Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/GkcRb9exuVBCzZFPlclWsMiHlYU.roa
File:                     GkcRb9exuVBCzZFPlclWsMiHlYU.roa (raw, json)
Hash identifier:          6vdOGzIAn2qWev+2swGWoMcvZWi9zWR0MxKOLUElcMU=
Subject key identifier:   1A:47:11:6F:D7:B1:B9:50:42:CD:91:4F:95:C9:56:B0:C8:87:95:85
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       01856EEFCEA22139D0D97693DBCD77AC52D2
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/GkcRb9exuVBCzZFPlclWsMiHlYU.roa
Signing time:             Sun 01 Jan 2023 20:04:47 +0000
ROA not before:           Sun 01 Jan 2023 20:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59829
IP address blocks:        212.6.50.0/24 maxlen: 24
                          2a0c:2f40::/29 maxlen: 29
                          2a0c:2f43::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:ce:a2:21:39:d0:d9:76:93:db:cd:77:ac:52:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: Jan  1 20:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a47116fd7b1b95042cd914f95c956b0c8879585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:6f:65:d0:8f:d8:a8:44:d7:b2:e4:d2:00:
                    bc:cf:ff:6c:bd:8e:28:b0:72:90:62:ae:09:63:1f:
                    62:ea:d9:15:fe:f8:f3:65:a9:55:c5:9d:60:61:ae:
                    d8:37:fc:84:fc:93:00:0a:d6:69:c8:2b:d1:2a:3e:
                    fe:c1:a8:7c:6d:f1:55:95:19:de:26:ae:ae:c0:f7:
                    2e:b2:2f:da:7c:04:9e:9b:b8:8f:54:c9:0f:4e:7e:
                    83:f3:84:16:75:db:72:32:97:0e:38:b8:2b:99:dd:
                    f7:4b:d3:46:5e:09:99:2d:00:70:bc:45:db:fd:fd:
                    f9:a3:c5:64:5c:60:02:70:b3:49:91:7b:39:4a:b4:
                    14:1b:b6:0c:f1:86:02:75:61:7a:70:03:bb:ff:03:
                    3a:8e:56:3e:24:48:c8:f1:1d:09:74:49:46:f2:df:
                    6d:f4:d5:1c:ea:0b:03:ac:71:fb:66:e3:5c:f9:a4:
                    1e:cd:5f:35:6e:37:73:b6:b8:ee:89:87:8e:9f:47:
                    ce:54:4f:71:23:61:c7:5f:43:97:4d:f3:b1:2c:e4:
                    44:bb:c0:bc:f0:bf:2d:db:90:31:f9:c9:8c:6d:4d:
                    07:25:53:ef:90:93:70:b9:1e:1a:e0:19:b8:6e:7b:
                    e7:64:f0:36:18:8c:37:1a:50:61:0c:ee:94:45:a8:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:11:6F:D7:B1:B9:50:42:CD:91:4F:95:C9:56:B0:C8:87:95:85
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/GkcRb9exuVBCzZFPlclWsMiHlYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.50.0/24
                IPv6:
                  2a0c:2f40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:03:48:b4:34:88:e3:7d:31:56:13:0a:9a:64:00:8e:bb:
         77:93:32:06:19:ec:da:b9:e9:40:c1:73:93:aa:60:6d:37:12:
         07:75:83:a9:76:08:e1:96:33:3f:23:f0:66:2a:9e:c7:1c:a4:
         7b:0c:16:de:a1:83:91:4a:fc:d5:53:7f:01:e4:90:09:b3:7d:
         1f:3b:04:fb:0e:72:21:bf:ca:04:58:8f:82:d7:a4:b2:f2:12:
         7e:d6:19:6f:16:e8:a9:20:fd:0c:5c:51:df:7e:2d:37:fa:b5:
         52:46:9a:32:78:35:60:76:4a:89:d6:a8:28:b4:fd:f4:34:f8:
         0d:df:3f:f6:49:8c:0c:ef:68:5e:2e:ac:4d:76:39:da:7e:b4:
         bb:13:0e:9f:6c:1e:3f:62:f7:cc:d4:f3:5a:aa:0b:d5:cf:43:
         e1:07:5b:a5:4b:d4:10:1b:f7:4b:68:90:00:16:22:d7:a0:88:
         e1:33:42:5e:64:d5:85:81:aa:c0:d8:b7:3a:9a:ae:f5:74:2e:
         49:3c:f9:52:6c:ce:b8:5f:3f:1f:a5:2c:ba:7e:63:0d:4a:67:
         f8:57:90:8d:91:c8:46:60:63:e2:13:99:e2:1e:00:97:f6:1a:
         6e:71:cb:0f:c0:e4:6a:34:15:37:08:84:09:5a:18:2e:61:e3:
         dc:cc:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----