Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa
File:                     LdpFTGBdJibblsLM4OBKv4_T2Tg.roa (raw, json)
Hash identifier:          YaZFFYJgOeM7z/3GLpwl60I7wn7hrO6Nj3JyUbJ87b4=
Subject key identifier:   2D:DA:45:4C:60:5D:26:26:DB:96:C2:CC:E0:E0:4A:BF:8F:D3:D9:38
Certificate issuer:       /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial:       01856CB85B9A3F902609943912A2DF361399
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa
Signing time:             Sun 01 Jan 2023 09:44:59 +0000
ROA not before:           Sun 01 Jan 2023 09:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55933
IP address blocks:        193.42.24.0/22 maxlen: 24
                          193.42.24.0/23 maxlen: 24
                          193.42.26.0/24 maxlen: 24
                          2a06:5040:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:5b:9a:3f:90:26:09:94:39:12:a2:df:36:13:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
        Validity
            Not Before: Jan  1 09:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dda454c605d2626db96c2cce0e04abf8fd3d938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:0f:3a:91:5b:8e:fc:7e:7e:3c:ab:23:9f:
                    21:86:c9:37:8e:6b:db:d2:8f:f1:84:df:ea:a5:47:
                    77:f7:96:70:aa:82:e3:d6:59:4c:9a:5f:69:e8:d5:
                    21:60:e3:d3:d4:60:c5:65:e1:96:45:d8:b8:39:91:
                    20:e3:77:ff:d1:dc:10:2a:ab:48:c9:48:3e:c8:f6:
                    da:f6:91:ad:18:9b:97:f8:44:83:f1:01:fe:1d:39:
                    f1:1d:88:59:0a:b6:3d:04:9a:9d:c1:fd:84:6f:f4:
                    53:fc:86:8d:63:54:63:d8:14:a9:32:72:0b:f8:c6:
                    7f:23:a5:cf:da:c8:b6:ff:0f:4e:06:65:ca:4f:19:
                    df:f0:78:ba:88:6a:63:a5:de:df:20:75:b4:27:e4:
                    f2:3f:cc:dd:3f:1a:8c:bf:58:c8:14:a7:ea:63:bd:
                    ae:ba:b4:69:64:7c:b5:c7:8f:91:0a:f8:95:e9:27:
                    fb:75:49:b4:09:00:b8:ea:2a:16:9c:94:43:4c:51:
                    a2:00:5f:b2:20:1c:7a:87:b1:38:57:7f:c2:09:ff:
                    91:b3:ac:5c:e7:ed:59:4b:24:d7:04:9c:73:23:65:
                    d3:43:84:bc:9a:a3:10:e0:f7:20:37:98:a1:cd:84:
                    79:f1:1a:df:e8:bd:28:78:79:9a:e8:db:7e:a6:d7:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DA:45:4C:60:5D:26:26:DB:96:C2:CC:E0:E0:4A:BF:8F:D3:D9:38
            X509v3 Authority Key Identifier:
                keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.24.0/22
                IPv6:
                  2a06:5040:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:54:a1:a2:60:6a:ed:8c:06:ce:72:4c:25:8b:a1:20:b9:e5:
         c3:1d:a8:b2:82:57:a6:75:a8:54:2c:68:4f:b8:52:84:17:a7:
         f3:64:63:b0:b7:b9:df:95:a2:63:31:27:87:0f:30:e7:e0:e0:
         0a:e6:80:f0:d0:7d:60:f5:cb:44:30:e3:f2:6b:7d:64:83:23:
         7e:14:e4:cb:b4:2c:91:7b:06:cd:2f:f0:c0:30:4e:f3:63:90:
         15:1c:ab:ae:b3:9b:e5:b0:79:dc:b4:fd:27:d8:34:e9:3a:07:
         eb:20:e8:9e:34:23:70:df:08:6b:b2:cf:b8:28:fa:4d:9e:b0:
         bb:e4:2e:74:c8:66:d0:99:21:6d:b3:13:98:3a:29:07:82:0f:
         c0:62:9e:c5:db:e8:b5:28:5b:58:28:57:0b:c6:8f:c9:3f:31:
         ef:f5:8a:4f:84:95:57:d3:8a:8d:b0:2d:1b:57:a9:af:ca:00:
         61:b4:a9:7e:7b:e9:25:28:c4:51:31:b2:86:17:bf:89:c8:19:
         93:50:29:e6:f4:82:58:ca:32:37:90:71:d1:42:7b:9b:1a:d6:
         d5:0a:ed:93:07:1f:66:16:6d:18:74:a1:d5:92:02:c7:55:5a:
         ac:1c:d9:08:5a:df:a3:48:f2:c9:e9:e7:5e:c6:57:f6:7d:36:
         69:99:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----