Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa
File:                     tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa (raw, json)
Hash identifier:          YsOMdOU2iawf/0Y7Rf2nRsu1Bav2LEC33OKhXGWJEVQ=
Subject key identifier:   B6:30:52:30:0A:74:67:A5:D9:15:0D:8C:90:BC:F3:FF:D7:98:74:B2
Certificate issuer:       /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial:       01856FB124C495FEA91841469FC75D643D4E
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa
Signing time:             Sun 01 Jan 2023 23:35:58 +0000
ROA not before:           Sun 01 Jan 2023 23:35:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58027
IP address blocks:        192.94.233.0/24 maxlen: 24
                          2001:67c:1b00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:24:c4:95:fe:a9:18:41:46:9f:c7:5d:64:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
        Validity
            Not Before: Jan  1 23:35:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b63052300a7467a5d9150d8c90bcf3ffd79874b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:74:18:be:a4:0a:5e:93:cb:22:8b:b5:aa:86:
                    91:f5:ca:52:3c:5f:c9:b7:05:6f:c4:a9:17:19:45:
                    70:f4:31:2a:c4:08:c5:39:b0:52:e8:01:55:84:95:
                    97:f4:39:cf:9e:f4:3e:38:b2:82:b7:7d:83:21:69:
                    0a:bf:d7:9b:e9:43:30:4a:24:0d:03:94:4f:43:63:
                    1c:ff:78:04:4c:dc:2a:ad:64:3c:3c:b1:2a:4e:24:
                    6c:3a:de:82:13:2d:b7:07:0c:62:50:fb:81:c1:55:
                    01:8e:90:31:16:a5:00:47:63:3f:0f:25:7f:11:ef:
                    7a:23:fa:fd:25:9c:65:c6:e7:25:da:2b:bb:d7:c3:
                    2c:24:81:1a:5e:cc:a4:55:ad:ad:6a:df:0f:c0:d6:
                    6d:80:ee:61:11:01:00:a3:b0:36:25:18:c5:92:81:
                    41:6b:9f:16:e2:30:be:06:d5:ff:6c:6f:bb:6f:c9:
                    fd:b4:66:d0:e0:13:5e:dc:b0:22:0c:27:08:f5:55:
                    80:d4:27:71:f0:f9:11:d8:ca:fa:97:29:06:16:11:
                    3a:0f:6d:49:27:40:81:a8:cf:f8:d1:bc:62:7b:db:
                    be:bc:26:5b:24:2c:08:bd:96:72:e7:30:0c:3e:2e:
                    72:1e:5b:89:0a:32:e3:7e:6f:3c:ef:f6:dd:19:fe:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:52:30:0A:74:67:A5:D9:15:0D:8C:90:BC:F3:FF:D7:98:74:B2
            X509v3 Authority Key Identifier:
                keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.233.0/24
                IPv6:
                  2001:67c:1b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:19:7e:3a:53:4c:3f:2c:56:e3:6b:ef:2d:b1:f6:6c:f4:
         0a:c9:44:fd:5e:ea:42:96:65:27:49:e9:1d:38:e3:2c:9b:47:
         ec:fe:4e:17:85:c3:d1:b1:cf:43:c4:25:70:e5:40:c3:9f:8d:
         d7:45:05:fa:21:00:34:0e:60:7c:b1:0c:18:c2:f6:f2:48:d2:
         88:fc:7a:e7:ae:d2:ce:0a:09:09:b2:1f:e3:49:b3:58:bc:81:
         78:54:70:8b:cb:ef:b2:0f:25:6f:6d:9e:a9:da:62:d8:a5:22:
         70:c1:b9:2e:32:dd:b6:33:e1:13:10:ff:9f:d5:14:22:75:65:
         7d:df:33:18:b4:08:3a:ed:c4:c8:9a:bc:94:31:b9:f7:27:1c:
         4a:90:48:93:48:ff:a1:f6:f1:4e:54:73:3e:bb:3d:2b:31:ad:
         79:8e:54:ec:c8:38:65:75:09:9a:c0:11:fb:c4:8b:a3:45:ea:
         ed:36:03:4d:7c:fc:5c:d9:22:e5:33:b9:52:48:28:88:ef:19:
         cc:e3:e1:3d:9a:fb:5c:bf:e9:e1:af:59:94:09:81:b3:fa:0e:
         87:14:a2:65:45:c4:07:14:ca:bb:7f:3e:f7:a2:20:cd:82:b2:
         b6:51:6e:e7:36:12:54:64:e0:81:78:9c:47:a0:90:4b:78:01:
         ba:f9:60:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvsSTElf6pGEFGn8ddZD1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4
NTEyZTcwHhcNMjMwMTAxMjMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjMwNTIzMDBhNzQ2N2E1ZDkxNTBkOGM5MGJjZjNmZmQ3OTg3NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknQYvqQKXpPLIou1qoaR9cpSPF/J
twVvxKkXGUVw9DEqxAjFObBS6AFVhJWX9DnPnvQ+OLKCt32DIWkKv9eb6UMwSiQN
A5RPQ2Mc/3gETNwqrWQ8PLEqTiRsOt6CEy23BwxiUPuBwVUBjpAxFqUAR2M/DyV/
Ee96I/r9JZxlxucl2iu718MsJIEaXsykVa2tat8PwNZtgO5hEQEAo7A2JRjFkoFB
a58W4jC+BtX/bG+7b8n9tGbQ4BNe3LAiDCcI9VWA1Cdx8PkR2Mr6lykGFhE6D21J
J0CBqM/40bxie9u+vCZbJCwIvZZy5zAMPi5yHluJCjLjfm887/bdGf4mgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLYwUjAKdGel2RUNjJC88//XmHSyMB8GA1UdIwQY
MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt
ODA2MmYyNDFkZDk2LzEvdGpCU01BcDBaNlhaRlEyTWtMenpfOWVZZExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2
LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwF7pMA8E
AgACMAkDBwAgAQZ8GwAwDQYJKoZIhvcNAQELBQADggEBAKemGX46U0w/LFbja+8t
sfZs9ArJRP1e6kKWZSdJ6R044yybR+z+TheFw9Gxz0PEJXDlQMOfjddFBfohADQO
YHyxDBjC9vJI0oj8eueu0s4KCQmyH+NJs1i8gXhUcIvL77IPJW9tnqnaYtilInDB
uS4y3bYz4RMQ/5/VFCJ1ZX3fMxi0CDrtxMiavJQxufcnHEqQSJNI/6H28U5Ucz67
PSsxrXmOVOzIOGV1CZrAEfvEi6NF6u02A018/FzZIuUzuVJIKIjvGczj4T2a+1y/
6eGvWZQJgbP6DocUomVFxAcUyrt/PveiIM2CsrZRbuc2ElRk4IF4nEegkEt4Abr5
YB0=
-----END CERTIFICATE-----