Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/tUBTrYZ011PBIw35dhiAvWMq1j4.roa
File:                     tUBTrYZ011PBIw35dhiAvWMq1j4.roa (raw, json)
Hash identifier:          wPlJrNOtTN4kxXSsY5zvRKNMM8YFNcfZddf1CrUZeuk=
Subject key identifier:   B5:40:53:AD:86:74:D7:53:C1:23:0D:F9:76:18:80:BD:63:2A:D6:3E
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       018FBC717D4AF008EF52E220AAE7C4FF799E
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/tUBTrYZ011PBIw35dhiAvWMq1j4.roa
Signing time:             Mon 27 May 2024 23:45:05 +0000
ROA not before:           Mon 27 May 2024 23:45:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        195.93.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 26 Jun 2024 22:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bc:71:7d:4a:f0:08:ef:52:e2:20:aa:e7:c4:ff:79:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: May 27 23:45:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b54053ad8674d753c1230df9761880bd632ad63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:b1:0b:ad:a9:2a:3a:7e:2a:95:4b:91:dc:
                    93:89:e5:90:fa:5f:ba:4d:fe:95:00:d8:aa:38:8b:
                    5b:3e:06:3b:94:ee:5a:c1:51:0d:dd:2a:f7:0a:e2:
                    21:e2:bd:42:f6:b2:87:3c:bc:c0:fe:0a:a2:73:ed:
                    0e:e1:0d:6e:45:cd:80:25:d0:2d:b2:ba:81:9e:ef:
                    19:83:96:a7:11:6b:dd:dd:c5:19:c7:a5:78:e4:31:
                    80:12:76:90:bb:16:39:95:ea:1c:66:58:8d:fe:21:
                    67:ca:73:e9:70:cb:48:f4:d3:03:65:a3:57:6d:aa:
                    ba:73:8c:2d:99:d7:38:ee:d5:28:ff:d8:64:7e:9d:
                    8f:53:09:c9:2f:dc:a1:89:75:d7:e6:99:53:78:96:
                    64:58:75:e5:b1:82:88:37:3c:f2:ba:fe:de:ee:d2:
                    55:1e:b9:c6:cc:35:7a:5b:29:10:60:dd:28:96:af:
                    6a:77:32:34:b8:8a:02:ec:a1:5d:93:bf:8c:43:3c:
                    9c:cd:a8:f1:91:46:d3:05:7e:b8:38:f8:a2:e5:3d:
                    eb:bf:82:f5:2a:89:f0:e0:ad:74:36:06:25:f6:23:
                    2a:54:95:aa:77:11:73:cc:da:86:51:07:36:f4:bb:
                    6c:64:9d:f3:f1:25:52:f3:be:ff:7c:7f:77:67:6a:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:53:AD:86:74:D7:53:C1:23:0D:F9:76:18:80:BD:63:2A:D6:3E
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/tUBTrYZ011PBIw35dhiAvWMq1j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:62:ad:40:ab:62:9f:16:84:5a:f8:ee:6c:d4:f0:cf:7e:64:
         66:21:0b:34:46:cc:07:f6:2d:7f:6a:96:10:fc:ed:24:ee:6c:
         0b:9f:16:54:e1:0e:c3:59:fb:24:43:bc:c3:09:4e:3f:9d:dd:
         0f:b0:04:0b:2d:b1:13:66:e7:29:38:15:24:3a:c3:c0:81:ed:
         f9:e3:d6:4f:f7:3a:e7:ff:9e:fb:4b:1c:db:56:37:ce:47:39:
         b2:ee:df:09:f7:c9:72:09:c5:37:e6:7a:87:d2:82:60:85:8c:
         0f:04:8c:ba:9d:3d:98:c2:e8:90:4b:fc:52:4f:93:04:67:f6:
         db:c5:c8:fd:54:a6:f1:6c:66:23:dd:86:6c:6e:f9:83:81:34:
         2a:6c:c2:07:6d:ad:ae:26:61:45:4d:c9:6b:39:d8:ec:a1:1a:
         f5:66:13:6f:63:87:a5:4d:6a:32:5d:dc:d3:b0:b8:1d:79:27:
         5e:8a:a4:ee:80:8b:f0:17:25:c8:ae:11:d9:23:64:65:21:08:
         5a:e0:35:53:ef:65:65:f0:d5:7f:5f:09:d7:23:8c:65:8f:cd:
         04:42:c8:44:7b:cd:d8:b3:c7:0e:fa:4d:d1:32:2b:84:e3:dc:
         48:72:2c:fe:ae:58:7b:0d:2d:f4:dc:3a:77:80:d6:b9:26:05:
         64:55:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----