Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/TEWySD2n_Lm8TCngiQgovjKlqqU.roa
File:                     TEWySD2n_Lm8TCngiQgovjKlqqU.roa (raw, json)
Hash identifier:          42w0S1C+84aaMrumFcX8dGNAECzt7p/6JqnRorZ92fo=
Subject key identifier:   4C:45:B2:48:3D:A7:FC:B9:BC:4C:29:E0:89:08:28:BE:32:A5:AA:A5
Certificate issuer:       /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial:       0189D985496E87655EC51B5453CCDCB72912
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/TEWySD2n_Lm8TCngiQgovjKlqqU.roa
Signing time:             Wed 09 Aug 2023 08:58:58 +0000
ROA not before:           Wed 09 Aug 2023 08:58:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29037
IP address blocks:        195.160.160.0/23 maxlen: 24
                          2001:67c:19ec::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d9:85:49:6e:87:65:5e:c5:1b:54:53:cc:dc:b7:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
        Validity
            Not Before: Aug  9 08:58:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c45b2483da7fcb9bc4c29e0890828be32a5aaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:88:f7:cb:6e:e2:c1:0b:08:ed:0b:aa:8e:
                    cf:50:38:c4:64:45:14:89:51:da:c6:7b:a4:69:5a:
                    7f:37:2f:25:c6:26:b6:23:d2:13:97:50:28:c2:31:
                    37:f3:ae:2a:b6:63:da:2d:76:7b:58:6a:44:65:98:
                    a7:b2:73:63:4a:ea:a9:78:9e:8d:28:ae:69:74:af:
                    04:9a:fb:c2:3c:7e:49:41:20:2e:ae:5b:d1:99:5f:
                    32:11:2e:33:35:8f:45:d2:ad:95:8c:1a:c4:a0:34:
                    a8:cc:3d:4d:9f:e7:2e:25:e4:e7:60:ce:41:26:3d:
                    f4:a4:47:d1:f4:59:cd:0d:0e:91:36:f3:b6:5b:40:
                    3c:ff:8e:b5:79:f8:4f:96:ca:61:2c:c7:07:a5:c7:
                    d6:4a:0a:bc:05:a5:c0:25:c5:1f:b6:47:a3:33:51:
                    3e:66:6a:c3:7e:b9:5e:2c:66:65:7c:90:53:5e:28:
                    3d:7a:0b:3b:87:a3:64:84:e9:65:b6:23:f5:ad:35:
                    ac:89:2a:2a:8d:f6:95:c9:26:28:b6:ae:82:45:80:
                    f7:79:b7:04:fd:df:79:b1:aa:91:39:33:c4:54:9d:
                    41:d6:2b:37:11:8e:66:10:9f:cc:4e:b2:2d:43:21:
                    b6:f4:ef:16:3b:8a:3c:a4:fd:b0:4f:44:1c:ff:7e:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:45:B2:48:3D:A7:FC:B9:BC:4C:29:E0:89:08:28:BE:32:A5:AA:A5
            X509v3 Authority Key Identifier:
                keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/TEWySD2n_Lm8TCngiQgovjKlqqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.160.160.0/23
                IPv6:
                  2001:67c:19ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:0e:04:5f:0d:68:8d:48:cf:26:a4:a6:b8:13:a6:90:eb:
         b0:91:28:85:5a:20:64:03:14:c9:f3:03:d1:9e:77:6a:32:6e:
         b2:79:db:af:ac:77:17:f3:bd:10:77:9b:cb:cd:f2:8f:9d:ab:
         93:7a:84:e9:88:08:05:a7:6c:93:bd:a0:5f:70:ec:82:9d:cd:
         b0:7d:99:b3:e6:4d:cc:7c:67:bd:16:15:6f:a7:9d:83:a7:d8:
         1b:da:13:81:5c:f2:53:42:98:15:07:8e:b7:a3:55:90:70:3b:
         e4:68:d6:ee:80:be:b3:8e:87:8d:88:2c:58:eb:05:d1:5f:41:
         16:7f:35:2c:3c:1c:45:59:69:df:e1:22:63:c6:36:d8:2a:12:
         6b:43:9e:8f:13:06:db:19:6b:85:46:55:f9:a9:d9:68:0b:df:
         ad:91:22:6f:83:87:16:4f:2f:3a:dc:92:89:09:cd:da:0c:a8:
         e6:f3:92:7a:26:1b:dd:32:f5:5e:66:a0:74:97:55:49:01:cb:
         1c:24:cc:e3:0b:db:08:13:9e:cb:7d:d3:be:a9:fc:49:21:5c:
         d4:3d:c5:ad:d2:fc:3d:4d:ce:17:9d:dd:bf:4b:9e:5a:bd:32:
         df:ba:69:40:9c:7a:f7:14:3a:1b:6e:7f:37:96:74:0f:f7:86:
         11:e9:ed:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----