Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DgnSVvhAS-fYTX41Y7D3aEjxEZI.roa
File:                     DgnSVvhAS-fYTX41Y7D3aEjxEZI.roa (raw, json)
Hash identifier:          YWA+jHL1Dk2zBFtCegHsk9kNtOSjB+kjmdQHAgpRSkg=
Subject key identifier:   0E:09:D2:56:F8:40:4B:E7:D8:4D:7E:35:63:B0:F7:68:48:F1:11:92
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01863FFC5C2A3DFF49F5952EA4A534E18C77
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DgnSVvhAS-fYTX41Y7D3aEjxEZI.roa
Signing time:             Sat 11 Feb 2023 10:19:08 +0000
ROA not before:           Sat 11 Feb 2023 10:19:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200615
IP address blocks:        193.42.60.0/22 maxlen: 22
                          2a09:e683:1::/48 maxlen: 48
                          2a09:e685::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 02 Aug 2023 09:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3f:fc:5c:2a:3d:ff:49:f5:95:2e:a4:a5:34:e1:8c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Feb 11 10:19:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e09d256f8404be7d84d7e3563b0f76848f11192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:94:36:be:7b:cf:5b:c6:28:0a:10:dd:ae:
                    d3:9d:85:a0:64:c4:59:60:ea:4b:10:a9:db:69:7f:
                    3f:ee:25:df:14:aa:fb:e8:6d:b2:4a:1d:b3:e1:90:
                    49:2a:9f:aa:dc:78:71:35:f7:6b:d0:05:29:2d:d0:
                    8d:e4:63:86:23:48:6e:e2:66:e9:e1:a0:ea:43:ba:
                    b9:38:e5:98:41:38:04:bc:ac:05:a9:9e:22:3a:6e:
                    67:0b:5a:48:20:b9:d2:6a:11:f4:8d:45:c1:0e:79:
                    73:f5:39:6b:12:f7:0e:6e:de:eb:16:5e:cb:35:68:
                    f5:d4:ee:cc:1d:ac:16:55:4f:c1:7b:31:e5:a0:48:
                    4a:b9:6b:08:97:3a:69:e4:23:50:71:0d:55:c7:d0:
                    dd:d0:77:06:9b:09:37:43:52:eb:64:69:0c:3c:01:
                    20:04:97:e0:1b:0e:f2:83:d3:55:41:14:2a:59:34:
                    fb:24:3e:40:c8:71:4e:1d:23:52:f3:cc:74:0f:de:
                    e1:fa:a9:f0:2d:63:3c:68:98:1f:7f:ed:e7:59:fd:
                    5e:c5:5d:49:95:2a:2b:1e:bd:f9:84:b5:75:38:bd:
                    68:cb:b4:f6:83:d7:38:97:a2:03:10:66:d5:79:30:
                    d4:dc:94:b3:90:d1:86:a7:0a:b5:54:e3:97:ce:55:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:09:D2:56:F8:40:4B:E7:D8:4D:7E:35:63:B0:F7:68:48:F1:11:92
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DgnSVvhAS-fYTX41Y7D3aEjxEZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.60.0/22
                IPv6:
                  2a09:e683:1::/48
                  2a09:e685::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:1d:cb:99:60:13:82:85:59:a3:3e:25:a0:9f:97:58:68:
         ea:02:94:68:f2:2a:c9:19:84:b8:90:84:9c:48:b4:91:0a:95:
         1e:f2:94:72:26:40:bf:c9:00:e8:63:8e:2e:9a:71:08:4d:11:
         54:5a:7f:33:f3:f9:55:37:4a:0b:55:b6:69:bc:02:62:83:cd:
         f7:f1:8c:f3:f9:a2:ff:fa:f6:17:6b:0f:ff:b1:c3:d1:ad:ac:
         82:31:92:3d:0f:50:46:c6:62:df:6f:e0:f0:3c:c3:f2:c3:44:
         8b:4b:d2:d8:65:fd:74:d2:fc:1b:6e:3a:ca:63:b6:e3:c9:e4:
         be:61:0d:08:e7:fb:8a:61:0e:a5:fe:37:fd:fd:66:0d:6f:e2:
         8d:e9:3d:54:48:93:d9:bb:cb:d2:0b:be:f0:8e:aa:77:2a:17:
         c3:5c:50:13:de:ac:39:ee:5e:e2:96:d5:8c:41:ae:03:1b:5f:
         e5:b1:df:d2:b9:af:cb:97:f4:99:b1:b1:7f:91:94:4c:df:4e:
         38:1a:c4:ab:4c:4b:ec:db:fe:95:01:70:17:c8:7b:f5:0d:18:
         19:1c:bc:8a:06:97:31:86:8e:97:c0:42:aa:91:84:e6:60:cf:
         22:90:f5:60:21:50:a1:f8:a8:dd:2f:ed:98:43:70:ee:e5:0c:
         ee:57:24:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----