Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa
File:                     AAC0BHkjzJqfkAmuxxX213CiLsI.roa (raw, json)
Hash identifier:          N10g9RqjsRByC6owhYWMulsSIMARwy4r6zLoZuAmcJk=
Subject key identifier:   00:00:B4:04:79:23:CC:9A:9F:90:09:AE:C7:15:F6:D7:70:A2:2E:C2
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       01870F9AF81EB7866EC91625AFAD3F6C4ED5
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa
Signing time:             Thu 23 Mar 2023 17:53:46 +0000
ROA not before:           Thu 23 Mar 2023 17:53:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59802
IP address blocks:        185.68.198.0/23 maxlen: 23
                          2a05:19c0:2::/48 maxlen: 48
                          2a05:19c0:2::/47 maxlen: 47
                          2a05:19c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 Mar 2023 00:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0f:9a:f8:1e:b7:86:6e:c9:16:25:af:ad:3f:6c:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Mar 23 17:53:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0000b4047923cc9a9f9009aec715f6d770a22ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:03:d0:c0:55:ae:22:68:2f:c5:63:e1:37:
                    9f:b1:1e:44:72:71:2b:6a:a9:a6:69:61:a3:e4:40:
                    69:5d:4e:a5:b9:21:f0:d2:c1:5d:81:67:37:76:fb:
                    bc:9c:eb:35:44:55:95:04:62:8a:4f:2c:54:00:b1:
                    92:03:56:d3:53:a9:33:90:d2:42:c7:37:04:47:1a:
                    0d:47:91:0b:b6:11:84:dd:0b:92:0a:cc:d4:9b:67:
                    82:b1:1f:13:de:f7:57:2a:09:cc:d2:a6:d0:c0:1d:
                    d2:d7:2c:52:51:85:7e:ec:71:9d:8f:77:a4:b8:e2:
                    77:31:1e:7c:35:54:93:10:c8:92:6a:07:9c:69:9e:
                    a8:9d:79:a6:db:ec:e9:8a:6c:28:29:57:05:82:e7:
                    a7:da:a9:4e:92:db:9e:5b:8c:56:a0:99:7e:e8:36:
                    2a:6b:87:50:a9:7a:da:63:92:e0:a4:1c:e7:6f:99:
                    b2:45:d2:d8:12:6b:ea:08:e3:b6:24:e7:ba:ec:af:
                    cd:0e:d7:48:00:11:71:9b:d6:41:38:38:82:8b:ba:
                    50:e2:cd:8e:b4:10:e6:97:72:aa:c1:20:1f:74:ec:
                    b3:7e:60:ba:9d:80:23:25:6f:dd:58:fe:8b:71:e9:
                    16:bf:da:30:90:6b:fe:6e:f4:7f:56:35:61:68:3f:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:B4:04:79:23:CC:9A:9F:90:09:AE:C7:15:F6:D7:70:A2:2E:C2
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/AAC0BHkjzJqfkAmuxxX213CiLsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.198.0/23
                IPv6:
                  2a05:19c0:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:f8:19:24:09:b1:ff:e5:e7:14:b2:fa:60:dd:30:2f:dd:
         0e:cc:09:de:16:de:19:89:5f:ab:dd:92:61:f1:a0:e1:d9:17:
         aa:2c:1d:26:90:61:7d:24:04:58:15:db:9f:12:49:8a:9d:cd:
         e3:00:44:52:ce:75:b9:93:92:bf:57:f3:cc:e7:d4:62:be:00:
         1c:c5:1e:96:6a:23:47:6a:28:29:2a:f5:a5:cf:49:e1:7f:27:
         1e:4e:24:f8:08:55:fe:9b:78:dc:c9:16:83:7c:89:40:36:51:
         e0:cd:9e:cd:3d:7c:e2:88:be:78:66:9b:9a:53:f7:01:d3:9a:
         9a:10:22:03:9f:ca:d3:c4:4d:5c:eb:75:ee:86:30:e4:05:26:
         e2:be:ae:d9:c6:e7:13:60:ff:d0:15:dd:77:12:10:3d:80:00:
         5c:9c:e2:b0:21:2e:f2:10:c5:8e:0c:5b:e6:80:43:55:5a:5f:
         c1:f7:18:d3:35:16:84:37:a7:fa:cb:0e:cc:11:57:c0:8e:fc:
         85:dc:7d:92:f7:af:0a:0c:b4:85:2c:aa:12:a7:45:e3:81:69:
         09:bd:3c:f8:35:b1:4e:19:7a:df:a5:a3:a8:e3:fe:17:b1:46:
         35:6b:ee:81:b8:c4:38:28:0f:7c:35:13:9e:a9:4a:be:da:4d:
         fa:5a:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----