Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/0cwboDX5uKOY-Z760GfM4zCjTs4.roa
File:                     0cwboDX5uKOY-Z760GfM4zCjTs4.roa (raw, json)
Hash identifier:          K1gNCcP7XmX+DgsmlgH+bHuGfGDMcoXrJ5HjcyIJRg0=
Subject key identifier:   D1:CC:1B:A0:35:F9:B8:A3:98:F9:9E:FA:D0:67:CC:E3:30:A3:4E:CE
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       01861169CE559242C4EAF8B69FC95BA13A5D
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/0cwboDX5uKOY-Z760GfM4zCjTs4.roa
Signing time:             Thu 02 Feb 2023 09:16:32 +0000
ROA not before:           Thu 02 Feb 2023 09:16:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209050
IP address blocks:        5.183.216.0/22 maxlen: 24
                          2a0e:a600::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:11:69:ce:55:92:42:c4:ea:f8:b6:9f:c9:5b:a1:3a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Feb  2 09:16:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1cc1ba035f9b8a398f99efad067cce330a34ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:18:07:34:8b:51:fd:92:52:7a:b4:7e:d7:
                    e5:e3:88:56:c9:1b:05:f7:dd:19:13:de:e0:23:0b:
                    a2:0e:20:0d:d9:95:5e:97:76:66:89:f3:76:2e:ff:
                    38:fb:24:15:2a:ce:a0:05:8b:82:08:0e:3d:00:92:
                    d2:9b:f8:88:bb:a5:3a:35:fa:8e:cb:ba:28:e9:84:
                    23:99:46:37:e4:8e:54:12:d7:48:95:6c:fb:f3:18:
                    74:6c:84:47:3a:89:01:c5:ef:a7:25:3c:77:20:84:
                    fc:74:a3:9e:ed:58:11:63:8a:4e:1a:c9:e3:c0:8f:
                    c4:87:f2:d1:7a:83:5e:94:cc:8c:0b:a2:f9:61:72:
                    20:0a:9c:57:e4:4c:7b:f1:e8:7b:02:e5:d2:83:7f:
                    35:ad:d2:7a:db:ce:ce:2e:49:2a:0e:01:ba:cc:7c:
                    06:ad:f8:46:5e:ff:3f:11:a6:54:70:2d:ae:cf:cc:
                    90:bf:be:63:5e:18:a1:46:4c:c8:95:a9:04:78:89:
                    f7:b5:a1:a9:ad:06:c2:f5:8d:a2:30:52:a4:da:43:
                    bb:bd:25:4d:14:39:74:9a:40:fd:54:ce:ca:30:3c:
                    4c:68:63:f0:35:93:2b:a0:bd:f2:dd:de:2e:5f:f3:
                    91:31:11:38:19:00:53:52:a7:a9:17:96:61:fe:9e:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:1B:A0:35:F9:B8:A3:98:F9:9E:FA:D0:67:CC:E3:30:A3:4E:CE
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/0cwboDX5uKOY-Z760GfM4zCjTs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.216.0/22
                IPv6:
                  2a0e:a600::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:50:8f:7d:15:3a:65:30:4d:3e:50:10:2e:72:b6:d0:2c:
         1b:e0:98:0d:9b:3b:bb:a0:20:6a:09:df:3d:44:a8:26:73:e2:
         2f:d4:20:d9:66:c2:4c:e5:43:0f:e6:5d:b7:5a:69:22:84:6e:
         4d:d4:70:4f:14:02:3a:c3:f0:ca:80:ab:c6:9b:4a:b0:eb:26:
         fd:55:c9:97:44:28:9c:61:56:c9:05:cb:9c:0e:8a:48:99:88:
         87:b1:7b:68:4b:f2:8a:cf:aa:8c:92:3b:02:9f:f3:89:9e:65:
         53:17:74:06:1f:25:86:5e:e8:f2:52:27:3c:86:d5:1c:bd:aa:
         0d:dd:55:a5:4e:ed:43:63:17:ce:85:7f:f6:cb:be:e4:b9:37:
         bb:59:47:23:8b:c3:36:d6:3d:9b:3f:3e:b2:23:9d:13:78:4d:
         3e:aa:20:50:3d:77:ba:0d:b2:57:b0:7b:14:b3:db:cf:b1:d0:
         ec:9e:b4:9a:f7:2b:85:2d:22:5b:4c:9f:fc:c8:24:ac:c9:68:
         1d:04:d5:7f:8c:2b:02:f1:4a:57:98:c9:b7:52:7a:85:11:9c:
         7b:79:c3:1e:c9:67:96:89:cd:ea:b5:fc:49:3f:f5:0d:df:32:
         a9:86:61:3d:ec:81:ff:67:59:6b:48:ca:65:39:a6:f5:58:aa:
         a3:4e:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----