Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WWMTLFpNhPT2Hh8LEXfeZd7GgeI.roa
File:                     WWMTLFpNhPT2Hh8LEXfeZd7GgeI.roa (raw, json)
Hash identifier:          /qDzcEN1eGFeIAMjwDGWphjS7PsEJvbreBzYviBgKk0=
Subject key identifier:   59:63:13:2C:5A:4D:84:F4:F6:1E:1F:0B:11:77:DE:65:DE:C6:81:E2
Certificate issuer:       /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial:       01856DA6530E6CFABC97C941E41A6040ED74
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WWMTLFpNhPT2Hh8LEXfeZd7GgeI.roa
Signing time:             Sun 01 Jan 2023 14:04:54 +0000
ROA not before:           Sun 01 Jan 2023 14:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396535
IP address blocks:        185.151.204.0/24 maxlen: 24
                          2a0b:14c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 08:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:53:0e:6c:fa:bc:97:c9:41:e4:1a:60:40:ed:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
        Validity
            Not Before: Jan  1 14:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5963132c5a4d84f4f61e1f0b1177de65dec681e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:36:4f:b7:78:cd:9f:e7:ba:78:27:ec:7d:
                    1e:ab:2f:c6:25:9e:07:ef:fd:bf:6e:8f:4e:86:d2:
                    4c:4d:2b:e0:3f:33:a4:16:4b:c8:0f:09:1c:ac:f7:
                    90:ca:0f:2f:84:fe:fb:a3:7f:8e:24:3a:3b:b0:e1:
                    3c:ce:11:28:88:ec:8d:43:5e:39:56:01:c3:f8:5e:
                    ad:c7:f7:90:d7:eb:09:e6:73:48:26:a1:39:63:dc:
                    0b:6a:6a:c2:a7:65:da:28:f6:0a:4f:6b:86:3c:20:
                    4d:b1:6a:2d:48:06:25:dd:26:64:d5:23:13:c2:59:
                    66:0d:c9:08:0b:b5:af:2d:06:96:12:96:c5:1c:1b:
                    e9:85:50:dc:a6:a5:62:1a:a2:74:4e:c9:a9:20:f4:
                    24:f9:f8:88:33:41:e5:d6:f6:fa:9d:9c:1a:da:83:
                    68:49:fe:a0:94:3c:2e:00:49:74:38:00:08:c9:76:
                    7a:b1:5c:4e:48:7d:33:7f:b1:0c:09:44:61:a8:13:
                    b6:83:03:d9:56:69:85:a0:b1:b8:d5:48:0e:71:f1:
                    90:15:60:2f:92:f1:cc:cb:ea:cb:81:67:66:ce:35:
                    84:2a:52:8e:42:66:70:9e:d2:f5:78:1f:5d:fa:99:
                    d8:ff:8e:6d:d5:4f:0c:3a:5a:ea:7e:38:10:43:78:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:13:2C:5A:4D:84:F4:F6:1E:1F:0B:11:77:DE:65:DE:C6:81:E2
            X509v3 Authority Key Identifier:
                keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/WWMTLFpNhPT2Hh8LEXfeZd7GgeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.204.0/24
                IPv6:
                  2a0b:14c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:26:df:c3:f7:54:da:ca:04:40:20:87:cf:dc:39:94:a9:b1:
         2d:7e:47:6d:ea:84:c5:15:8d:d8:6b:71:9a:62:1d:15:7c:4d:
         3d:b0:2b:3b:ad:e6:df:3a:2e:0e:59:dd:6f:d8:d0:6b:3b:06:
         eb:6e:ce:fa:c2:ee:bc:1c:9d:45:41:fe:29:be:35:ed:28:82:
         36:94:e8:e1:1a:8d:84:46:cb:8a:89:df:36:cd:92:51:8f:7d:
         78:43:7a:c2:bc:24:e8:99:49:61:a9:44:43:91:d8:1d:de:16:
         3d:63:35:cf:74:3e:89:3f:79:50:9d:76:92:26:83:bf:b4:88:
         31:f2:43:66:70:94:0d:ef:c1:38:cd:67:1b:1f:6f:b2:bf:43:
         5a:ee:86:ae:b1:0a:6b:e1:1d:39:86:84:35:c0:83:5d:40:cd:
         81:f5:db:71:a9:eb:3f:2c:56:3b:ca:4f:d7:64:e5:c5:a9:71:
         fe:a9:71:28:a8:52:67:fc:a6:a6:da:77:9b:c5:2e:ae:a0:e0:
         bc:0b:53:1f:95:2b:94:a5:04:aa:9e:04:60:31:8a:9b:a7:72:
         6b:a3:49:0e:e7:dc:9d:67:52:30:9d:c5:39:1e:97:92:8f:d3:
         02:1c:c0:d3:9e:95:38:ca:89:ad:e0:3f:ea:ff:e6:10:dc:3f:
         5e:68:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----