Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/A_YCQNps7oTQ6oKuKb1piNGyCSw.roa
File:                     A_YCQNps7oTQ6oKuKb1piNGyCSw.roa (raw, json)
Hash identifier:          VZoYZBMFa6sOI+o50gKJh+tgTamZ7O3yb4oQ7Oo9O/4=
Subject key identifier:   03:F6:02:40:DA:6C:EE:84:D0:EA:82:AE:29:BD:69:88:D1:B2:09:2C
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       01856F9DC4CD1A513D18E18E495607E126CF
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/A_YCQNps7oTQ6oKuKb1piNGyCSw.roa
Signing time:             Sun 01 Jan 2023 23:14:48 +0000
ROA not before:           Sun 01 Jan 2023 23:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50068
IP address blocks:        193.160.16.0/22 maxlen: 24
                          2a0c:9cc0::/29 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:c4:cd:1a:51:3d:18:e1:8e:49:56:07:e1:26:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Jan  1 23:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03f60240da6cee84d0ea82ae29bd6988d1b2092c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:c5:5d:e1:d7:2d:b9:35:5d:97:db:19:b9:
                    ee:0a:bd:5d:c9:1e:bf:5b:21:c4:ff:f4:f2:9c:57:
                    07:db:36:0e:35:7d:d3:b8:01:8c:55:ce:a7:56:1e:
                    0a:cf:69:ec:3a:1d:a5:b4:97:49:fc:7d:b1:79:f1:
                    05:87:03:c9:7f:18:e3:04:7f:69:30:30:04:95:33:
                    98:f1:23:19:c3:dc:12:ff:26:ce:9a:d4:d6:69:7b:
                    fc:c3:f1:84:4d:e1:c6:e4:95:f5:c5:8f:ff:ad:ae:
                    14:3b:47:db:5f:b8:82:27:34:20:17:13:9d:67:7c:
                    ca:68:4a:17:99:0f:b4:45:2d:14:b8:87:c1:c9:bb:
                    78:bc:78:31:9c:9e:09:9a:ed:2f:1f:2b:bc:c6:e2:
                    cf:b3:5d:57:b7:3f:06:55:e8:be:f1:91:c5:3b:3f:
                    76:d4:48:cd:3e:ef:c7:89:e4:00:a5:96:17:2e:59:
                    cc:5f:35:4f:f1:77:6f:51:be:ec:f7:a9:dd:54:ca:
                    eb:d0:5a:32:1c:7d:54:e6:f0:4b:5c:4c:ff:80:6a:
                    1a:0b:ad:ba:e7:af:77:ae:8f:92:23:0f:86:5a:62:
                    ee:9b:a9:61:43:39:cb:5e:a2:e2:44:16:de:45:3d:
                    6c:de:d8:41:ae:f3:ba:ef:7e:40:e5:8f:e3:98:7c:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:02:40:DA:6C:EE:84:D0:EA:82:AE:29:BD:69:88:D1:B2:09:2C
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/A_YCQNps7oTQ6oKuKb1piNGyCSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.16.0/22
                IPv6:
                  2a0c:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:ec:b4:a1:13:71:c6:a4:18:64:51:85:ec:7b:4b:55:84:19:
         3c:55:3b:99:b7:c1:24:1b:e5:c1:c9:07:d9:d1:37:e5:fe:b0:
         1f:a7:4b:f2:8f:a9:62:f7:b4:c1:0f:06:7a:72:17:ab:9e:3d:
         9a:c4:cf:0b:c5:56:f1:5b:dc:c2:23:ae:45:0f:81:48:9e:26:
         5b:18:6c:99:b6:72:fb:57:54:aa:9e:63:d1:bf:46:bf:a0:d2:
         f6:de:28:26:2a:b7:d8:ce:d3:c8:9a:27:7c:d7:fb:5d:70:fc:
         f0:e8:bb:61:19:d3:80:f5:ab:0d:49:27:54:c8:3a:86:c3:91:
         90:de:1a:48:4b:66:e3:3f:a5:21:ce:88:67:55:7a:23:72:92:
         5e:85:a9:b7:3e:0d:20:b9:32:0f:49:3c:18:a5:75:b2:ce:a0:
         6d:5d:88:94:ee:85:c1:4c:90:14:01:c7:3d:e2:34:51:60:ad:
         0b:29:9f:2c:9d:0b:69:75:14:af:08:06:9c:d4:81:5a:2e:3a:
         2a:4f:73:f7:af:eb:dc:6e:9b:30:2f:54:db:fc:dd:33:61:b0:
         0e:b7:cd:71:d5:1d:1d:65:84:33:60:d3:f3:c4:86:f1:0f:d1:
         b6:54:ff:3a:60:56:c1:d4:19:a3:73:dd:b5:ad:b2:83:4d:25:
         f4:79:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----