Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/W24DWNui57H1RScdv-4DAa5dOFE.roa
File:                     W24DWNui57H1RScdv-4DAa5dOFE.roa (raw, json)
Hash identifier:          syvYKc0DvEPexYNWwzLbZxj/G3mw4JdrR8qo4ZD4kxU=
Subject key identifier:   5B:6E:03:58:DB:A2:E7:B1:F5:45:27:1D:BF:EE:03:01:AE:5D:38:51
Certificate issuer:       /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial:       018C437649CAD68A6249610CDD0DD70187E9
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/W24DWNui57H1RScdv-4DAa5dOFE.roa
Signing time:             Thu 07 Dec 2023 08:47:54 +0000
ROA not before:           Thu 07 Dec 2023 08:47:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59748
IP address blocks:        185.73.156.0/22 maxlen: 22
                          2a03:43e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:76:49:ca:d6:8a:62:49:61:0c:dd:0d:d7:01:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
        Validity
            Not Before: Dec  7 08:47:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b6e0358dba2e7b1f545271dbfee0301ae5d3851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:80:81:9f:ed:0f:91:53:ce:67:2c:c8:e6:
                    07:71:2c:7d:7b:1e:91:73:5f:9e:4b:ee:0b:18:3f:
                    89:0d:77:eb:6d:8f:83:08:0d:c9:66:f4:3e:da:63:
                    c0:3e:ab:54:17:fe:33:54:5c:4e:76:0e:4d:5b:81:
                    81:b9:8a:79:9b:ba:36:18:4b:cf:53:39:ae:8f:9d:
                    f7:f5:0c:bc:38:af:e1:3d:4d:60:2a:d9:48:b4:6a:
                    2e:ab:9a:e4:39:23:2e:f3:e4:1f:31:77:2d:60:e8:
                    61:dd:23:17:e4:19:5e:ac:86:4c:a5:b1:a6:f4:45:
                    29:b5:2f:2a:78:52:a0:e3:ee:c0:3d:c1:dc:31:ef:
                    4b:7f:24:c8:b8:3a:75:f8:70:66:b8:a7:a5:6d:23:
                    49:cb:71:f4:40:37:64:af:54:cb:e6:4e:53:a0:0e:
                    8e:61:af:89:3b:8e:00:82:5b:e7:67:de:6c:e5:56:
                    c9:64:f2:ee:cd:a4:03:cf:66:74:f9:ca:27:7a:19:
                    4b:7b:d1:56:e0:29:42:f7:5a:bf:45:f3:46:1a:56:
                    a3:63:34:3f:32:25:c5:20:f5:72:ad:68:c1:3c:92:
                    18:89:1e:6d:4b:15:62:34:d9:c2:f3:5d:76:5b:80:
                    89:ea:9d:b6:70:42:62:4b:ea:56:f6:c2:39:62:9b:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:03:58:DB:A2:E7:B1:F5:45:27:1D:BF:EE:03:01:AE:5D:38:51
            X509v3 Authority Key Identifier:
                keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/W24DWNui57H1RScdv-4DAa5dOFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.156.0/22
                IPv6:
                  2a03:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:24:b0:e8:85:f0:a9:18:d8:61:bc:6e:2b:00:bb:1e:7f:0f:
         a1:58:fc:9a:30:94:14:5a:23:4d:e3:75:3b:bc:a7:17:e7:b2:
         de:4a:56:b5:55:4f:b0:9e:58:74:c4:32:61:38:18:08:15:5f:
         87:94:fb:3e:c6:9b:91:c0:04:95:81:10:ac:f1:a5:07:58:93:
         82:a1:e4:ba:73:89:ee:d2:97:b1:94:5b:b7:10:fa:37:30:02:
         d2:c5:18:3f:15:d8:f8:c2:dd:35:a0:23:5f:88:04:a7:08:4a:
         97:be:ba:49:1d:5e:fa:37:ae:66:b0:90:26:42:cf:96:f3:2e:
         df:27:42:9a:9b:c2:1d:1b:bb:2d:24:28:75:52:27:fa:43:66:
         29:c2:74:8a:6d:a1:d3:77:c6:03:e5:ef:26:af:58:28:f4:b2:
         86:af:be:d3:36:96:da:99:db:0a:92:d0:bb:69:57:ab:20:07:
         e5:5b:d1:7c:34:b3:1c:9e:77:7b:54:8d:ce:d0:61:14:2c:48:
         37:15:1c:b5:48:46:84:7b:43:cb:2f:88:1b:dd:ac:22:27:e6:
         0d:44:12:3e:a0:6e:85:9d:2d:3d:3c:23:f7:ad:cb:6e:7b:f7:
         5c:d6:0f:1b:2a:ff:44:39:5b:32:c1:d9:22:ab:cf:b1:1d:c4:
         5a:29:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----