Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RuOwvwbIFMzvr-JJuIIBLnidaQM.roa
File:                     RuOwvwbIFMzvr-JJuIIBLnidaQM.roa (raw, json)
Hash identifier:          cv97ECCfMl7/UNRyzv99fbVcXitJl6HEHDcZt0LitWI=
Subject key identifier:   46:E3:B0:BF:06:C8:14:CC:EF:AF:E2:49:B8:82:01:2E:78:9D:69:03
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBBD5CD59D124DEB48B33F063BD9E9
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RuOwvwbIFMzvr-JJuIIBLnidaQM.roa
Signing time:             Mon 02 Jan 2023 05:37:04 +0000
ROA not before:           Mon 02 Jan 2023 05:37:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51058
IP address blocks:        94.247.43.0/24 maxlen: 32
                          2a01:360:99::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 10 Jan 2023 12:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:bd:5c:d5:9d:12:4d:eb:48:b3:3f:06:3b:d9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46e3b0bf06c814ccefafe249b882012e789d6903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:f1:27:d4:c0:97:fd:d9:5c:2b:3b:75:ac:
                    1d:a8:93:7f:ec:51:69:68:0f:22:3c:7b:f2:63:19:
                    0b:19:fa:91:1d:06:d3:57:d9:d1:8f:33:76:a2:6f:
                    fe:03:20:c1:b9:ed:df:3a:46:a1:ec:a2:f8:40:18:
                    ec:04:ad:b2:69:20:12:ec:ae:ba:20:d8:07:f5:96:
                    1c:98:81:6b:f3:99:01:3a:00:7c:0a:79:28:c7:7e:
                    12:0e:77:db:49:44:2a:07:d6:0f:e9:b5:9a:c1:83:
                    81:8e:ab:13:10:b2:eb:ef:c4:6a:e1:c7:74:b3:b7:
                    66:f6:93:fa:86:28:93:7e:63:ac:dc:ff:56:48:10:
                    77:12:36:c7:b8:1f:6c:70:15:d6:df:d1:f8:89:4d:
                    3c:ee:09:de:9e:9b:f4:de:33:4b:f9:6a:2a:9c:7a:
                    40:e6:39:20:6b:8d:de:12:f7:fe:8f:3f:14:22:cf:
                    da:e6:ba:d9:e4:76:a5:bd:b6:19:ed:26:37:cb:21:
                    c5:94:2f:a1:92:20:94:27:ba:1f:4d:14:bf:60:b9:
                    70:cb:94:a3:55:b8:37:6b:d3:31:12:7d:f5:4f:c8:
                    21:ba:b8:9a:48:b0:19:0c:d1:0f:df:68:8b:66:64:
                    c0:42:8f:d1:a0:8d:6a:53:4d:d7:f8:3c:0f:1d:d9:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:B0:BF:06:C8:14:CC:EF:AF:E2:49:B8:82:01:2E:78:9D:69:03
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/RuOwvwbIFMzvr-JJuIIBLnidaQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.43.0/24
                IPv6:
                  2a01:360:99::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:63:b0:a2:22:8c:7f:bd:d9:2b:65:16:92:01:fc:3a:4a:20:
         1b:b8:81:be:be:85:3c:d5:eb:1d:58:47:81:02:97:e2:76:70:
         53:94:9b:27:30:82:05:f3:2b:bc:36:4b:9e:15:ef:9d:37:d1:
         af:61:41:e3:aa:d8:69:8e:23:4f:42:ea:d6:52:37:b6:8c:ff:
         a9:42:1e:a2:7a:e0:1d:38:6b:ab:5c:23:c7:87:75:d5:7c:9d:
         c7:c5:ee:06:b3:71:d2:0e:90:42:fe:1c:df:59:3a:27:a7:d1:
         c5:d0:c8:fd:7f:23:83:ca:83:3d:00:6b:f5:7b:6f:73:ea:45:
         a8:8e:1c:93:80:eb:bf:74:d2:81:35:86:0b:2b:50:11:ff:2b:
         f0:7b:58:48:bb:e3:2a:e1:92:c9:55:69:a7:20:5e:c9:4f:cf:
         dc:1f:89:9b:81:98:4c:b3:00:9d:a5:0c:51:16:09:ea:2f:6d:
         23:5b:28:80:08:89:61:83:11:b9:c1:01:3a:3e:7f:5b:3b:56:
         7e:d2:d5:1a:bf:a9:f0:56:52:a2:21:a9:77:9e:18:42:22:e0:
         da:da:d9:21:6c:71:4f:0f:d4:15:c9:a8:1f:f4:14:85:2f:8a:
         a8:5f:2b:ee:7c:69:d6:a9:7b:ca:5b:bf:4d:b7:1d:62:0b:9f:
         1b:67:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----