Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa
File:                     N1B6yKtfNArlT9Dx-OexBigA5zI.roa (raw, json)
Hash identifier:          rrYi3IU84g0GD6MFHuJN6h8iZuX38MQeEv4opvMbYag=
Subject key identifier:   37:50:7A:C8:AB:5F:34:0A:E5:4F:D0:F1:F8:E7:B1:06:28:00:E7:32
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       018571B0EC9E3737E3A063D93CBCC354B8F2
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa
Signing time:             Mon 02 Jan 2023 08:54:58 +0000
ROA not before:           Mon 02 Jan 2023 08:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25595
IP address blocks:        185.104.128.0/24 maxlen: 24
                          2a06:3080::/30 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:b0:ec:9e:37:37:e3:a0:63:d9:3c:bc:c3:54:b8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Jan  2 08:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37507ac8ab5f340ae54fd0f1f8e7b1062800e732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:21:bd:17:8d:bf:fb:5f:7c:ec:22:29:7b:
                    31:2d:88:fc:c4:bb:db:e6:14:7a:ac:c0:15:16:01:
                    b1:95:47:c0:ff:f1:00:a9:85:a0:82:8b:af:da:fb:
                    e4:32:ed:37:fa:fe:23:9e:46:47:80:48:64:36:f6:
                    7a:09:28:a4:95:0d:61:0f:72:8e:16:23:e6:c7:2e:
                    ae:e1:c7:bc:38:84:f4:8a:f9:32:be:32:e3:68:15:
                    c2:e5:77:db:db:d7:64:dc:a6:e5:5b:79:81:f6:85:
                    f7:c3:3c:24:44:68:c0:bc:ff:62:90:f1:14:9a:dd:
                    cd:b2:aa:9e:1c:17:50:c8:7e:a1:f8:7c:a9:a4:92:
                    e4:75:3d:89:8b:a5:b9:2e:a3:cf:00:ed:02:64:dd:
                    54:e5:e4:26:b6:a0:7e:ae:8a:89:f9:fe:d5:ef:83:
                    ce:26:ef:1b:b7:c6:eb:34:77:fb:5c:c7:7a:55:25:
                    33:0e:66:d1:a4:4c:09:ac:0a:de:71:6b:6a:d7:21:
                    54:2a:40:03:f8:7e:27:dc:c2:a5:f5:c6:a6:06:eb:
                    79:de:6f:99:e1:4e:5d:4a:97:9f:2c:9d:3f:c1:b2:
                    bd:57:56:e3:55:b9:75:8d:8c:85:00:4c:15:10:96:
                    37:68:ad:64:50:d3:67:b9:3a:71:86:c7:9a:e9:42:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:7A:C8:AB:5F:34:0A:E5:4F:D0:F1:F8:E7:B1:06:28:00:E7:32
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.128.0/24
                IPv6:
                  2a06:3080::/30

    Signature Algorithm: sha256WithRSAEncryption
         9c:01:9c:64:c3:7d:7d:78:5d:55:7b:f7:47:bb:3b:f2:aa:fb:
         eb:b0:ab:b5:27:d2:39:db:28:a6:89:f7:de:a1:45:7e:76:d8:
         b0:ba:58:90:53:68:ca:77:1d:bb:48:be:85:f0:5a:34:46:b3:
         4b:88:6a:67:27:fa:72:58:ed:2f:6b:a0:13:5e:83:b6:4d:85:
         5c:cd:6c:4f:0b:4d:17:11:8b:1d:22:2d:8d:01:b8:48:ee:47:
         16:15:8a:fa:2b:25:89:37:14:11:cc:82:f5:9c:5f:97:bf:d5:
         26:26:d3:b9:71:ed:17:81:26:69:7d:31:c1:68:09:41:ca:dd:
         2c:54:64:d4:e9:04:16:d2:ed:61:45:4a:f9:d9:51:48:92:8f:
         16:47:7a:37:f8:77:9b:19:fa:50:54:3b:1d:3f:d4:a3:1d:bc:
         36:d4:c9:60:c9:c7:f5:12:ee:6e:7f:84:cd:0c:79:ca:3a:fd:
         f5:6d:7d:25:d9:e0:54:f7:40:11:31:63:d3:9c:83:f7:dc:cf:
         4a:2c:32:6e:34:74:16:54:21:6d:cb:9e:f8:06:15:8b:f3:2c:
         3d:ca:7f:0b:8a:51:bc:07:41:23:ba:36:fb:0c:c7:38:a1:69:
         b6:b8:5e:2d:06:60:69:b0:6f:e3:b1:82:ed:5e:63:5e:c9:48:
         9d:5d:85:e0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxsOyeNzfjoGPZPLzDVLjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5ZDI2ZGJiM2VhNWRmYWFlODNiNjE5MDhhZGQ4ZmM2
ZGQzNmYwHhcNMjMwMTAyMDg1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzUwN2FjOGFiNWYzNDBhZTU0ZmQwZjFmOGU3YjEwNjI4MDBlNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOEhvReNv/tffOwiKXsxLYj8xLvb
5hR6rMAVFgGxlUfA//EAqYWggouv2vvkMu03+v4jnkZHgEhkNvZ6CSiklQ1hD3KO
FiPmxy6u4ce8OIT0ivkyvjLjaBXC5Xfb29dk3KblW3mB9oX3wzwkRGjAvP9ikPEU
mt3NsqqeHBdQyH6h+HyppJLkdT2Ji6W5LqPPAO0CZN1U5eQmtqB+roqJ+f7V74PO
Ju8bt8brNHf7XMd6VSUzDmbRpEwJrArecWtq1yFUKkAD+H4n3MKl9camBut53m+Z
4U5dSpefLJ0/wbK9V1bjVbl1jYyFAEwVEJY3aK1kUNNnuTpxhsea6ULcwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDdQesirXzQK5U/Q8fjnsQYoAOcyMB8GA1UdIwQY
MBaAFDYKnSbbs+pd+q6DthkIrdj8bdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMt
MTJlOTZiYTIzNWQ4LzEvTjFCNnlLdGZOQXJsVDlEeC1PZXhCaWdBNXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMtMTJlOTZiYTIzNWQ4
LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWiAMA0E
AgACMAcDBQIqBjCAMA0GCSqGSIb3DQEBCwUAA4IBAQCcAZxkw319eF1Ve/dHuzvy
qvvrsKu1J9I52yimiffeoUV+dtiwuliQU2jKdx27SL6F8Fo0RrNLiGpnJ/pyWO0v
a6ATXoO2TYVczWxPC00XEYsdIi2NAbhI7kcWFYr6KyWJNxQRzIL1nF+Xv9UmJtO5
ce0XgSZpfTHBaAlByt0sVGTU6QQW0u1hRUr52VFIko8WR3o3+HebGfpQVDsdP9Sj
Hbw21Mlgycf1Eu5uf4TNDHnKOv31bX0l2eBU90ARMWPTnIP33M9KLDJuNHQWVCFt
y574BhWL8yw9yn8LilG8B0Ejujb7DMc4oWm2uF4tBmBpsG/jsYLtXmNeyUidXYXg
-----END CERTIFICATE-----