Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/PgezIXxXXwgcEFi1N-0t92FIOew.roa
File:                     PgezIXxXXwgcEFi1N-0t92FIOew.roa (raw, json)
Hash identifier:          WFQppTTVVeHAmzQ0qjxyltJepDo72Xqf4XbdHLrMN10=
Subject key identifier:   3E:07:B3:21:7C:57:5F:08:1C:10:58:B5:37:ED:2D:F7:61:48:39:EC
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       0187116026106B4A8D0D8AA561FC82F6CF09
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/PgezIXxXXwgcEFi1N-0t92FIOew.roa
Signing time:             Fri 24 Mar 2023 02:08:46 +0000
ROA not before:           Fri 24 Mar 2023 02:08:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59800
IP address blocks:        185.68.196.0/23 maxlen: 24
                          2a05:19c0::/47 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:11:60:26:10:6b:4a:8d:0d:8a:a5:61:fc:82:f6:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Mar 24 02:08:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e07b3217c575f081c1058b537ed2df7614839ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:fe:11:f9:58:5c:96:52:4d:97:cb:b0:d6:
                    37:21:3f:b2:e2:64:7c:42:a8:a3:22:3a:70:e3:63:
                    d4:bf:12:9f:91:1d:29:d4:61:a4:93:b1:95:42:ee:
                    ac:a8:7b:2d:6b:57:76:58:07:b2:0e:75:9c:d6:4b:
                    9c:7a:08:62:54:0b:01:bc:66:92:fc:3f:fe:87:e9:
                    6d:ed:61:1f:e3:08:0f:7f:b2:90:3c:cb:cd:19:5a:
                    be:fa:db:74:68:28:58:07:4a:20:01:f2:02:ae:07:
                    f7:33:17:62:ee:16:ae:33:1e:f7:3b:06:8b:5e:ba:
                    5b:ab:93:5e:c8:bd:21:98:ad:3d:f8:05:84:15:4f:
                    1c:a8:9c:8f:0b:99:ee:26:d4:08:d5:2d:08:49:d5:
                    e0:c8:61:c7:4a:75:f5:09:8d:a8:2e:c6:dc:95:77:
                    35:bb:40:b0:5d:bd:79:bb:c9:58:95:e5:66:e3:32:
                    61:4b:87:19:4e:b8:eb:d4:45:47:15:ac:87:66:88:
                    36:94:0f:27:60:98:a8:b8:d5:48:55:1d:b8:a9:97:
                    46:a6:53:55:81:a4:99:5a:f5:5b:4a:c6:bb:c4:5b:
                    ad:dc:c4:f6:7e:32:32:6c:b3:e9:3e:d8:c3:92:1e:
                    78:b9:40:81:41:be:7e:c6:10:27:1e:fb:40:1e:dd:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:07:B3:21:7C:57:5F:08:1C:10:58:B5:37:ED:2D:F7:61:48:39:EC
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/PgezIXxXXwgcEFi1N-0t92FIOew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.196.0/23
                IPv6:
                  2a05:19c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:1c:68:1b:e4:f6:6c:e5:3e:c6:b0:67:7c:c3:44:9f:bb:
         ce:3b:a2:bd:c2:5f:b6:b5:54:8f:4b:78:8c:e3:71:d5:24:a1:
         4c:ee:ee:f8:f0:03:4d:fc:25:48:19:67:e8:fc:47:55:c9:13:
         29:6d:37:55:e6:86:85:c2:5e:ff:ee:d8:2a:fd:b8:d6:aa:91:
         eb:59:13:6d:36:b4:d5:03:8a:a5:6c:bd:09:eb:a8:21:cb:02:
         57:df:dd:5a:e7:21:0f:d5:55:79:d1:29:e0:65:f3:18:68:be:
         0e:10:db:cc:be:b6:ba:b0:74:73:d2:df:95:7b:89:41:35:ad:
         8f:28:5c:40:59:5a:b9:c5:e5:01:57:f2:b8:f8:8d:16:43:95:
         de:c0:3b:11:2e:af:57:5a:d9:9e:45:c9:0c:ea:5e:b6:5b:af:
         6a:6e:30:5e:27:2f:de:f0:a4:54:53:db:db:f6:5c:d0:79:c2:
         f0:8d:4b:40:d4:91:08:76:58:5f:b3:f1:40:86:a4:6c:d1:f7:
         03:f0:21:1f:03:f0:25:21:11:7f:80:0d:ae:42:98:fe:c3:25:
         1f:dd:c1:72:55:fa:98:46:19:f6:ae:4f:86:3e:7b:3a:3a:1e:
         a8:33:20:9a:fd:da:a0:37:4f:b1:4c:fe:4e:77:67:d6:63:a4:
         80:91:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----