Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SXWDlOG6El7VTIZftsyZXRczKco.roa
File:                     SXWDlOG6El7VTIZftsyZXRczKco.roa (raw, json)
Hash identifier:          qxcngh3N3+mg5KAevfm/EZTIPX/zCx8LdfwmMlVS8LU=
Subject key identifier:   49:75:83:94:E1:BA:12:5E:D5:4C:86:5F:B6:CC:99:5D:17:33:29:CA
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018B4C2AD03BA0B6D7EE2B7EFDE191B1C31B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SXWDlOG6El7VTIZftsyZXRczKco.roa
Signing time:             Fri 20 Oct 2023 08:19:16 +0000
ROA not before:           Fri 20 Oct 2023 08:19:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52041
IP address blocks:        185.248.134.0/24 maxlen: 24
                          82.215.64.0/24 maxlen: 24
                          2a12:bec0:7004::/48 maxlen: 48
                          2a12:bec1:b00b::/48 maxlen: 48
                          2a12:bec0:d0::/44 maxlen: 48
                          2a12:bec0:7003::/48 maxlen: 48
                          2a12:bec2::/32 maxlen: 32
                          2a12:bec0:7007::/48 maxlen: 48
                          2a12:bec0:7002::/48 maxlen: 48
                          2a12:bec0:7000::/48 maxlen: 48
                          2a12:bec0:b00b::/48 maxlen: 48
                          2a12:bec0:7006::/48 maxlen: 48
                          2a12:bec0:7001::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 07 Nov 2023 14:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:2a:d0:3b:a0:b6:d7:ee:2b:7e:fd:e1:91:b1:c3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Oct 20 08:19:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49758394e1ba125ed54c865fb6cc995d173329ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:6d:2a:d2:13:81:b5:07:84:1a:01:d2:06:
                    e8:33:00:9b:e9:4b:f3:04:e5:a8:61:03:2f:91:26:
                    70:13:be:61:21:47:64:ef:24:be:99:22:db:29:b5:
                    9e:9b:64:9f:6a:05:8b:a1:2a:02:24:6d:9e:c9:75:
                    cf:44:18:7f:f0:7e:8a:22:15:a1:21:ba:72:fb:ba:
                    99:dd:f7:c3:31:0d:b5:07:75:37:8b:c2:04:a6:f9:
                    0a:69:8c:70:d5:d3:7a:b3:8f:c0:38:0f:35:a0:37:
                    07:46:56:10:fa:ca:bd:f4:14:1c:cc:f8:0d:7f:50:
                    40:c4:60:3a:0d:0f:eb:35:6b:11:56:4f:04:95:cf:
                    77:da:d1:0e:18:85:6a:cb:5d:c2:fe:cd:38:b8:d5:
                    53:f9:9b:2d:5b:dc:45:07:be:0f:43:84:c0:03:cb:
                    50:91:21:7b:f5:aa:f1:71:89:8b:29:0b:7b:61:53:
                    50:8d:f3:50:ab:b4:cf:de:d2:41:0c:d1:b4:d6:d8:
                    73:46:a5:d0:53:c2:17:94:82:8c:cc:9b:74:e6:e1:
                    9b:ad:72:33:6e:6d:09:cf:75:3a:83:29:ce:e9:5f:
                    93:fe:43:72:0a:79:a6:14:3d:93:e4:7a:f7:48:3b:
                    f4:cf:cf:54:9e:c4:f1:b2:fc:62:35:d4:a2:b5:26:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:75:83:94:E1:BA:12:5E:D5:4C:86:5F:B6:CC:99:5D:17:33:29:CA
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SXWDlOG6El7VTIZftsyZXRczKco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.215.64.0/24
                  185.248.134.0/24
                IPv6:
                  2a12:bec0:d0::/44
                  2a12:bec0:7000::-2a12:bec0:7004:ffff:ffff:ffff:ffff:ffff
                  2a12:bec0:7006::/47
                  2a12:bec0:b00b::/48
                  2a12:bec1:b00b::/48
                  2a12:bec2::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:53:33:ad:6f:a9:f5:b7:5f:20:37:a1:53:05:dd:11:ff:56:
         5e:ca:95:0e:6c:2f:f8:0e:c6:26:4d:83:d6:51:46:3c:ed:aa:
         4f:f5:53:0b:f8:71:3e:f4:57:ee:f0:5d:89:75:6a:9e:aa:13:
         26:f5:6f:2c:b7:d3:49:c5:ad:f2:d9:3a:34:31:c6:36:be:89:
         61:ed:5f:ef:7f:08:de:23:74:2d:c1:f8:78:9e:3d:0f:f7:2b:
         68:a5:55:fd:71:8d:a1:ac:88:f9:ee:63:37:84:41:1c:4f:02:
         8d:ef:81:c0:71:20:b5:0f:e3:d6:63:fa:27:9d:53:d7:8b:63:
         7a:c5:a9:a8:61:fe:f8:dc:2f:ce:74:ce:78:21:84:ae:d2:43:
         05:a7:8a:55:b4:36:2c:5f:f2:2c:bf:fc:d4:b3:25:28:21:86:
         10:84:39:c7:d6:06:a4:65:96:fd:79:8c:ef:b0:3c:f3:99:da:
         fd:13:13:b1:d5:6c:d3:34:dd:4d:25:5d:cd:90:57:1b:bf:5c:
         b3:70:34:97:8e:0d:a2:41:e1:38:6f:6e:bf:1d:e3:7f:8f:3e:
         3e:75:f1:1f:02:30:85:ed:9a:56:ab:88:0f:ee:8e:a9:2f:5d:
         35:51:f4:21:0a:d6:3f:b4:d5:4d:a6:54:84:99:fb:53:09:d1:
         cd:20:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----