Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/j03pWSwaQ3_9_QxnrfMTcE4Lm0w.roa
File:                     j03pWSwaQ3_9_QxnrfMTcE4Lm0w.roa (raw, json)
Hash identifier:          z+ff/IeePHEOguMnKglAKsDuygSTzRyilLpjyKufPB8=
Subject key identifier:   8F:4D:E9:59:2C:1A:43:7F:FD:FD:0C:67:AD:F3:13:70:4E:0B:9B:4C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       01856F4B7843BDE7AD80FE48EFB6B3D42197
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/j03pWSwaQ3_9_QxnrfMTcE4Lm0w.roa
Signing time:             Sun 01 Jan 2023 21:44:54 +0000
ROA not before:           Sun 01 Jan 2023 21:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35782
IP address blocks:        82.150.144.0/24 maxlen: 24
                          2a02:10:104::/48 maxlen: 48
                          2a02:10:105::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:78:43:bd:e7:ad:80:fe:48:ef:b6:b3:d4:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jan  1 21:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f4de9592c1a437ffdfd0c67adf313704e0b9b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:b2:6e:0b:af:4c:7b:c5:68:2d:58:c0:f6:
                    92:c9:62:56:75:a4:cd:5e:3a:c4:e7:44:a9:d7:62:
                    48:5a:89:f8:0c:2f:2d:89:d0:08:01:a0:fe:a7:2c:
                    73:c8:90:d8:8b:81:df:f3:ce:6c:94:d9:e1:b3:2e:
                    c4:20:f6:37:42:bc:3c:6d:74:0d:c0:c8:16:e6:1a:
                    20:25:5c:58:c5:4a:4c:13:dd:d4:65:f5:f3:26:bc:
                    50:5d:e8:5b:a8:d2:cf:25:b7:8f:99:91:f0:34:ee:
                    99:dc:2e:2b:86:93:f3:e9:97:54:3f:e7:ec:49:12:
                    53:a5:47:c6:38:cc:b3:2a:9c:3d:f1:47:6e:4c:69:
                    73:40:eb:f5:41:7a:0b:96:44:b0:64:83:cb:db:81:
                    d1:19:b3:70:02:37:a2:d9:06:85:cf:c6:92:54:83:
                    0a:24:8c:de:37:43:76:87:75:db:30:cb:90:5a:77:
                    b7:2c:07:3c:da:32:0a:43:c8:fe:88:62:4e:97:2d:
                    50:17:e9:1b:1c:e7:e4:80:84:04:70:c8:22:cc:ea:
                    52:52:95:7b:a5:5f:3d:3c:58:b9:ca:a9:70:84:2f:
                    e8:e6:ae:2a:62:87:2d:ec:f1:a7:f4:f9:3b:0c:15:
                    be:cd:73:63:5f:2c:8e:37:49:75:ea:58:79:ea:ac:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:E9:59:2C:1A:43:7F:FD:FD:0C:67:AD:F3:13:70:4E:0B:9B:4C
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/j03pWSwaQ3_9_QxnrfMTcE4Lm0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.150.144.0/24
                IPv6:
                  2a02:10:104::/47

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:8c:a5:6a:ef:88:00:58:c3:89:de:c0:b8:a4:a3:20:ed:
         90:5e:2d:2a:ae:e5:aa:2e:9f:7b:09:d4:65:9d:43:d1:5b:e2:
         a2:07:e3:ee:09:67:25:50:ed:3c:fb:19:7d:0f:ea:0b:3e:be:
         29:b7:ff:47:d7:39:50:8c:23:60:19:c2:a7:40:85:c3:87:7a:
         79:63:ca:12:21:c6:e9:c6:22:7b:17:60:a4:2a:fb:c8:e5:f2:
         17:03:ba:74:8d:d6:89:2c:3d:91:10:39:af:6e:8c:5f:71:61:
         08:33:f3:63:e9:6f:85:f6:36:9e:c7:8e:3d:d8:87:dc:44:26:
         c0:b5:f2:54:ea:38:01:f2:41:4a:3e:24:2f:7f:85:d8:b7:0d:
         a5:91:34:e3:43:12:11:cb:47:2a:e2:81:34:b4:36:2e:14:2a:
         83:2d:a0:3e:dc:28:bc:bc:66:53:42:52:28:29:dc:42:d1:0f:
         82:95:36:1a:2a:44:30:28:82:10:2c:20:22:41:85:b4:02:79:
         ed:ea:35:a3:36:2f:28:8d:5a:72:d4:44:91:6e:d4:a9:08:21:
         01:03:49:36:ef:1d:31:21:e0:74:53:73:fc:fe:78:ec:66:40:
         b7:dd:ca:f2:50:6c:2e:88:a4:d3:19:13:c1:6f:69:2c:0e:d6:
         28:22:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----