Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/XTdQKF59l6aelwSALg0uq9gVc3I.roa
File:                     XTdQKF59l6aelwSALg0uq9gVc3I.roa (raw, json)
Hash identifier:          T1LCqepQ5Qt4BlbW5NV6+PbeGuRaOjm9gSSm5pmuC9w=
Subject key identifier:   5D:37:50:28:5E:7D:97:A6:9E:97:04:80:2E:0D:2E:AB:D8:15:73:72
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       0185704BF169AFE5BA8BE962BF318153EFDD
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/XTdQKF59l6aelwSALg0uq9gVc3I.roa
Signing time:             Mon 02 Jan 2023 02:25:03 +0000
ROA not before:           Mon 02 Jan 2023 02:25:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34686
IP address blocks:        91.216.32.0/24 maxlen: 24
                          2001:67c:1084::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 02 Feb 2023 13:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:4b:f1:69:af:e5:ba:8b:e9:62:bf:31:81:53:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Jan  2 02:25:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d3750285e7d97a69e9704802e0d2eabd8157372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:31:79:1c:f6:40:3a:28:bc:6b:1b:e2:8e:
                    f8:a4:2e:3d:ae:38:ca:6f:bf:7d:48:0d:f5:6d:6b:
                    f3:22:39:2a:2d:1c:cf:7f:cf:78:fd:b2:2f:8b:22:
                    73:1a:02:76:ab:ed:7a:5e:13:39:49:be:2a:25:e8:
                    61:f0:db:7d:f8:71:3e:8d:77:7a:1c:16:ad:14:0a:
                    f8:a1:a8:92:a9:48:19:ee:21:b3:f1:b9:ad:57:a8:
                    ca:47:9c:e5:6b:81:c9:9e:2a:7c:3c:fc:7d:1b:1c:
                    8d:46:b1:b7:7d:a1:47:0a:ec:34:83:44:56:2d:ba:
                    dc:13:5f:58:4c:66:34:63:2e:6a:01:78:62:ac:34:
                    f5:29:1b:8e:22:39:dd:8a:b7:a7:62:47:9b:ce:d7:
                    10:f7:62:a7:27:5f:b8:fa:25:9b:a2:03:60:ea:7a:
                    25:f4:4a:2f:82:61:b7:f4:91:5f:35:4a:3f:06:fb:
                    fb:b0:9a:60:e1:1e:a7:04:f2:40:9d:93:50:94:59:
                    0b:ab:96:71:19:e3:43:9a:a5:75:c7:8e:5f:79:d2:
                    a4:f3:f1:69:2c:bc:6f:e8:84:9e:3f:f3:1a:5b:9c:
                    8a:28:de:ab:04:5d:cd:1a:51:05:77:d3:05:44:48:
                    9f:a6:98:bb:3e:ed:d0:4e:89:51:07:f0:24:e7:51:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:37:50:28:5E:7D:97:A6:9E:97:04:80:2E:0D:2E:AB:D8:15:73:72
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/XTdQKF59l6aelwSALg0uq9gVc3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.32.0/24
                IPv6:
                  2001:67c:1084::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:30:4d:43:92:6f:e4:8f:7f:4e:bd:f5:5e:21:3b:28:a3:
         d3:d7:b5:cf:6f:ed:b3:e0:ce:11:3f:b0:fc:38:ec:e5:25:4a:
         04:95:c6:7d:b3:c3:92:77:a1:31:a0:b7:d6:7b:69:87:a8:17:
         e4:90:13:2b:f7:49:4c:a0:80:c8:ef:c2:5b:41:c9:dc:f4:37:
         1d:e1:1a:ba:85:80:71:6e:28:5a:9e:32:44:cb:47:21:51:b6:
         57:e2:cd:94:e8:6c:4b:35:e5:24:d9:d0:ad:f9:58:cd:66:94:
         55:bc:e0:aa:21:f5:1a:19:c7:de:11:9c:ba:19:e7:03:08:ed:
         c2:b2:65:99:d1:f4:55:c0:30:e2:5e:e0:ba:d1:4c:44:85:ec:
         3c:9a:71:11:31:3e:ae:e2:53:a1:70:43:89:cd:46:4b:fc:5e:
         c2:39:44:24:88:9f:55:d1:a0:6e:54:b5:40:e8:4b:89:61:03:
         c9:f1:94:3d:25:ed:35:ea:b4:30:63:77:58:5c:6b:75:e3:d5:
         30:06:08:fe:6d:61:af:3e:0d:2d:7d:4e:e8:e2:14:89:37:7e:
         cc:8c:af:00:d1:15:cb:d7:ea:2e:cf:e3:0d:7a:ec:50:fb:1c:
         ef:7f:04:9e:4e:43:3b:cd:95:c5:b9:8d:d8:7d:56:f3:f4:75:
         3b:f6:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----