Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/wq0Bj6ozE0UYVdA43nW6XkpVcsQ.roa
File:                     wq0Bj6ozE0UYVdA43nW6XkpVcsQ.roa (raw, json)
Hash identifier:          EjcdzHLlOh+3WbXgiUx57v01Po/UgHmGUJ/B8AeYS84=
Subject key identifier:   C2:AD:01:8F:AA:33:13:45:18:55:D0:38:DE:75:BA:5E:4A:55:72:C4
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       01856CF86F1D0ECBF438F24798E73F9262C2
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/wq0Bj6ozE0UYVdA43nW6XkpVcsQ.roa
Signing time:             Sun 01 Jan 2023 10:54:58 +0000
ROA not before:           Sun 01 Jan 2023 10:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197573
IP address blocks:        176.52.184.0/24 maxlen: 24
                          2a02:f181::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:f8:6f:1d:0e:cb:f4:38:f2:47:98:e7:3f:92:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Jan  1 10:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2ad018faa3313451855d038de75ba5e4a5572c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:73:4f:20:c4:f3:14:ce:51:a4:c3:e7:01:
                    30:d5:1b:bc:30:29:4b:67:b4:20:9d:f2:f4:a3:5d:
                    ca:d8:1c:9e:dd:8a:42:56:af:a9:a5:86:5a:15:de:
                    eb:db:e2:49:72:a2:12:36:ba:17:a6:12:36:f4:dd:
                    27:85:a6:7f:a8:75:5d:12:e8:7e:21:84:21:79:ab:
                    c9:33:6b:af:9e:10:71:d3:30:eb:ca:eb:86:96:f5:
                    49:38:b2:f8:40:dd:08:58:c8:5c:e9:2c:aa:a1:9a:
                    25:15:28:dc:e0:0d:95:ad:6c:c5:46:53:dc:b0:50:
                    53:08:4d:7c:a8:c3:11:cc:73:58:79:f1:a5:1c:2a:
                    2e:1c:9a:c6:74:b3:70:86:03:0a:97:d0:47:c8:ae:
                    99:5c:4c:e7:7f:6e:74:59:b9:c9:7d:0c:93:37:7a:
                    ed:74:ee:b8:0d:1a:65:e8:c0:65:60:cb:e2:4f:f1:
                    57:3f:18:c2:f1:9c:22:30:9a:10:b4:3e:db:d3:01:
                    68:8e:24:54:3c:85:05:9f:01:8b:f8:40:50:4c:c1:
                    d8:bc:5b:13:18:34:60:bc:ec:3b:19:6c:62:06:26:
                    b5:0c:f3:7d:e7:e8:9d:58:58:e5:0c:44:81:07:28:
                    d9:53:67:7d:65:9a:e8:22:03:45:c9:71:dc:df:47:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:01:8F:AA:33:13:45:18:55:D0:38:DE:75:BA:5E:4A:55:72:C4
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/wq0Bj6ozE0UYVdA43nW6XkpVcsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.52.184.0/24
                IPv6:
                  2a02:f181::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:fd:3c:f9:f6:5e:2e:3f:44:63:a7:b9:08:24:ea:f0:49:
         d9:ee:51:6e:b5:14:f3:d0:82:a0:7f:81:9e:5f:a6:ca:30:47:
         44:ba:fc:09:27:a6:d9:6e:1b:22:ce:4f:96:32:0e:8a:1a:76:
         f3:49:9f:44:67:14:a7:04:e1:cb:0c:19:34:cf:49:43:a1:0e:
         80:76:17:a1:7f:58:2f:bf:b8:2b:d2:cc:ac:30:f2:ff:4a:bf:
         14:d0:30:45:38:1e:59:71:3a:c8:43:42:01:33:98:86:ba:c8:
         82:98:1a:d6:e9:4e:81:0f:84:ec:b5:a0:9f:12:6e:6a:da:fd:
         cc:1e:09:7d:3e:6c:65:b4:27:72:93:34:35:0d:d9:ae:ad:a4:
         74:8f:bb:14:06:db:b7:00:92:b9:2f:8f:9b:94:3d:db:46:87:
         89:ff:ed:31:b1:8a:22:9d:59:23:41:dc:15:98:76:31:47:e2:
         c7:ed:f5:5b:ae:40:5b:7d:e2:c7:b1:02:50:80:0a:14:36:5a:
         88:19:d6:90:9b:9b:d3:50:0f:4f:8a:6d:6f:47:4b:a5:07:35:
         a9:86:85:3e:81:58:0d:f2:4b:93:65:13:78:30:36:58:18:b5:
         dd:52:d0:10:23:27:5a:ed:df:bb:8e:e4:6c:ed:41:85:ea:22:
         c3:bc:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----