Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/BG1KYQqarhpQSM4QFnK3C-e-4Yc.roa
File:                     BG1KYQqarhpQSM4QFnK3C-e-4Yc.roa (raw, json)
Hash identifier:          iWG/TJ72Ci5I7V4dCgduekr1wV1hDOzH8BpBPuJQWBc=
Subject key identifier:   04:6D:4A:61:0A:9A:AE:1A:50:48:CE:10:16:72:B7:0B:E7:BE:E1:87
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       018571D7D91D3FF4BD08C2DD3E059A8E4AF7
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/BG1KYQqarhpQSM4QFnK3C-e-4Yc.roa
Signing time:             Mon 02 Jan 2023 09:37:29 +0000
ROA not before:           Mon 02 Jan 2023 09:37:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209050
IP address blocks:        5.183.216.0/22 maxlen: 22
                          2a0e:a600::/29 maxlen: 29

Validation:               Failed, certificate revoked on Thu 02 Feb 2023 09:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:d9:1d:3f:f4:bd:08:c2:dd:3e:05:9a:8e:4a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Jan  2 09:37:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=046d4a610a9aae1a5048ce101672b70be7bee187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:3d:9f:75:ae:42:4a:e9:79:7c:c3:9b:40:
                    18:7f:27:9a:e4:43:f1:b7:09:a3:92:51:93:36:46:
                    66:61:8f:79:06:9a:66:1d:e4:b8:eb:11:41:e3:b9:
                    53:de:da:04:da:74:e0:4f:1f:c4:80:68:48:fc:96:
                    cf:15:7c:f2:ef:7c:1c:ac:ae:cf:a7:fc:d2:bd:37:
                    fd:ac:dc:6f:ef:f5:1c:78:8d:66:49:7e:6e:65:09:
                    82:87:35:d1:16:ae:94:e1:75:02:9b:83:1f:d9:2a:
                    7a:4b:63:f7:46:e3:36:d1:83:63:ed:c5:f2:cd:85:
                    c2:14:21:0e:8f:a5:fe:2a:81:b2:55:a0:d0:63:47:
                    63:a5:f2:b0:ac:f0:d6:1e:36:92:c4:a0:7d:ef:c7:
                    74:03:a0:a3:5d:69:6f:8a:84:10:a7:7b:9c:93:d3:
                    0a:4a:62:e3:06:68:e7:41:58:e1:cd:c5:a7:43:49:
                    c1:fa:d7:57:8d:aa:17:1f:f8:25:6e:ec:24:de:a2:
                    8d:d6:fd:12:89:4a:19:e5:2f:fb:34:a6:0c:71:26:
                    b7:f2:d4:ba:13:6f:70:34:00:d7:d6:6d:71:47:37:
                    1b:60:7b:8d:2f:5f:d6:e1:9b:79:9c:83:1e:df:e0:
                    25:0c:31:c1:14:34:6c:3b:36:86:60:ab:1d:6f:49:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:4A:61:0A:9A:AE:1A:50:48:CE:10:16:72:B7:0B:E7:BE:E1:87
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/BG1KYQqarhpQSM4QFnK3C-e-4Yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.216.0/22
                IPv6:
                  2a0e:a600::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:30:e8:12:50:aa:e5:73:94:ea:19:ff:63:0a:f9:03:4d:
         a9:60:58:88:cc:76:77:d2:1c:81:98:0c:7c:70:31:44:e2:60:
         33:45:2c:87:87:7e:6c:ec:11:ed:1c:0b:4f:6e:b2:39:58:5b:
         15:fb:b8:63:ee:16:1c:11:fc:bf:f2:40:5c:84:ae:32:58:c3:
         4b:df:0d:31:ef:9b:eb:ad:6f:70:75:95:1a:b9:4e:86:53:c9:
         9e:34:5f:e6:0b:84:33:7c:0b:fc:11:aa:07:a1:f6:1b:d6:c0:
         98:a3:72:d5:24:89:e8:47:ba:db:81:e7:73:3b:73:51:86:fd:
         79:38:3d:fe:33:5b:91:15:1f:84:6e:f2:09:dc:9b:63:3e:72:
         94:e3:df:fd:16:5e:85:23:97:a7:d9:d9:1b:4a:29:bc:33:e9:
         9a:02:89:fc:a2:6b:ff:05:a0:f6:71:45:ca:30:91:d7:c3:cd:
         09:c2:4f:a8:ca:8d:aa:a7:35:de:fa:1c:33:96:eb:53:18:8f:
         a0:35:e7:80:b9:da:fa:9e:ff:06:7e:f9:c2:43:e8:d5:c0:5b:
         bc:6c:ce:92:c9:11:47:a9:f5:c1:21:b1:e6:30:ad:f8:36:e4:
         27:55:27:e5:df:7e:44:90:d7:50:21:73:ec:7f:73:00:43:56:
         42:a2:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----