Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa
File:                     vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa (raw, json)
Hash identifier:          xCN7LvhnDCJtZjTv2mzrCtPIHElPhkB/aI+AQ9iHQN4=
Subject key identifier:   BF:0C:BB:93:A3:D1:01:89:34:14:C8:4E:A0:57:C1:19:AF:DF:1C:F0
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       0187116110AFB2FEB4FEDD4CA351660CECFC
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa
Signing time:             Fri 24 Mar 2023 02:09:46 +0000
ROA not before:           Fri 24 Mar 2023 02:09:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59802
IP address blocks:        185.68.198.0/23 maxlen: 24
                          2a05:19c0:2::/47 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:11:61:10:af:b2:fe:b4:fe:dd:4c:a3:51:66:0c:ec:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Mar 24 02:09:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf0cbb93a3d101893414c84ea057c119afdf1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:cc:37:ed:c8:87:4f:b9:08:31:49:ba:d7:
                    8e:9e:ab:00:1d:d0:92:bf:67:b1:58:e7:a6:20:5c:
                    d6:0c:8d:d2:e9:71:1e:36:e1:53:39:27:8f:3d:b4:
                    9f:e4:0b:bb:67:ea:40:56:74:5b:6b:9e:ce:20:27:
                    15:51:64:c8:28:c8:93:5e:ce:65:d7:35:8c:11:53:
                    a7:cf:40:39:5f:de:59:49:73:72:f1:27:fe:79:86:
                    6d:87:2d:ed:99:dd:73:4c:86:47:6c:dd:ca:73:2d:
                    b2:3c:5a:f2:c3:f2:e6:a1:1f:18:ec:de:3a:c1:c9:
                    e3:db:20:25:99:a0:a3:7c:79:ff:ce:d1:a1:99:6f:
                    64:59:5a:64:41:9d:ae:e1:8f:7b:d3:70:2c:af:dd:
                    9f:9f:26:95:09:d1:84:80:51:8a:8f:36:5a:04:ce:
                    69:68:8f:3f:a6:fd:bc:9f:02:8b:81:a2:c2:e2:a8:
                    6c:46:53:c7:95:0d:84:68:82:76:93:28:6f:62:d1:
                    63:c7:d5:f4:18:e5:73:fe:67:f6:c7:16:6c:f5:bc:
                    60:4f:3d:c0:7c:ed:70:5b:be:cc:34:1b:59:27:48:
                    bd:a3:e3:f0:29:9f:cb:f2:1e:e8:04:bc:98:08:fd:
                    81:3d:2b:42:8d:f6:4a:d0:16:15:46:cd:04:a4:4c:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:BB:93:A3:D1:01:89:34:14:C8:4E:A0:57:C1:19:AF:DF:1C:F0
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/vwy7k6PRAYk0FMhOoFfBGa_fHPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.198.0/23
                IPv6:
                  2a05:19c0:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:46:16:36:c5:5a:ad:f4:e2:48:2d:eb:69:45:22:dc:e8:
         0f:4c:59:85:8a:83:cc:4e:82:c9:9c:04:8c:a9:df:99:ee:c3:
         8e:a1:95:d2:f3:03:6d:fb:ed:24:f2:5b:8e:f6:5c:c8:27:c1:
         9f:fe:b8:cb:87:66:20:b0:ca:5e:3e:38:45:c3:c5:02:5e:b3:
         6a:c0:f4:61:58:cb:df:54:a1:76:28:93:ad:5a:9f:63:9b:59:
         cb:31:4f:3f:60:c7:63:ee:67:db:0c:0f:34:ac:96:94:66:cc:
         4c:08:6b:84:98:aa:08:b1:91:b1:fc:25:1c:28:59:3b:13:9b:
         7d:c8:6b:fe:a7:fb:8f:00:f0:f1:6a:88:a0:35:f7:e2:09:92:
         f1:f3:e4:46:12:bf:0b:80:f3:5a:9e:ff:22:b7:60:14:78:96:
         74:ef:a7:e9:4a:56:08:23:04:3a:49:4e:1f:68:b4:38:da:a6:
         28:61:d9:d5:5d:b6:c7:bd:d2:0f:29:74:a3:fd:c5:a5:6d:ee:
         8f:6d:11:2d:5c:f0:d7:56:67:b5:e0:08:a8:9d:c8:3c:d4:3f:
         6b:d5:52:fe:7f:70:c2:23:f7:f3:01:87:2a:b7:3f:4a:3c:f1:
         6e:31:81:54:b8:e0:97:72:44:1d:61:a3:65:7c:f5:a0:7a:72:
         d7:af:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----