Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa
File:                     _badFwk_qMPgkd7NhHo-buRkh6U.roa (raw, json)
Hash identifier:          fm43lHTlTLJJ8G9KQbJV3Pa1m3F7IDLaN7ausygi9kg=
Subject key identifier:   FD:B6:9D:17:09:3F:A8:C3:E0:91:DE:CD:84:7A:3E:6E:E4:64:87:A5
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       01870C2CF9BC171FFDC653068328CF665BDD
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa
Signing time:             Thu 23 Mar 2023 01:54:46 +0000
ROA not before:           Thu 23 Mar 2023 01:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59802
IP address blocks:        2a05:19c0:2::/48 maxlen: 48
                          2a05:19c0:2::/47 maxlen: 47
                          2a05:19c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 23 Mar 2023 17:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0c:2c:f9:bc:17:1f:fd:c6:53:06:83:28:cf:66:5b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Mar 23 01:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdb69d17093fa8c3e091decd847a3e6ee46487a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:c0:52:9c:63:7c:38:b9:74:63:2c:d9:bb:
                    9c:14:b3:c1:8c:94:45:c9:3f:03:54:cd:e2:1e:24:
                    f0:7e:67:10:20:97:8e:8c:32:a5:42:02:86:a5:5b:
                    93:25:12:45:0f:70:d2:d5:fc:54:46:bb:8d:ff:ac:
                    93:33:2b:d5:97:0f:a0:de:1e:18:b1:92:0a:7d:68:
                    15:fe:f2:a5:f1:df:68:3c:84:ef:3d:b5:56:ca:f9:
                    25:5d:8c:09:33:48:a1:ba:a4:57:b6:d5:e3:32:88:
                    41:ba:5d:ad:41:52:5e:cf:b7:27:51:70:cb:66:34:
                    bf:a7:e8:5d:62:8a:b2:6f:86:c4:d8:bd:93:fd:1e:
                    06:da:d4:61:4a:29:6c:47:9b:9f:45:8c:64:77:71:
                    4a:1c:26:f0:9b:9a:a2:aa:63:65:99:09:79:0e:91:
                    3a:4b:d2:2b:dc:9a:a3:44:87:22:e9:d5:6b:b7:35:
                    27:12:8c:3b:35:6b:87:44:18:7b:aa:75:75:3b:e1:
                    d3:db:82:5b:ba:ee:06:0d:ea:78:48:f6:a9:38:f8:
                    35:20:91:c3:ad:ea:91:da:a5:ac:2b:ff:c5:81:60:
                    a9:5e:6a:15:fc:57:ea:8f:ce:19:fa:4e:71:d4:4d:
                    2e:a8:1e:03:4f:40:35:15:24:b0:41:4a:f6:1d:1e:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:9D:17:09:3F:A8:C3:E0:91:DE:CD:84:7A:3E:6E:E4:64:87:A5
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/_badFwk_qMPgkd7NhHo-buRkh6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:19c0:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:63:30:02:e6:34:6f:cb:ae:09:27:e0:23:23:4d:63:aa:
         f5:0a:03:b2:c0:94:c1:60:d2:2c:38:6b:f2:2c:57:6e:c5:49:
         c1:d5:0d:3a:94:81:df:46:fb:31:f7:84:92:33:e3:c3:5c:7e:
         f3:3a:f6:52:d5:60:61:71:86:5c:77:06:ed:08:31:fb:a1:f9:
         a8:6f:33:e2:13:39:fd:f4:53:42:5a:29:0e:76:f6:e1:fd:4a:
         0c:e9:37:e0:2b:e0:f8:fe:17:aa:11:6c:8e:69:0d:37:90:67:
         50:d4:55:21:b7:57:d5:c0:68:ba:48:90:f9:65:cc:2e:37:b6:
         21:83:c9:48:e2:4c:19:28:90:71:18:8f:58:55:f3:80:1f:9c:
         96:98:f6:b1:6e:b3:63:98:31:89:ad:cb:cb:ea:63:5a:22:50:
         bf:af:8a:94:3a:ec:b0:cb:e3:59:e3:d8:1c:3d:e4:e5:f7:64:
         13:80:22:1f:a5:1c:c0:a5:c1:86:96:40:04:ec:10:c7:68:ca:
         6b:17:8a:10:02:39:a4:20:89:2f:1d:ae:d1:48:ec:b8:f8:17:
         f7:5a:6c:cd:4c:b6:af:1d:08:99:19:fd:ef:35:b8:c9:dc:47:
         9a:d4:e1:3a:b5:57:0a:5b:8e:1e:62:04:60:a5:fe:ff:a0:8a:
         7e:3b:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----