Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa
File:                     qclYjs_OPDa0soOTfsgsg_rud1k.roa (raw, json)
Hash identifier:          QDGxVWR8+aLLPvEnSxArlHjoc8/Uja8MGaLQfqM7yU0=
Subject key identifier:   A9:C9:58:8E:CF:CE:3C:36:B4:B2:83:93:7E:C8:2C:83:FA:EE:77:59
Certificate issuer:       /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial:       018CCA2A7F0A5E249CC0E9ECE83D68E2C98E
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa
Signing time:             Tue 02 Jan 2024 12:33:51 +0000
ROA not before:           Tue 02 Jan 2024 12:33:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13631
IP address blocks:        194.59.56.0/23 maxlen: 24
                          2a13:bb80::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 11:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:7f:0a:5e:24:9c:c0:e9:ec:e8:3d:68:e2:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
        Validity
            Not Before: Jan  2 12:33:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a9c9588ecfce3c36b4b283937ec82c83faee7759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:46:3a:a5:32:fa:b6:0c:d4:e4:8d:06:2f:
                    9e:c1:75:1c:f5:1a:06:41:a0:72:d4:7c:12:13:64:
                    c6:17:43:e9:db:42:31:5a:31:94:36:79:01:b8:0c:
                    4b:44:17:e0:a1:bb:ce:22:7d:14:c0:c3:62:a6:a1:
                    90:0b:9a:3e:dd:6f:b7:5d:48:10:2a:69:11:f8:26:
                    58:41:11:b5:4a:e2:85:51:42:05:af:66:94:c1:aa:
                    5b:67:26:91:64:47:5c:6f:d6:3f:0f:2c:28:81:e0:
                    29:48:5c:ef:8a:bd:4f:d8:f5:79:b2:88:cd:e5:84:
                    27:2a:84:99:2f:f3:f8:f7:18:43:91:01:87:58:78:
                    ea:e4:7d:de:0b:0b:85:b0:42:5c:b7:17:45:0b:f2:
                    d5:93:bf:e3:e9:10:7f:7d:0d:b1:f8:4e:62:e5:6c:
                    2e:92:2c:2c:22:7a:21:33:92:58:a8:d4:e2:e6:e3:
                    0b:ee:cc:5d:bd:d2:db:cb:60:b5:0d:92:29:d5:06:
                    1d:fe:2b:91:4f:ec:0d:e4:37:c9:33:fa:4f:b3:c3:
                    e7:53:5e:11:6b:30:1e:3a:6e:f4:a1:27:2a:ff:42:
                    d5:52:da:db:8f:7e:18:ba:78:25:76:7d:86:52:cd:
                    54:84:36:2d:4b:e2:62:4f:ce:93:f7:00:cb:0a:2b:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C9:58:8E:CF:CE:3C:36:B4:B2:83:93:7E:C8:2C:83:FA:EE:77:59
            X509v3 Authority Key Identifier:
                keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/qclYjs_OPDa0soOTfsgsg_rud1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.56.0/23
                IPv6:
                  2a13:bb80::/29

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:6c:f1:31:6b:56:2f:42:fe:df:0b:75:85:9a:aa:f1:b0:
         13:8c:28:ed:d7:00:e4:c9:66:72:73:31:21:03:63:a4:ac:81:
         16:a4:1b:c9:eb:5a:d5:5a:b5:18:9a:23:06:af:27:d1:ed:2c:
         81:4b:6f:ba:63:e6:df:61:99:44:09:a5:b0:c3:d3:1c:9e:0e:
         39:45:41:0a:50:74:6d:b6:f4:f8:3b:97:5e:cc:a7:d7:7b:4d:
         45:9c:77:f7:1a:2a:ca:5e:fa:90:e9:a4:50:48:a0:c3:45:18:
         b7:1f:39:80:5b:14:b9:63:ea:9a:a7:85:d2:36:5d:ea:e3:e9:
         dd:8f:84:15:ab:2d:6a:6a:7d:dd:f9:4c:a0:ce:0e:17:02:a6:
         c4:a9:9d:e6:1a:a2:05:55:53:b7:14:40:1a:33:88:32:7a:98:
         ea:4a:ee:16:1a:5a:57:06:e7:fc:ea:5e:0c:c6:ab:bc:c8:1d:
         1d:9e:9a:0b:88:40:60:43:ce:62:6f:23:6d:a8:e5:5c:c0:8f:
         aa:72:e5:1f:17:eb:66:1b:6a:69:f4:66:f6:b1:dd:43:45:19:
         91:87:6b:5d:a1:72:b0:c1:af:99:b0:75:9d:52:ba:80:05:05:
         4e:3f:90:91:4f:58:53:bb:0e:9d:5c:73:32:9a:7e:a7:f5:98:
         ef:e9:32:1a
-----BEGIN CERTIFICATE-----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