b:a7:16:09:7d:17:7b:03:c5:b8:6a:85:a9:de:c3:6e:2b:fe:
         bf:0f:d3:4b:54:74:bc:08:8e:7c:fc:61:b7:f9:c0:65:14:cc:
         9d:1a:d9:81:75:97:70:f2:7f:19:09:ca:17:77:c7:1d:1d:94:
         de:54:24:80:b1:45:ea:f1:43:6d:ec:49:20:56:06:88:82:14:
         85:73:81:16
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVteH6DNdE7nfY+rFv5LpToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDk2YzYxMTUzZDJhYjU1MDc3ZjFhMzBjMjQ1OTg2MDAx
YmExZDkwHhcNMjMwMTAxMTMxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzUwMGYxODdiOGI4MTZmMmZhOGMwYmFmYjU0ZTk2ZWQ1YThjNzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVz9YQX8YC+sBOcz896wSRUipEfs
2vNY+tQVtG5ucgFG4YuYxP59fDpLizNsB17eoGcYQc6/Z/dg7ZEPpotbthHLyLQA
DBqtrbb1HWJ633ru8PqpfGmT3t/w0Q7c92fMgps0H/Rld3TbaCcXpomIrH5oTMSO
OhlnUQgVDBe+KKE/qgPS2NmoVX/ESS6h9qP4So5YyuN8w/fEwIyiW0od+Ww1/uEJ
yJMuanjDEpwC76BnUrphzQeHohiKMV8ciukBG7aC8sSdCXuoUGbLr/hhTqssj/FR
Ea9/zewta+eOZ+k14orXgSNXyaqNicZQp400e/tfN+gnX/ELGJm92rV0TQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKxQDxh7i4FvL6jAuvtU6W7VqMdKMB8GA1UdIwQY
MBaAFFUJbGEVPSq1UHfxowwkWYYAG6HZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQt
OWI1ZDYzYjVjYmY1LzEvckZBUEdIdUxnVzh2cU1DNi0xVHBidFdveDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80OWJmZWMtNzU3Zi00MzE5LWI0NWQtOWI1ZDYzYjVjYmY1
LzEvVlFsc1lSVTlLclZRZF9HakRDUlpoZ0Fib2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw/XrMA0E
AgACMAcDBQAqC6NAMA0GCSqGSIb3DQEBCwUAA4IBAQB1OKO8IqW3AiPGW3+2WUif
bS4vPOqHN8nYiMvYgCwBksSePUuUjGWad3BQ4tZaMoplZTkU91P/qv+IUAs6cL/x
wYT0G27MJT03HRSkrmdKekPWxdapI1TrZWP+8xQjySp7PzXr2IRKRhCabYBPZs/F
FqSVHcowFb+GvKr5At4vDGqetNXn5iGJu0QTlUMzvNxaOrMvXvxFSanlHPmBbcNX
KuvJc02LLiKZt2I/vR7PztNbg6FrpxYJfRd7A8W4aoWp3sNuK/6/D9NLVHS8CI58
/GG3+cBlFMydGtmBdZdw8n8ZCcoXd8cdHZTeVCSAsUXq8UNt7EkgVgaIghSFc4EW
-----END CERTIFICATE-----