Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/vgiRxYPFWm1Cnz8ztnO88P4eEK8.roa
File:                     vgiRxYPFWm1Cnz8ztnO88P4eEK8.roa (raw, json)
Hash identifier:          6vSsmJ+lK7c/ldhxw9rcK0akSShuxc/uj3phv4waIiw=
Subject key identifier:   BE:08:91:C5:83:C5:5A:6D:42:9F:3F:33:B6:73:BC:F0:FE:1E:10:AF
Certificate issuer:       /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial:       01856C25C0700871040E545B1621C73307F3
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/vgiRxYPFWm1Cnz8ztnO88P4eEK8.roa
Signing time:             Sun 01 Jan 2023 07:04:51 +0000
ROA not before:           Sun 01 Jan 2023 07:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     28681
IP address blocks:        193.201.116.0/24 maxlen: 24
                          2001:67c:5e8::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:c0:70:08:71:04:0e:54:5b:16:21:c7:33:07:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
        Validity
            Not Before: Jan  1 07:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be0891c583c55a6d429f3f33b673bcf0fe1e10af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:c4:a4:32:90:7f:22:4d:70:8e:d4:4f:74:
                    72:be:4f:03:d4:ce:ca:89:6b:ef:fa:d4:d7:7c:dc:
                    38:00:78:97:9a:ee:57:57:f4:6b:7a:c9:6e:57:3a:
                    a4:78:72:ba:48:f6:d9:06:5b:66:15:d6:a4:c5:6f:
                    ef:cb:95:1f:cb:cb:b4:67:cc:59:86:6a:f3:fe:5e:
                    0f:79:f2:79:4d:fb:2f:41:0e:94:c5:bc:dd:fb:21:
                    a2:f0:b6:f4:b6:d8:ee:c4:e5:8f:f1:ba:d0:54:35:
                    27:0b:bb:3a:75:c1:3a:1a:82:71:83:40:8d:b5:a9:
                    26:c8:db:7c:a2:22:21:e8:04:eb:be:09:12:0c:3b:
                    15:16:c5:91:c3:e6:b4:af:dd:b4:53:9d:38:68:71:
                    2d:fa:3a:07:ee:59:1f:92:7a:9a:da:bc:76:8c:f3:
                    21:95:a3:8b:97:d8:36:c4:8a:81:9c:2d:3e:d9:69:
                    55:ef:74:fc:c1:c2:3b:c7:96:0b:a5:6a:0e:6d:f0:
                    2d:cd:2e:09:16:f5:fe:ae:9d:64:b1:46:bd:ef:0f:
                    c5:4f:80:29:ae:72:dc:4d:f6:51:7b:66:82:40:2b:
                    26:54:34:c7:d0:ff:7e:f2:94:e1:c3:3b:ac:6d:91:
                    93:12:0d:f0:f0:01:5c:ea:7f:c9:55:b8:a4:6b:e0:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:91:C5:83:C5:5A:6D:42:9F:3F:33:B6:73:BC:F0:FE:1E:10:AF
            X509v3 Authority Key Identifier:
                keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/vgiRxYPFWm1Cnz8ztnO88P4eEK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.116.0/24
                IPv6:
                  2001:67c:5e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:9e:54:11:52:81:0e:22:d1:34:b0:7b:dd:fe:a0:df:e3:63:
         91:a6:72:ad:2d:ed:60:3a:1c:a4:47:c1:f6:8e:fe:6e:8e:4b:
         e1:c3:59:9d:c3:15:7e:0a:3e:4e:e6:b2:ca:8c:ac:d5:84:ca:
         66:16:30:fc:61:6a:22:a5:d8:ea:bd:76:ac:a1:ec:09:4f:a8:
         dc:9d:8e:d7:d3:39:e9:65:be:d7:3f:b7:de:3a:f8:f1:14:55:
         8f:85:d1:a9:fd:4e:a7:74:9f:ff:a4:a2:76:87:6f:c6:4d:31:
         a3:85:c7:7e:ac:98:34:5e:aa:bb:8a:1c:72:d4:03:3b:ed:a0:
         33:5d:54:11:2e:37:f6:4f:06:40:bd:55:1e:16:ec:4a:0f:3a:
         3c:8a:a4:e8:96:3c:f8:4e:93:89:36:4b:77:01:90:4d:71:b7:
         0a:17:40:49:cb:99:a5:be:4b:31:59:e1:22:d1:68:45:86:46:
         66:8d:91:7f:09:a6:fc:e9:24:88:be:96:bf:66:d7:00:f0:00:
         0b:eb:3c:09:52:be:01:5a:7f:42:11:b1:ae:18:a5:0d:8c:16:
         dd:af:a0:c4:7c:e6:c7:ae:bd:89:e0:a7:34:e7:f3:49:96:97:
         81:dc:e9:cb:fb:dc:e6:0f:a6:a9:e7:08:d4:17:01:17:c8:66:
         cf:b1:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----