Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/0gvjWfsrCwIuDjFsCtjMwTpgb-c.roa
File:                     0gvjWfsrCwIuDjFsCtjMwTpgb-c.roa (raw, json)
Hash identifier:          sn/4I4B12dM9DGSXr+IrWYx/XxdKQIqIkv3pAabqWtY=
Subject key identifier:   D2:0B:E3:59:FB:2B:0B:02:2E:0E:31:6C:0A:D8:CC:C1:3A:60:6F:E7
Certificate issuer:       /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial:       018DC77E011E6ABF17806DB9B050F79388DE
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/0gvjWfsrCwIuDjFsCtjMwTpgb-c.roa
Signing time:             Tue 20 Feb 2024 17:09:00 +0000
ROA not before:           Tue 20 Feb 2024 17:09:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206125
IP address blocks:        89.190.6.0/24 maxlen: 24
                          2a03:7c00:11::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c7:7e:01:1e:6a:bf:17:80:6d:b9:b0:50:f7:93:88:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
        Validity
            Not Before: Feb 20 17:09:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d20be359fb2b0b022e0e316c0ad8ccc13a606fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:d2:77:0c:94:a6:88:29:27:7a:ec:8d:91:
                    ed:10:1c:a7:65:a5:75:7c:7b:61:1f:1b:7a:ec:0a:
                    84:2f:b3:e2:3f:2f:24:4e:4b:7b:a8:93:9d:ea:18:
                    11:fc:b0:92:85:dc:41:5b:b4:24:e4:43:d7:60:72:
                    27:83:22:f4:bf:ff:54:13:ea:10:6b:21:d6:be:bd:
                    9a:41:e6:ab:94:0c:aa:f6:a8:9c:42:11:87:b2:24:
                    b8:89:00:a5:26:3b:27:18:9d:ba:a1:9b:e8:be:55:
                    93:b5:6e:e8:4a:13:88:53:3d:98:4a:99:bf:a3:2a:
                    17:d9:e6:ac:5f:9a:88:44:18:8e:f7:38:2c:6f:3c:
                    aa:f4:c1:4d:46:5f:df:28:fe:60:a9:26:1e:c5:94:
                    3f:90:00:f4:1a:98:c4:e2:2e:40:36:c4:91:cc:a4:
                    2c:e7:6c:28:11:eb:05:17:2a:25:0e:aa:37:02:e9:
                    f7:6d:83:6b:8b:f4:88:3e:ca:8f:4d:1b:c2:29:a5:
                    6c:36:81:b9:e5:cb:0d:05:60:2e:3f:40:b4:78:66:
                    05:c2:cc:c8:33:46:83:dc:09:5d:b9:4c:30:b5:c2:
                    c7:70:d0:af:54:4e:57:90:bb:0a:48:8b:e4:38:09:
                    96:da:27:58:29:cb:21:47:cd:75:09:2d:95:73:67:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:E3:59:FB:2B:0B:02:2E:0E:31:6C:0A:D8:CC:C1:3A:60:6F:E7
            X509v3 Authority Key Identifier:
                keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/0gvjWfsrCwIuDjFsCtjMwTpgb-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.190.6.0/24
                IPv6:
                  2a03:7c00:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:56:a4:da:14:65:c1:cf:21:b7:8d:77:b4:33:95:68:e9:
         2f:ee:e2:72:fa:21:e7:bb:fb:58:05:e6:d4:f2:7a:6e:32:c3:
         4b:e7:e5:b2:f7:dc:fd:d5:d0:38:35:a8:d0:dc:00:f5:16:9d:
         0b:e8:e0:ce:7b:b3:47:c4:0e:09:3a:fb:de:ef:5f:05:ba:1d:
         6c:08:80:1e:14:34:89:a5:99:aa:34:f4:f4:31:f9:51:4b:1e:
         08:9b:dd:75:34:26:97:a8:cf:8c:94:aa:dd:5d:16:2b:18:f7:
         a6:88:06:03:f4:4d:ba:11:f6:3b:33:c9:4f:58:2f:19:28:49:
         e9:64:ac:ca:f6:bb:b0:ba:b1:56:08:6f:27:93:69:47:9c:d3:
         a3:db:64:54:8e:5d:2a:fc:a4:c8:aa:99:7b:e9:d1:3e:e0:17:
         38:d6:4f:eb:37:86:83:6a:db:1a:eb:fd:90:b8:d3:7c:3e:aa:
         7e:41:3d:b8:10:61:00:ca:aa:bc:c6:95:79:90:2a:cb:18:24:
         9c:1b:bd:38:77:e1:89:df:2c:73:f8:71:90:33:f1:c4:54:5d:
         a2:eb:4d:b4:43:44:b4:10:11:58:ac:df:29:76:9c:ea:c5:f0:
         8f:c9:b6:07:44:c8:c3:0c:77:2b:df:73:aa:73:7a:d0:2a:44:
         36:6f:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----