Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa
File:                     w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa (raw, json)
Hash identifier:          QKEgaQJBon9XRElbeD9M667Gz+/02SHkuWdSoK4cCvI=
Subject key identifier:   C3:E2:DF:3E:0E:9D:C1:A4:75:13:21:D0:04:CD:91:E8:FB:72:4C:2A
Certificate issuer:       /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial:       01857303A321B5B83D673F697EBD42A413C5
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa
Signing time:             Mon 02 Jan 2023 15:04:56 +0000
ROA not before:           Mon 02 Jan 2023 15:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24971
IP address blocks:        193.169.160.0/23 maxlen: 23
                          2001:678:a50::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:03:a3:21:b5:b8:3d:67:3f:69:7e:bd:42:a4:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
        Validity
            Not Before: Jan  2 15:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3e2df3e0e9dc1a4751321d004cd91e8fb724c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:4f:39:fc:8c:e7:33:cf:e2:db:54:d8:31:
                    6f:6d:01:7d:06:cd:eb:ef:f6:0a:f7:cc:82:3a:f6:
                    ee:0c:c2:56:08:79:f3:7a:e8:9f:d0:c0:13:f0:e0:
                    a6:4e:59:ad:d6:fd:d3:11:40:46:f9:85:6e:20:e4:
                    5e:7c:eb:2f:6f:06:e1:ef:e6:c5:08:2a:ad:e3:82:
                    9f:1c:a1:c6:26:89:ea:d8:db:9f:0c:87:3e:a2:6a:
                    8f:87:02:7a:2e:ae:46:6d:f0:d0:97:0e:2f:5d:f3:
                    d5:8e:cc:1d:c0:cf:72:9b:43:96:6e:66:c5:ce:91:
                    99:ba:ef:b4:4c:c8:dd:75:c5:a9:06:36:d6:9d:93:
                    30:72:4b:d1:85:71:f7:47:9f:6a:b7:60:05:7f:21:
                    8c:28:00:e4:b8:ba:fe:c2:1c:87:07:9a:40:78:b9:
                    c7:72:9b:e5:19:94:7f:fa:f3:59:bd:9d:57:68:5a:
                    be:ed:13:84:a3:df:83:5e:2d:62:da:fa:ef:88:8b:
                    c1:89:74:ae:ce:66:d7:bf:65:ec:fd:09:b9:bc:16:
                    9e:18:8e:68:d5:fe:52:21:5c:0a:48:1e:0d:1c:0b:
                    05:3f:9f:03:fb:35:3f:54:1f:ab:2a:34:46:45:e6:
                    a4:1a:5f:70:24:64:a5:a3:02:46:e7:e1:26:dd:6b:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:DF:3E:0E:9D:C1:A4:75:13:21:D0:04:CD:91:E8:FB:72:4C:2A
            X509v3 Authority Key Identifier:
                keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/w-LfPg6dwaR1EyHQBM2R6PtyTCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.160.0/23
                IPv6:
                  2001:678:a50::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:5c:f0:b6:20:32:ce:ff:45:e6:6a:73:8d:e5:21:d6:e3:
         7e:f4:35:0b:4e:31:59:40:46:0b:1d:5b:5a:4e:38:93:61:8e:
         e0:d6:db:63:74:fa:3a:ee:67:36:45:80:a0:ca:f1:1f:49:1b:
         88:1f:92:53:f0:c0:fa:21:41:2f:e7:ea:e5:66:fe:67:e9:fe:
         68:aa:33:1b:01:91:e6:af:07:18:e7:36:d8:9f:80:db:1e:b0:
         15:03:9c:93:15:f0:d0:36:fd:44:de:b8:a5:2e:5e:10:97:8c:
         c4:4a:0a:3e:78:b1:95:7b:d1:8d:a1:8c:30:81:1c:e8:a8:fe:
         3e:1b:f0:f4:c6:dd:c1:73:e1:37:f4:3b:5c:48:9e:14:1c:a2:
         7c:a8:c6:1a:8e:2b:a2:3d:eb:4e:78:f0:06:70:86:78:a1:fd:
         a7:41:75:4b:19:f7:bb:56:43:c3:a3:a3:e5:c4:a7:e9:6a:7b:
         5d:71:63:79:28:67:05:08:69:c8:d6:be:e6:d2:7a:0c:38:1b:
         f2:12:24:a7:52:6e:09:f7:90:b3:e4:9c:27:b8:77:14:5c:01:
         d3:66:7c:d1:3b:fc:e7:e0:e7:b2:40:3f:6d:71:b8:5f:07:bc:
         9d:ca:4d:6e:ec:1f:66:ac:e7:a6:c7:17:38:93:20:2a:a5:3b:
         5a:d8:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----