Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/v4ZgpzhjshVhQ003GRb43DXUqLg.roa
File:                     v4ZgpzhjshVhQ003GRb43DXUqLg.roa (raw, json)
Hash identifier:          mQrNesQLoxiftb9qOt9wnf9YmKDWl5xRTUtbjVeY2dY=
Subject key identifier:   BF:86:60:A7:38:63:B2:15:61:43:4D:37:19:16:F8:DC:35:D4:A8:B8
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       01856BAEE4683CE1471E257E33C4293096B4
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/v4ZgpzhjshVhQ003GRb43DXUqLg.roa
Signing time:             Sun 01 Jan 2023 04:55:01 +0000
ROA not before:           Sun 01 Jan 2023 04:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59712
IP address blocks:        185.1.0.0/24 maxlen: 24
                          2001:7f8:70::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ae:e4:68:3c:e1:47:1e:25:7e:33:c4:29:30:96:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jan  1 04:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf8660a73863b21561434d371916f8dc35d4a8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:30:d1:27:52:de:bb:88:c1:be:c3:39:d4:
                    f5:9a:ef:8e:c3:9e:82:99:61:87:1d:44:f1:9b:40:
                    01:bc:f0:ad:85:ff:a0:c5:d7:5b:c6:ef:c4:f9:59:
                    83:b3:7c:3e:2d:8c:7d:69:3a:94:d6:78:05:3d:ec:
                    41:e5:47:4e:bc:f0:5b:e3:44:b0:d4:67:93:db:f8:
                    a0:e7:54:c0:81:ac:72:a1:45:e2:f8:a3:73:d2:cc:
                    17:cd:fc:05:f2:53:5c:32:83:40:96:3a:88:7a:3c:
                    c3:f0:60:1c:58:94:a3:48:df:57:55:76:55:23:e0:
                    5e:3e:ae:72:f6:4a:bf:c5:91:6f:b7:de:d7:f0:8e:
                    0a:59:e6:6f:c6:a8:d4:44:37:0f:7f:01:48:de:60:
                    ba:e1:ca:19:83:d7:21:b6:0e:8f:f7:15:65:45:fd:
                    6a:83:60:79:52:9c:6e:e3:bc:8d:02:ba:1d:ce:78:
                    6e:1f:9d:c7:72:1d:93:3d:31:e4:3c:7d:8f:97:45:
                    23:8a:46:c9:51:b2:33:79:4b:8c:69:ff:04:2e:6f:
                    e8:d7:3e:e9:9d:08:8f:06:e7:12:49:35:88:a5:9b:
                    ef:e2:d7:c2:26:79:5b:9e:b2:c4:a2:eb:f9:77:70:
                    5a:9a:b6:08:2f:70:29:2a:2c:11:2b:fe:ec:bb:0e:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:60:A7:38:63:B2:15:61:43:4D:37:19:16:F8:DC:35:D4:A8:B8
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/v4ZgpzhjshVhQ003GRb43DXUqLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.0.0/24
                IPv6:
                  2001:7f8:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:b6:0e:e4:e6:79:93:74:ef:31:ed:e6:08:28:7b:ab:58:
         40:4b:a9:10:62:26:3b:9e:7a:98:9d:ae:28:36:56:ed:3c:5c:
         43:d9:a9:9a:75:9b:d1:fa:25:4f:44:b2:70:ef:65:4a:f2:ad:
         b1:4c:dc:e7:63:9a:4a:cd:25:8e:1d:a9:c1:bc:40:0e:ef:f8:
         18:23:00:d8:b5:5d:48:98:49:bc:96:ef:78:8f:f2:c0:79:8b:
         fb:6e:09:6c:0a:bb:98:c6:f8:87:2f:29:6e:99:84:93:db:47:
         84:c9:9e:9b:2e:d9:24:ce:20:8e:0f:7d:c8:af:4f:bd:ab:97:
         23:99:c6:a1:15:76:7b:c0:b8:22:00:57:cd:8e:2e:22:26:19:
         11:d9:4b:0b:44:b2:bb:f8:0e:15:81:01:2e:79:0c:28:6c:24:
         02:7f:b0:40:8e:c8:b3:4b:d7:cf:db:27:5c:5c:97:be:b4:09:
         57:84:5d:27:f8:1d:14:68:ce:05:1a:e8:cb:a3:2d:62:e1:fe:
         b0:3f:50:4f:1d:3b:7e:7e:c4:e1:22:2c:c1:fc:8b:78:db:ff:
         11:b7:4f:a2:d0:8b:f0:ed:17:24:75:bf:ef:f8:13:6b:d4:b0:
         50:80:c9:5f:5e:e6:5d:e4:dd:a9:19:52:7a:54:58:22:e0:ac:
         5d:ff:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----