Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xrfLbDvGs33hUYw49qtsbzBsTJ0.roa
File:                     xrfLbDvGs33hUYw49qtsbzBsTJ0.roa (raw, json)
Hash identifier:          dCSUslJdhqwctExe6GdmeEkuKEffS8AfZI2H2kE90+g=
Subject key identifier:   C6:B7:CB:6C:3B:C6:B3:7D:E1:51:8C:38:F6:AB:6C:6F:30:6C:4C:9D
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBBF94CFD25BF152B0916F478D9515
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xrfLbDvGs33hUYw49qtsbzBsTJ0.roa
Signing time:             Mon 02 Jan 2023 05:37:04 +0000
ROA not before:           Mon 02 Jan 2023 05:37:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62387
IP address blocks:        5.1.79.0/24 maxlen: 24
                          2a00:f826:11::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:bf:94:cf:d2:5b:f1:52:b0:91:6f:47:8d:95:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c6b7cb6c3bc6b37de1518c38f6ab6c6f306c4c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:0b:12:0a:79:0d:54:5f:88:e9:3a:7b:0c:
                    5a:ce:6a:10:14:bd:5d:98:9e:54:4e:3b:7c:db:8a:
                    97:2e:c5:16:e8:d7:9d:1f:50:77:63:dc:21:c6:f6:
                    8a:d2:64:db:c7:03:6a:89:cf:7b:25:e6:7e:8b:7a:
                    a0:b2:e6:5c:8c:30:4f:73:df:f9:29:62:b9:93:aa:
                    b4:b8:4b:51:a5:8d:ea:1b:ab:a5:14:31:84:12:86:
                    ab:dc:af:58:3a:8f:13:b6:85:dd:e4:a5:97:82:a1:
                    cc:ac:11:25:50:26:1e:1a:8c:32:09:d8:3d:b8:27:
                    11:63:cd:31:9f:bd:75:54:7c:c7:9d:9a:59:fd:a2:
                    93:ec:56:ea:b0:56:d7:19:f4:6e:0b:53:c9:26:67:
                    9c:2d:a2:cf:c5:e6:7f:10:98:02:09:3b:6e:ae:c0:
                    a0:ca:35:7a:6c:76:eb:dc:02:71:a1:d0:23:4e:3e:
                    b4:88:be:d6:96:37:d3:4d:b5:78:a8:52:00:f1:42:
                    8f:8b:5a:28:2b:c1:df:c6:d0:cd:9a:22:61:dc:4c:
                    18:94:00:41:73:96:a4:f1:85:c9:91:ef:a3:24:ad:
                    b2:9e:5c:49:1a:ef:d6:fc:b0:1f:a9:91:42:6e:9d:
                    38:ea:21:60:05:8c:c9:d8:59:38:de:e2:66:f7:6d:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B7:CB:6C:3B:C6:B3:7D:E1:51:8C:38:F6:AB:6C:6F:30:6C:4C:9D
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/xrfLbDvGs33hUYw49qtsbzBsTJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.79.0/24
                IPv6:
                  2a00:f826:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:96:08:0f:fd:82:2d:50:0f:25:93:e4:5d:62:74:27:cb:
         44:f9:c6:93:59:b0:6d:44:f7:c2:da:7c:48:40:a4:d8:a3:fa:
         45:c7:58:5c:19:2f:af:5d:91:ad:55:38:da:23:68:46:01:3b:
         7e:c2:2f:7f:58:3e:34:64:c9:e7:42:fd:80:62:c5:e7:05:2a:
         7d:e3:20:3c:84:7c:e3:4a:81:6c:ec:8b:0c:d4:f4:73:0b:b7:
         0f:43:0a:73:67:21:ea:fa:25:bf:92:2c:3f:8d:fd:41:74:90:
         2e:fb:65:f5:38:ed:81:11:0d:7b:78:8c:1d:74:01:ff:c7:2a:
         ed:63:e9:ff:0b:9a:c8:26:81:e0:47:3d:09:eb:88:62:52:a6:
         30:e9:34:12:d0:c2:81:ce:69:ac:95:0b:93:17:69:fc:9d:54:
         4c:c7:f8:f2:32:d4:b0:ca:e5:b0:30:83:8d:cb:8d:60:e4:31:
         74:34:fa:bc:8c:2f:6b:34:b0:12:29:e7:91:59:49:50:33:22:
         26:12:17:97:45:30:54:82:a4:92:0e:74:8c:f7:7d:9f:70:44:
         a4:9d:5e:c8:28:df:f9:ca:78:3d:6b:24:ba:ed:a9:ab:ba:5c:
         90:7c:68:eb:22:6e:74:bf:21:81:a3:68:6d:54:08:1d:91:cc:
         e6:9a:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----