Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/viwqp3_TRGu00cd4k0w0XmVqvv0.roa
File:                     viwqp3_TRGu00cd4k0w0XmVqvv0.roa (raw, json)
Hash identifier:          ndDU16eUka+9T5uToYFMXNVBP375AJHJhVkh6Ui7CvE=
Subject key identifier:   BE:2C:2A:A7:7F:D3:44:6B:B4:D1:C7:78:93:4C:34:5E:65:6A:BE:FD
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018CCA2B609A0BB8790A3872605967E8C5AB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/viwqp3_TRGu00cd4k0w0XmVqvv0.roa
Signing time:             Tue 02 Jan 2024 12:34:49 +0000
ROA not before:           Tue 02 Jan 2024 12:34:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201106
IP address blocks:        185.193.37.0/24 maxlen: 32
                          2a06:82c1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 01:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:60:9a:0b:b8:79:0a:38:72:60:59:67:e8:c5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  2 12:34:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=be2c2aa77fd3446bb4d1c778934c345e656abefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:f9:0b:96:d2:da:c4:d8:0d:a1:5a:f3:a1:
                    cf:38:cd:68:19:40:4e:cf:ab:33:4b:2e:ce:1b:f6:
                    95:d3:0b:11:2d:e1:d8:b0:7b:d4:22:b5:c7:ba:0f:
                    e8:55:f1:72:6c:e4:d9:83:04:a2:1b:d1:d2:cb:40:
                    f0:37:cd:c5:20:7b:f9:ae:22:98:fb:39:a4:42:d1:
                    ba:80:7c:e5:92:b8:6d:72:6c:9e:74:5c:d8:81:ac:
                    11:16:51:bd:9e:3c:9e:b4:50:18:e6:4f:16:4c:68:
                    c5:01:b0:dd:0e:88:1d:4b:0d:e7:b3:3c:ec:76:99:
                    57:b9:92:72:e9:5d:e9:c1:df:9c:b8:7e:14:9f:5d:
                    b8:0e:08:e2:86:15:ee:94:a2:bd:29:de:75:7a:b4:
                    04:0d:94:bc:28:54:db:b7:b0:51:95:43:67:8c:f8:
                    b4:fa:4d:ea:6d:4a:31:a5:1c:5d:79:10:73:91:46:
                    d9:1f:f2:c7:48:70:05:6f:e5:9a:50:87:47:57:5d:
                    cb:a6:a6:ef:53:11:71:e6:c7:72:d5:c1:b8:31:5a:
                    40:7c:83:50:44:78:97:04:33:5f:c1:14:0e:fe:e2:
                    17:4d:3c:80:d9:83:20:3d:ab:58:60:81:16:fd:58:
                    bf:ce:4c:44:9e:0e:17:49:61:c2:e5:f4:aa:81:06:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2C:2A:A7:7F:D3:44:6B:B4:D1:C7:78:93:4C:34:5E:65:6A:BE:FD
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/viwqp3_TRGu00cd4k0w0XmVqvv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.37.0/24
                IPv6:
                  2a06:82c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:92:da:56:47:1e:1c:83:5b:35:19:6a:67:d5:75:cc:8d:
         96:a2:5a:5e:ff:bf:6a:84:1a:a4:9f:c8:fb:b3:ff:04:7c:0b:
         b6:48:63:8f:5b:b5:ca:8f:c1:9a:c6:b2:e3:c8:d5:b7:44:b2:
         69:b6:b9:c1:a5:c4:41:83:9e:22:dc:41:82:95:f3:fe:f8:67:
         ed:6e:cc:83:15:a3:7e:ab:20:bd:b7:84:5c:c9:dd:47:8a:5d:
         07:ee:70:b1:2d:22:64:d0:9b:30:bc:40:b2:8b:ab:22:03:df:
         20:4f:12:8c:de:f7:26:4b:4e:7e:c6:99:dc:c8:83:04:22:6d:
         d4:3b:a6:d9:75:24:6d:55:a7:6b:93:90:be:ed:9e:10:d4:bb:
         e2:b8:eb:28:5c:6d:bc:6d:8e:d9:1b:d5:e8:f6:de:dc:2a:61:
         3c:76:70:64:55:b7:72:03:87:64:df:16:52:4c:b8:54:ee:74:
         ae:18:b6:d3:03:f6:84:ad:3f:d2:ae:57:9c:16:d7:a0:0e:f1:
         c8:09:35:32:d9:f2:e8:15:e0:06:e1:ff:94:a7:22:a6:eb:c6:
         35:0f:a3:87:16:cf:62:45:98:c6:ed:79:6c:9f:ff:a8:0b:99:
         0a:b4:ce:64:47:10:4d:64:0a:1d:72:0e:2e:2c:66:04:bf:f5:
         9a:5f:82:09
-----BEGIN CERTIFICATE-----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