Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/87y46ercHN29Evs99z0kLR5JDME.roa
File:                     87y46ercHN29Evs99z0kLR5JDME.roa (raw, json)
Hash identifier:          BGRDG7jPwiwRWq2pJ6Mptw/kQ8fBVuS7ZYkZ197oRAE=
Subject key identifier:   F3:BC:B8:E9:EA:DC:1C:DD:BD:12:FB:3D:F7:3D:24:2D:1E:49:0C:C1
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       0189277BC97FC14C432A8DD1E31AEADC051E
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/87y46ercHN29Evs99z0kLR5JDME.roa
Signing time:             Wed 05 Jul 2023 19:16:11 +0000
ROA not before:           Wed 05 Jul 2023 19:16:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8218
IP address blocks:        185.75.241.0/24 maxlen: 24
                          2a05:5504:1::/48 maxlen: 48
                          2a05:5504::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:27:7b:c9:7f:c1:4c:43:2a:8d:d1:e3:1a:ea:dc:05:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: Jul  5 19:16:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3bcb8e9eadc1cddbd12fb3df73d242d1e490cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:a9:37:4b:1c:03:85:64:30:cb:3f:ca:5b:
                    8a:ec:8f:ca:c5:54:d2:7d:39:83:8b:26:e9:72:49:
                    d2:9d:bf:47:d7:38:f2:2d:2c:37:42:34:5b:3d:68:
                    27:09:0a:a1:96:15:c6:82:36:2b:29:31:ca:0d:df:
                    83:d1:2d:36:48:1c:9b:90:e4:60:8d:ef:9e:8b:83:
                    31:65:33:b0:b5:f2:42:67:b3:99:46:8f:c0:2d:c6:
                    e7:87:a7:84:8c:9f:14:6e:c0:81:2b:0c:1a:30:fe:
                    1d:63:dd:37:3d:9e:47:ad:46:37:b6:99:a0:c5:8c:
                    b0:0c:59:d0:84:cd:c3:9c:e1:06:bb:3f:0c:40:22:
                    f4:0b:3e:e3:45:2b:5b:f9:37:97:ca:a9:43:2c:31:
                    75:e7:3a:d0:3c:15:78:5b:3c:6a:23:27:32:ce:78:
                    f3:ce:af:3c:cc:55:a0:fa:0b:6e:91:ae:ac:b3:e0:
                    48:79:90:2f:cd:55:1c:f5:c4:93:ca:e0:e9:45:4f:
                    58:aa:48:7e:a0:27:db:2d:84:8f:68:60:de:6c:1f:
                    eb:1c:5f:f3:6f:bc:62:62:fd:5d:0c:18:7b:18:2e:
                    f1:3c:ce:e4:8c:58:43:78:5c:1a:19:a7:47:b6:ff:
                    39:83:7f:28:0a:fc:3c:4e:c7:a6:d0:61:f6:bc:31:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BC:B8:E9:EA:DC:1C:DD:BD:12:FB:3D:F7:3D:24:2D:1E:49:0C:C1
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/87y46ercHN29Evs99z0kLR5JDME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.241.0/24
                IPv6:
                  2a05:5504::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:12:ea:77:d1:4b:8f:36:4e:d4:03:10:f9:0a:44:8d:6e:
         22:e8:e6:f4:98:49:13:e2:e3:0d:df:e5:ec:bc:2f:ba:69:03:
         64:53:71:52:c2:84:bf:0e:9c:db:38:29:6b:86:0b:54:81:48:
         35:14:4b:2a:98:fc:bf:b4:8b:bd:17:08:ee:1e:9a:b6:09:94:
         ca:2b:fb:18:7c:69:4c:89:69:f3:2c:40:e6:25:ec:1f:2c:26:
         fd:7f:bf:d9:db:e1:38:74:b8:9f:64:97:87:3a:1b:ba:91:93:
         5f:3f:c5:69:56:5b:56:a1:6f:41:cc:dd:0c:e3:f1:8a:73:d5:
         6b:19:89:aa:3d:bc:dc:24:49:73:0a:f2:4a:b0:d5:c2:8c:a8:
         75:c6:66:22:f3:ce:35:42:df:a0:95:d3:1f:e6:2e:71:30:d6:
         8d:f6:80:69:67:db:8f:a1:06:25:5b:85:e7:cc:f8:15:7e:91:
         08:ac:51:9d:e5:d1:63:0a:7d:b2:55:9e:bd:30:ad:8e:8b:b1:
         94:ff:3f:cb:b6:35:bf:7d:1b:b8:14:c8:80:54:cf:19:b4:85:
         48:4f:e1:46:16:b5:bc:00:af:83:be:9f:35:1c:be:ac:1b:3c:
         fc:d6:6e:91:71:5f:d6:dc:39:7d:91:f5:2f:d8:a5:ec:9f:7c:
         6d:c9:0b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----