Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/wwOQFezOtz0ePDIzS23J7cae6tQ.roa
File:                     wwOQFezOtz0ePDIzS23J7cae6tQ.roa (raw, json)
Hash identifier:          sF6Jtdx0oF/q82uk1rRZqj0CgHXZX48EkIhryuVo/ow=
Subject key identifier:   C3:03:90:15:EC:CE:B7:3D:1E:3C:32:33:4B:6D:C9:ED:C6:9E:EA:D4
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       01856CAF2B4A6415849C2BBC42B2348658BA
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/wwOQFezOtz0ePDIzS23J7cae6tQ.roa
Signing time:             Sun 01 Jan 2023 09:34:57 +0000
ROA not before:           Sun 01 Jan 2023 09:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57161
IP address blocks:        213.108.244.0/23 maxlen: 24
                          2a0d:16c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:2b:4a:64:15:84:9c:2b:bc:42:b2:34:86:58:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Jan  1 09:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3039015ecceb73d1e3c32334b6dc9edc69eead4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:4b:05:8b:be:be:4a:f8:a9:3c:0c:da:5b:
                    60:a7:9e:65:37:42:00:29:d5:41:43:ab:b2:28:5f:
                    e8:33:3b:3c:1e:1d:9a:b9:d3:d1:e5:80:8c:49:6b:
                    c2:e6:55:1c:d7:38:bf:02:7f:fa:6c:a0:88:2c:3b:
                    88:d3:18:cf:0f:4f:e8:d8:ea:fd:b2:f2:77:b8:50:
                    a6:27:3b:c8:5f:96:84:ce:ed:9c:4f:82:6a:61:18:
                    58:1b:f5:c6:5c:dd:af:d9:59:72:a8:c3:a5:6f:c7:
                    9b:23:77:73:22:22:36:af:b8:e4:1a:ab:f6:77:df:
                    a6:4a:11:a8:f2:27:6c:ec:c1:42:57:69:1d:c7:5f:
                    2c:e6:8e:76:f2:58:ec:df:ea:0f:a4:4b:12:91:ae:
                    1f:aa:38:96:45:58:56:83:54:ee:d5:24:26:e3:0c:
                    ac:fa:3d:c2:ed:37:cf:d0:03:7c:99:ab:7b:7c:8c:
                    4c:56:c0:48:37:d2:c1:be:c3:9a:55:46:1f:50:6f:
                    b1:46:46:74:18:65:f7:76:92:88:c9:d9:d4:76:c2:
                    3b:b7:96:5f:14:3a:c3:18:63:e6:55:ee:f9:84:6b:
                    10:37:6b:8b:97:71:ff:65:43:d4:c0:60:53:51:1c:
                    b8:b8:b8:8f:07:41:d0:3a:31:63:f5:19:a7:26:96:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:90:15:EC:CE:B7:3D:1E:3C:32:33:4B:6D:C9:ED:C6:9E:EA:D4
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/wwOQFezOtz0ePDIzS23J7cae6tQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.108.244.0/23
                IPv6:
                  2a0d:16c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:8b:ef:1c:c7:07:fe:94:db:26:e9:5d:e8:74:bc:a5:26:
         20:ff:d4:a0:59:3b:d9:8e:e2:bb:b8:b5:20:04:03:a7:f8:5f:
         65:1b:f2:a1:a3:5f:19:85:67:45:ad:b8:fb:8f:d0:0c:a1:c2:
         83:d5:da:32:19:68:42:3b:a8:6d:41:98:58:70:94:df:4d:17:
         3a:a7:ca:3f:85:d8:0b:4d:40:64:ed:1b:66:b2:bb:1f:4d:da:
         c8:66:93:02:60:24:80:2b:7d:ec:97:03:1d:25:c1:d0:48:68:
         5a:5d:17:07:5c:57:f6:4c:63:01:f5:bb:9d:05:6e:72:2c:5b:
         31:b0:28:d5:13:25:7a:19:88:e2:66:f3:c6:4f:af:bf:5f:f1:
         87:94:21:52:8c:58:20:b6:1f:e2:5d:8d:07:19:50:e5:76:0c:
         7e:93:3d:d4:7c:be:52:af:aa:15:5f:85:09:2d:62:14:1e:0d:
         c2:b0:2a:35:34:99:4e:bc:13:0e:49:06:85:23:0b:ea:09:1b:
         60:70:e9:ae:14:9e:9b:c8:2f:99:b6:f3:aa:20:06:e7:11:84:
         4a:97:3f:7f:6e:ef:ea:fd:3f:05:82:e7:09:32:aa:07:01:22:
         93:2e:63:96:95:dc:2c:8a:77:e0:d5:5a:a0:74:ed:bf:18:1b:
         96:35:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----