Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/M19DyLP3BHHrN5uv-TmizIpvsiU.roa
File:                     M19DyLP3BHHrN5uv-TmizIpvsiU.roa (raw, json)
Hash identifier:          4aJF+mQtxLiMltlStS2vafbH4kMM09bwJi49e87hzik=
Subject key identifier:   33:5F:43:C8:B3:F7:04:71:EB:37:9B:AF:F9:39:A2:CC:8A:6F:B2:25
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0188B93709A3C2FF5D2EDCC827D9140150CE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/M19DyLP3BHHrN5uv-TmizIpvsiU.roa
Signing time:             Wed 14 Jun 2023 09:22:51 +0000
ROA not before:           Wed 14 Jun 2023 09:22:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        2.56.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:37:09:a3:c2:ff:5d:2e:dc:c8:27:d9:14:01:50:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jun 14 09:22:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=335f43c8b3f70471eb379baff939a2cc8a6fb225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:f2:4b:1b:bb:cb:5d:e1:39:fa:68:9c:38:
                    33:31:ef:78:7e:9e:4e:6b:17:de:5e:54:70:3d:42:
                    71:51:8b:72:e8:67:6b:cd:af:57:29:b6:e8:33:b7:
                    e6:49:39:96:20:fa:80:e3:43:97:90:d3:0f:61:47:
                    d6:ce:b0:08:9e:15:b1:b7:4f:3c:30:98:a5:f4:13:
                    47:42:38:ce:2b:5d:26:73:e6:af:91:e8:16:44:1e:
                    17:ab:df:10:5f:94:51:6e:71:9b:d0:3b:17:15:c7:
                    8c:39:eb:3d:71:56:b7:72:c2:3f:66:74:55:f6:be:
                    6e:13:bd:ad:1e:17:12:24:a4:fe:d4:c0:94:11:ad:
                    bf:2f:1d:80:55:20:2b:dc:9d:9e:f9:76:de:a3:f3:
                    f9:85:5d:25:ed:c3:b5:64:91:f4:ce:1d:79:a9:43:
                    d3:3b:ba:e8:f5:bf:aa:86:e7:88:55:6d:24:0c:02:
                    aa:c3:7a:62:fc:0f:b5:9d:21:ad:71:01:93:8a:35:
                    d8:74:b5:59:41:63:eb:65:fe:1c:05:53:f2:3d:14:
                    dd:16:f0:99:f1:17:8d:3c:f2:91:fc:75:0b:98:9c:
                    81:fb:0e:e3:59:28:80:a4:8c:d7:59:16:68:2c:ec:
                    f4:4b:b9:0a:85:64:a8:86:c5:3e:ee:da:12:ea:f7:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:43:C8:B3:F7:04:71:EB:37:9B:AF:F9:39:A2:CC:8A:6F:B2:25
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/M19DyLP3BHHrN5uv-TmizIpvsiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b1:ee:0f:17:70:ce:3e:69:97:79:39:8e:01:44:8a:a6:02:
         f4:ed:c8:b0:5c:31:9a:5a:19:2f:45:36:bf:df:b4:9c:8c:e2:
         e9:da:38:63:77:0c:56:ba:0c:3b:2d:48:ec:90:4e:71:ef:a7:
         6c:6d:c9:2c:4b:52:2b:a9:2a:e5:52:77:d4:50:52:3b:46:93:
         bc:82:23:01:ee:ce:9c:1c:11:ab:16:ef:8a:d8:0f:2b:cd:05:
         b4:5c:74:06:b2:ae:e6:60:eb:97:42:5b:7c:f3:ef:7a:3a:a4:
         ac:7b:8a:e7:cd:ac:47:da:6a:4c:ab:6c:da:ab:51:c5:a0:d0:
         42:b8:5f:b8:3b:00:29:77:f2:d9:6a:5d:53:f8:bf:96:23:c0:
         79:5d:6e:8a:e3:34:c3:09:40:ff:78:39:b7:a8:57:77:64:79:
         7b:a3:57:10:53:6e:b7:6d:41:4c:b0:a5:57:5a:55:cb:58:d0:
         35:3b:f9:5d:65:4c:16:e7:9a:93:4d:55:b3:90:dc:72:9f:38:
         c5:5b:19:f7:30:01:6b:f9:f6:49:81:f6:68:ec:d5:b8:4f:a7:
         d3:c8:ce:c2:77:77:c9:df:fa:fd:7c:93:72:b7:ab:d7:78:9c:
         71:3b:78:5c:22:0b:72:66:86:b4:db:30:82:9b:a6:db:2e:a6:
         53:98:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----