Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/w3Zaylg4gg7N6P3pMeX04Y4HgZE.roa
File:                     w3Zaylg4gg7N6P3pMeX04Y4HgZE.roa (raw, json)
Hash identifier:          tfp7PDdptULLwkjWrYymgsL7UTrocFUVOxE+qJVpSQo=
Subject key identifier:   C3:76:5A:CA:58:38:82:0E:CD:E8:FD:E9:31:E5:F4:E1:8E:07:81:91
Certificate issuer:       /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial:       018572F11F3FB4FA96CFB2945220C9AD80E9
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/w3Zaylg4gg7N6P3pMeX04Y4HgZE.roa
Signing time:             Mon 02 Jan 2023 14:44:42 +0000
ROA not before:           Mon 02 Jan 2023 14:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212319
IP address blocks:        88.218.112.0/24 maxlen: 24
                          2a0f:52c1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:f1:1f:3f:b4:fa:96:cf:b2:94:52:20:c9:ad:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
        Validity
            Not Before: Jan  2 14:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3765aca5838820ecde8fde931e5f4e18e078191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:7d:8d:cd:39:8c:ba:07:1b:d6:f1:04:22:
                    35:16:aa:d0:21:8f:a6:24:7c:cd:e7:7e:fd:40:8a:
                    8e:0a:33:13:71:0f:45:9b:93:ae:58:45:3b:97:74:
                    6f:50:25:15:cf:be:a0:99:26:d2:17:4f:ae:86:57:
                    1f:d2:7c:82:45:a0:dc:03:e1:dd:a0:cf:58:e4:c2:
                    52:66:ba:bd:80:05:59:11:a9:d4:9e:c8:e2:22:72:
                    cb:93:3f:fe:75:a7:10:ba:f2:79:84:3d:74:28:be:
                    f9:0f:ad:bb:ff:1f:0f:d6:60:4e:17:2d:19:8d:9f:
                    74:b3:7f:06:8a:a7:9e:3c:85:2c:fc:05:c8:00:75:
                    1c:ea:9b:2a:72:2c:e5:9c:26:05:f6:81:98:54:76:
                    f2:b6:01:ab:5a:1d:a4:cb:5b:cc:92:9e:ea:d4:c8:
                    6b:18:69:f1:bd:4c:17:62:33:2b:d0:bb:22:a1:1e:
                    38:91:30:50:f4:44:af:35:8e:c8:9a:5a:10:3a:5e:
                    e8:5a:79:7f:61:b9:20:52:5c:7c:0f:f8:61:a0:05:
                    2d:be:4e:0f:89:15:50:da:aa:60:76:17:fd:34:ee:
                    19:48:cd:cc:f5:18:8b:5a:c1:f9:e0:96:e1:a3:41:
                    49:33:9c:f2:54:b0:f2:45:cb:71:11:b9:59:35:6f:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:5A:CA:58:38:82:0E:CD:E8:FD:E9:31:E5:F4:E1:8E:07:81:91
            X509v3 Authority Key Identifier:
                keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/w3Zaylg4gg7N6P3pMeX04Y4HgZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.112.0/24
                IPv6:
                  2a0f:52c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:45:19:69:78:49:6f:75:04:7a:6c:d6:aa:b8:c8:54:a3:2f:
         37:e9:8a:56:ee:22:88:24:e4:a9:91:32:67:dd:18:b1:30:8c:
         e1:c4:41:fc:31:76:4c:da:b6:57:19:c6:99:d9:2c:de:ba:12:
         44:a4:9b:01:81:d8:45:85:b9:70:fd:52:ae:dc:06:41:45:4a:
         36:87:1e:9d:ef:91:98:bb:3c:71:c4:39:ad:a7:17:51:56:a2:
         ca:91:4f:e9:37:08:9d:75:67:52:d0:aa:e1:a1:e2:89:21:a2:
         e8:e0:d2:7f:16:64:42:19:db:d5:54:46:44:b7:76:ec:9f:7a:
         d3:f8:bc:78:d0:9d:41:1e:44:dc:ad:eb:d3:51:76:21:51:76:
         00:00:bd:e7:fe:00:1a:a7:82:02:6d:8a:51:2d:3c:40:c2:15:
         e7:2f:f9:4d:47:af:36:41:26:1d:d9:e2:7e:81:1e:33:64:22:
         b9:3b:a5:22:37:78:5c:e6:42:aa:67:68:6a:87:cf:8f:13:b1:
         ce:70:99:96:a9:40:74:22:42:e0:d6:e8:e2:81:ca:12:07:44:
         c5:a9:29:15:b7:c4:8f:91:0a:02:45:27:24:52:23:db:f1:8f:
         d7:dd:2e:5a:49:e3:60:35:48:92:9d:c4:37:c2:82:15:28:60:
         ee:7a:46:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVy8R8/tPqWz7KUUiDJrYDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjMwMTAyMTQ0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzc2NWFjYTU4Mzg4MjBlY2RlOGZkZTkzMWU1ZjRlMThlMDc4MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/p9jc05jLoHG9bxBCI1FqrQIY+m
JHzN5379QIqOCjMTcQ9Fm5OuWEU7l3RvUCUVz76gmSbSF0+uhlcf0nyCRaDcA+Hd
oM9Y5MJSZrq9gAVZEanUnsjiInLLkz/+dacQuvJ5hD10KL75D627/x8P1mBOFy0Z
jZ90s38GiqeePIUs/AXIAHUc6psqcizlnCYF9oGYVHbytgGrWh2ky1vMkp7q1Mhr
GGnxvUwXYjMr0LsioR44kTBQ9ESvNY7ImloQOl7oWnl/YbkgUlx8D/hhoAUtvk4P
iRVQ2qpgdhf9NO4ZSM3M9RiLWsH54Jbho0FJM5zyVLDyRctxEblZNW9U2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMN2WspYOIIOzej96THl9OGOB4GRMB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvdzNaYXlsZzRnZzdONlAzcE1lWDA0WTRIZ1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWNpwMA8E
AgACMAkDBwAqD1LBAAAwDQYJKoZIhvcNAQELBQADggEBABdFGWl4SW91BHps1qq4
yFSjLzfpilbuIogk5KmRMmfdGLEwjOHEQfwxdkzatlcZxpnZLN66EkSkmwGB2EWF
uXD9Uq7cBkFFSjaHHp3vkZi7PHHEOa2nF1FWosqRT+k3CJ11Z1LQquGh4okhoujg
0n8WZEIZ29VURkS3duyfetP4vHjQnUEeRNyt69NRdiFRdgAAvef+ABqnggJtilEt
PEDCFecv+U1HrzZBJh3Z4n6BHjNkIrk7pSI3eFzmQqpnaGqHz48Tsc5wmZapQHQi
QuDW6OKByhIHRMWpKRW3xI+RCgJFJyRSI9vxj9fdLlpJ42A1SJKdxDfCghUoYO56
Rno=
-----END CERTIFICATE-----