Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa
File:                     w6BCn0y0VgYc9SNbA_fikG50Nww.roa (raw, json)
Hash identifier:          WqfMZ91T8ESR/3g2Bkz/GsmnTfkY9wjEFwuIAo6zSI0=
Subject key identifier:   C3:A0:42:9F:4C:B4:56:06:1C:F5:23:5B:03:F7:E2:90:6E:74:37:0C
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       0187BD3E7D0E2B55D34D937A753CFD70D9C2
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa
Signing time:             Wed 26 Apr 2023 11:06:41 +0000
ROA not before:           Wed 26 Apr 2023 11:06:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        2.58.54.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bd:3e:7d:0e:2b:55:d3:4d:93:7a:75:3c:fd:70:d9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Apr 26 11:06:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3a0429f4cb456061cf5235b03f7e2906e74370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:28:a2:84:6f:23:3b:47:7a:54:6b:09:3c:aa:
                    37:70:5a:2e:41:d6:7e:59:e6:3d:59:4d:4f:a2:73:
                    1d:ef:8e:fc:72:74:de:32:8f:8d:88:f8:5a:30:a0:
                    e6:0a:d4:27:2e:10:bb:40:d9:b8:28:a8:e1:f9:7b:
                    13:1e:6e:a3:6c:f1:35:b9:36:0c:2e:3f:b1:57:65:
                    92:8b:6a:62:16:dc:b5:c1:9c:cc:f2:71:f9:6a:bd:
                    50:88:54:00:c8:89:46:01:04:8c:5f:f6:3c:3c:30:
                    09:87:c0:6f:dc:df:c8:2d:1c:67:14:b8:0c:d0:4d:
                    92:19:38:22:89:45:73:15:a4:d5:76:ba:bc:74:fd:
                    77:e6:f2:f6:70:75:74:c9:c9:7e:a2:1b:fc:8b:39:
                    af:33:10:a2:8a:8e:8d:34:7c:b7:f6:a8:ac:df:b0:
                    e9:54:dd:e7:6a:e2:8c:87:7a:c1:6c:7a:0b:09:8c:
                    44:06:b2:bf:90:3b:b3:1c:9c:a5:dc:a8:bf:49:ec:
                    67:f0:61:56:ec:54:da:8d:b2:d0:28:f0:f5:28:12:
                    0d:55:2e:2d:93:7a:16:10:57:dc:9f:2b:05:85:ff:
                    38:c9:1f:10:64:a8:35:25:f2:9d:3c:9c:67:13:6c:
                    3e:66:fc:eb:a0:f9:ee:38:6b:53:5c:9b:d9:64:6b:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A0:42:9F:4C:B4:56:06:1C:F5:23:5B:03:F7:E2:90:6E:74:37:0C
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/w6BCn0y0VgYc9SNbA_fikG50Nww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:1e:88:0d:88:70:67:74:dd:b2:47:5d:3c:20:58:2b:d4:
         4f:6c:94:cf:87:ea:4a:71:c5:a6:50:13:38:96:d3:0a:34:e7:
         cc:bb:53:de:41:2f:ba:ec:52:e6:98:0f:49:16:2e:7d:d7:2a:
         b8:47:14:64:e8:74:45:45:43:15:1f:1a:aa:15:65:29:ed:89:
         fc:2c:2f:46:f7:c9:df:4a:6b:a1:53:33:0a:69:30:72:01:bb:
         bc:63:c7:8a:03:8b:9b:70:cd:de:53:89:86:a7:9f:85:75:65:
         33:7d:69:d0:55:de:24:7a:1e:97:a9:03:22:88:ff:2e:93:bc:
         44:d0:04:13:a7:4c:9c:94:94:d9:37:f2:2c:3d:4c:ad:ca:0c:
         da:4b:80:5b:2b:b6:58:6e:73:37:e8:df:a8:1f:4f:8c:a8:a0:
         a4:56:df:22:70:73:b2:09:fe:90:ac:2b:e5:e9:1b:d0:a1:4d:
         a6:ce:a7:7e:81:23:d0:6e:af:eb:0e:5a:67:db:a7:6c:55:44:
         00:b6:65:56:9d:3b:22:37:9b:6f:a1:e7:6f:32:af:58:c4:3d:
         62:d1:a5:02:37:41:0b:e1:d3:1d:79:38:9d:45:2e:11:0d:4d:
         13:24:69:49:b3:ca:7a:15:d5:90:da:ef:e8:a7:76:f3:0b:8e:
         cb:de:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----