Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDFem7zijeFYRmc3ZqtLwK0zfG4.roa
File:                     WDFem7zijeFYRmc3ZqtLwK0zfG4.roa (raw, json)
Hash identifier:          B8HtsXX3fKUNWsl0DQIfONroUS9ISc9UEGCCftpdnLU=
Subject key identifier:   58:31:5E:9B:BC:E2:8D:E1:58:46:67:37:66:AB:4B:C0:AD:33:7C:6E
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE629F864E4861A35AA82D95AB73C14
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDFem7zijeFYRmc3ZqtLwK0zfG4.roa
Signing time:             Sun 01 Jan 2023 10:35:01 +0000
ROA not before:           Sun 01 Jan 2023 10:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213122
IP address blocks:        2.58.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:29:f8:64:e4:86:1a:35:aa:82:d9:5a:b7:3c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58315e9bbce28de15846673766ab4bc0ad337c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:1d:f9:36:6d:e8:cb:63:ba:7f:9d:d0:a6:
                    35:7d:4e:32:ee:71:95:02:c6:38:e9:95:04:68:e3:
                    72:12:57:ae:ac:bf:cf:e5:d7:e9:ed:fb:ef:f4:43:
                    98:94:cb:ac:52:a6:ee:da:e9:22:b8:ff:80:7f:51:
                    a5:da:35:07:ea:19:26:92:e7:30:04:cd:a8:13:ae:
                    92:3c:5a:03:57:d1:6f:03:a0:48:e9:31:d6:6e:3a:
                    ab:96:d6:62:25:3a:76:37:92:11:08:9f:34:76:31:
                    ea:58:52:68:f8:5a:d3:d4:d3:77:3a:5d:a3:51:dd:
                    9b:8c:80:cf:a0:45:e8:1d:25:7c:7c:88:d0:71:fc:
                    9e:9b:91:e2:d0:7c:2e:45:14:3f:b5:28:73:c3:5a:
                    06:ce:d6:0e:b4:47:43:9c:8a:f8:3b:66:b0:dd:f1:
                    9e:dc:e1:42:53:c5:ee:6f:d3:f9:5e:a7:dd:b5:fd:
                    01:1b:05:53:47:36:53:ec:37:68:f3:4d:99:de:e1:
                    a6:9b:57:a1:aa:76:89:45:3c:f2:0d:e3:dd:5c:88:
                    ba:bf:cd:5b:f8:92:48:5d:1c:a0:1d:71:62:ad:6a:
                    06:05:8b:1e:e5:c5:34:a9:2e:02:16:d3:39:10:a2:
                    20:d6:e4:77:0b:bc:f9:19:2d:97:4b:b6:f1:10:5e:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:5E:9B:BC:E2:8D:E1:58:46:67:37:66:AB:4B:C0:AD:33:7C:6E
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDFem7zijeFYRmc3ZqtLwK0zfG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:83:53:17:92:7b:dc:52:3a:12:0b:f4:85:66:26:18:9d:
         8d:17:1a:b2:c9:e4:14:cd:a8:ee:32:9d:3a:ce:20:ae:d7:c5:
         94:74:e9:33:eb:24:37:e0:cc:5d:19:48:fb:6d:e0:f5:cf:70:
         f0:b6:3e:a8:cb:7e:e5:a6:51:96:ec:58:be:bd:89:79:d7:68:
         08:99:b4:bf:9f:43:10:a1:d6:8b:66:9d:20:76:1a:fb:d8:71:
         77:cf:d8:24:d5:e7:62:1d:33:64:00:45:47:10:d9:46:22:23:
         75:20:a6:c6:81:34:be:68:91:2d:dd:30:a4:25:2e:8e:78:3d:
         e1:01:68:a5:5a:9e:97:36:96:9a:ba:83:5b:00:7d:8d:50:4f:
         cb:c5:40:0c:37:3a:d1:bd:4b:2e:ae:e6:b0:74:fe:34:b4:3b:
         aa:b3:61:27:bf:35:15:d3:91:01:d6:b7:ab:38:e9:a6:50:f3:
         90:52:fa:16:48:fb:ce:65:c5:ee:13:33:df:ab:f1:07:f6:6e:
         78:41:bd:40:b8:5d:3b:99:e3:c5:9f:2b:cb:6f:b0:35:10:2e:
         b0:94:02:c2:cb:db:9e:42:93:97:9a:e7:a7:11:f5:e4:16:54:
         b0:29:b1:7f:14:a2:1c:59:f6:9f:3c:b5:6f:c5:90:f6:bc:7a:
         d0:ef:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----