Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/13bRqfaeWtqiCZaGcralBnnHaaY.roa
File:                     13bRqfaeWtqiCZaGcralBnnHaaY.roa (raw, json)
Hash identifier:          aho0L5SyagtJDlCS/85UZqnwCndnEqdHBCy+bpavB2w=
Subject key identifier:   D7:76:D1:A9:F6:9E:5A:DA:A2:09:96:86:72:B6:A5:06:79:C7:69:A6
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53F8DB35177582EA98E308B70AE00B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/13bRqfaeWtqiCZaGcralBnnHaaY.roa
Signing time:             Sun 01 Jan 2023 07:55:20 +0000
ROA not before:           Sun 01 Jan 2023 07:55:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50131
IP address blocks:        185.193.37.0/24 maxlen: 32
                          2a06:82c1::/48 maxlen: 128

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:f8:db:35:17:75:82:ea:98:e3:08:b7:0a:e0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d776d1a9f69e5adaa209968672b6a50679c769a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:e3:7b:47:44:ba:2a:7d:c4:e5:b6:06:17:
                    9a:52:1f:45:31:89:34:52:ff:bd:61:db:5a:29:af:
                    9d:15:8e:6e:35:62:13:45:35:bc:90:aa:b8:d9:04:
                    ee:d1:ad:0d:2b:69:1b:f9:5c:fa:ac:85:f4:78:ae:
                    85:77:f4:e8:11:60:96:56:85:a5:84:bf:79:30:07:
                    6f:fc:b9:3c:8f:13:80:a1:2d:86:35:47:5d:97:06:
                    07:2c:fc:22:ff:f6:70:45:73:a1:7b:41:74:1f:04:
                    bf:01:52:22:8c:44:96:7a:45:29:68:6f:21:37:e4:
                    62:ff:37:6c:0e:eb:e5:32:41:7e:bb:73:1b:25:ba:
                    42:d3:40:4e:fb:f2:f2:a9:22:1b:a6:10:b3:a5:df:
                    4a:22:a7:b8:34:56:2c:25:b5:08:ed:13:5b:84:bd:
                    a9:e8:b7:36:b5:00:1a:7e:44:bf:ac:90:1f:75:60:
                    4f:38:82:0f:fc:39:36:b1:ee:83:2f:45:9e:97:50:
                    d7:db:f8:65:a8:b6:b9:97:d5:94:0d:97:07:8f:f2:
                    f9:17:a2:af:84:70:4d:7f:44:ce:6f:52:53:88:21:
                    04:b5:c5:ab:01:d0:73:e8:12:8c:50:ec:60:ee:8b:
                    6a:94:77:09:6f:cf:87:9c:28:b0:18:1e:29:6c:99:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:D1:A9:F6:9E:5A:DA:A2:09:96:86:72:B6:A5:06:79:C7:69:A6
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/13bRqfaeWtqiCZaGcralBnnHaaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.37.0/24
                IPv6:
                  2a06:82c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:ad:65:cf:1b:27:2d:c1:5e:a9:7e:76:27:f7:97:50:d7:
         d8:a3:5f:5c:38:d6:bb:0b:49:a2:82:ba:b5:46:c5:8f:c5:e4:
         7d:7c:78:4f:e2:d2:c5:55:4f:63:88:f3:97:cf:ce:bf:9c:4e:
         81:45:7e:f8:3d:b4:68:89:dd:41:f2:4b:fa:12:4f:c4:74:9c:
         47:9e:99:a5:b3:85:cd:b8:26:b1:04:64:b7:e7:3e:c9:c9:cb:
         00:ab:90:0e:bc:94:05:5b:1a:c0:cb:c4:df:42:22:4f:ea:d2:
         1a:4d:c4:bc:46:a2:44:10:e8:5a:a8:ef:5f:50:3d:8f:db:75:
         8e:61:2a:b6:24:98:09:d9:35:91:25:7e:1a:7e:ea:a7:48:73:
         73:91:1b:97:67:10:5c:78:1b:3c:df:49:7a:ef:bf:39:94:74:
         46:57:7a:6a:1d:50:36:dd:33:a0:45:4b:2a:49:64:72:b8:bb:
         0f:c2:94:da:94:61:04:9f:b7:ec:4e:ca:af:8a:bc:80:31:af:
         96:af:bd:ac:dc:fb:df:38:d1:8f:75:f7:b5:74:a0:84:0e:52:
         f9:87:2b:cc:c1:6f:a3:db:2f:7f:f7:39:eb:e8:7c:8b:73:17:
         ee:d8:57:6d:69:5c:c8:2b:fd:c8:f7:d2:d4:ae:ae:59:fb:7e:
         be:da:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----