Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_PlzHfUaho2yB8BLiW1bNJKdREs.roa
File:                     _PlzHfUaho2yB8BLiW1bNJKdREs.roa (raw, json)
Hash identifier:          gVXBbNc46sDWMCizkfja3beBCjFkIW+Wa2kwpFxPoFE=
Subject key identifier:   FC:F9:73:1D:F5:1A:86:8D:B2:07:C0:4B:89:6D:5B:34:92:9D:44:4B
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018CCA2B56856FC71D9BC75280115CFD528C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_PlzHfUaho2yB8BLiW1bNJKdREs.roa
Signing time:             Tue 02 Jan 2024 12:34:46 +0000
ROA not before:           Tue 02 Jan 2024 12:34:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50131
IP address blocks:        185.193.37.0/24 maxlen: 32
                          2a06:82c1::/48 maxlen: 128

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 01:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:56:85:6f:c7:1d:9b:c7:52:80:11:5c:fd:52:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  2 12:34:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fcf9731df51a868db207c04b896d5b34929d444b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:3b:3b:65:0e:91:88:47:30:0d:d6:b9:70:
                    c5:f8:f4:40:29:5e:83:f7:8e:36:d7:02:36:a5:7f:
                    c4:b0:2a:78:fd:59:cd:b2:4f:a0:a3:56:8b:f7:a7:
                    15:04:81:c7:9d:08:db:3a:71:96:40:84:81:93:ce:
                    23:e5:4b:c6:de:f6:5d:9a:7e:ca:3f:a2:ec:90:37:
                    c5:c2:11:2c:29:14:ad:b6:92:67:35:36:9c:cc:34:
                    32:ab:c2:70:14:f9:7f:51:ff:31:47:6b:20:7b:76:
                    88:08:31:83:1f:0a:75:ab:ff:60:b6:2b:e2:e0:4f:
                    8e:9c:00:25:5f:09:f7:f6:f3:af:26:7c:89:e2:49:
                    ac:2a:4a:be:ef:49:13:5f:47:e1:79:da:40:0b:ab:
                    7a:02:d8:26:b7:48:96:64:25:40:e9:92:b9:62:d3:
                    a8:4d:86:3b:ef:01:4c:f9:4a:c7:bc:5a:ee:fa:94:
                    3c:7e:69:41:c3:34:36:90:6a:70:6b:f5:59:79:15:
                    88:4b:23:53:05:b1:fc:d8:ca:7f:0b:55:7c:3c:ca:
                    df:59:3e:2c:a2:fe:24:f4:c2:c7:d3:a6:e2:47:c9:
                    2b:6a:49:83:ef:ea:e3:e5:b0:5a:15:47:d8:97:f1:
                    29:e0:f9:d4:93:53:06:f6:0b:53:69:fb:48:cc:a5:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:73:1D:F5:1A:86:8D:B2:07:C0:4B:89:6D:5B:34:92:9D:44:4B
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/_PlzHfUaho2yB8BLiW1bNJKdREs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.37.0/24
                IPv6:
                  2a06:82c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:21:d3:e2:22:97:26:60:f3:16:89:e2:69:3e:20:a9:60:32:
         5e:48:32:50:50:fa:57:e8:dd:65:f8:54:03:18:fb:3f:35:e3:
         e9:09:a3:e8:83:4c:87:5c:be:02:98:55:64:86:3f:af:e6:6e:
         b8:55:44:ca:04:05:c1:74:73:4b:c6:f9:d3:65:68:db:76:0d:
         a1:b0:d7:19:9c:7f:2a:ad:7b:84:40:26:e3:7c:01:c8:18:7f:
         08:7f:aa:1f:f0:6f:9d:4c:7b:d2:3f:98:08:bf:d2:00:a4:40:
         e0:e7:a4:c1:26:3f:8d:25:df:88:96:7d:87:0c:7b:0c:99:7e:
         30:63:1b:fa:90:95:23:d8:aa:46:8d:a7:05:90:07:04:40:b3:
         e6:97:06:d6:ca:6a:97:f2:f3:f6:a4:87:48:ac:9f:f7:4e:d9:
         28:8f:ba:e3:c0:97:66:a6:ca:6c:45:c9:3c:a2:3d:f6:c8:34:
         79:80:47:9a:20:ff:cd:f1:b5:1f:ff:dc:ed:aa:d7:08:ef:ba:
         76:7a:24:1f:e0:f5:fd:02:88:5e:10:c9:36:d7:d5:ab:f3:0a:
         ee:50:8f:02:ae:7d:27:e7:bb:84:6a:23:e6:ed:80:34:3f:d4:
         01:f3:59:88:b7:41:23:c4:11:13:39:52:74:ec:a1:ee:b6:03:
         a2:28:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----