Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/ToS5JWTouwxQ-MptLMaboyPuaBQ.roa
File:                     ToS5JWTouwxQ-MptLMaboyPuaBQ.roa (raw, json)
Hash identifier:          btx55B5LjCBfCpc83O6Y4WpvbA5moyFQwjkGoqESl0A=
Subject key identifier:   4E:84:B9:25:64:E8:BB:0C:50:F8:CA:6D:2C:C6:9B:A3:23:EE:68:14
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       018AB2F99AFEAD52E2F8BAFFF000DA084964
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/ToS5JWTouwxQ-MptLMaboyPuaBQ.roa
Signing time:             Wed 20 Sep 2023 14:23:37 +0000
ROA not before:           Wed 20 Sep 2023 14:23:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61232
IP address blocks:        193.135.57.0/24 maxlen: 24
                          193.135.56.0/24 maxlen: 24
                          2001:678:e44::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b2:f9:9a:fe:ad:52:e2:f8:ba:ff:f0:00:da:08:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Sep 20 14:23:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e84b92564e8bb0c50f8ca6d2cc69ba323ee6814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:84:31:5b:46:08:e4:da:5a:23:8b:c9:11:
                    9e:50:d9:64:bd:84:1c:95:d7:c9:19:ba:6c:5a:f2:
                    99:30:6e:3e:7f:46:46:d7:ff:21:c2:c2:07:59:88:
                    ad:a2:ea:22:b6:cf:8c:c5:21:9b:60:a2:b4:7c:43:
                    cf:3a:dc:b2:a5:51:b6:f2:cc:c7:d5:56:92:92:62:
                    51:28:24:de:b7:29:a1:2b:83:ef:78:15:59:3e:76:
                    37:75:4a:31:bc:a6:22:ad:ee:b6:28:94:0e:bb:5e:
                    c8:73:26:b9:ea:02:e8:ff:74:9d:96:c4:ab:dd:dc:
                    31:12:dc:e0:4c:59:05:51:55:39:1a:f5:18:03:96:
                    2a:40:fc:13:d8:99:d4:2a:62:e0:1a:b1:15:bb:66:
                    bb:f3:19:0c:f4:c0:c1:ac:e9:bb:94:27:18:0a:d9:
                    f1:cc:ce:9c:d0:b2:e6:3c:f5:c2:a8:c2:98:b6:46:
                    f7:a8:34:f0:bf:f4:e8:6e:76:d1:b7:bb:7a:87:43:
                    b2:b6:c2:af:fb:eb:fe:1e:c5:0d:59:f3:62:32:59:
                    18:dc:ea:e9:2b:36:70:39:62:7b:84:49:73:27:d5:
                    ee:98:8d:e1:a9:da:cf:8f:d4:37:49:a9:36:ee:be:
                    38:cb:1b:b0:12:15:b2:4d:42:dc:64:43:81:40:70:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:B9:25:64:E8:BB:0C:50:F8:CA:6D:2C:C6:9B:A3:23:EE:68:14
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/ToS5JWTouwxQ-MptLMaboyPuaBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.56.0/23
                IPv6:
                  2001:678:e44::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:d4:46:b3:ee:62:9a:7f:c1:fc:18:db:69:b3:c1:f9:f2:a2:
         00:bf:e5:90:31:b6:9e:3f:72:03:17:8b:60:e9:3c:ed:08:60:
         f5:49:fb:d0:80:13:5e:2b:bc:e2:5e:60:5a:1a:b9:80:07:65:
         cb:13:28:c1:4b:a4:e0:e4:bb:bc:09:7a:a5:a6:b1:bb:64:07:
         bc:17:50:0b:71:2e:cf:b4:56:f0:01:f6:8a:99:3f:98:0f:a0:
         7c:81:3f:43:7a:4d:77:3b:97:b3:43:50:99:9f:b7:ce:aa:25:
         17:b1:6d:41:4b:f0:1a:28:94:da:bf:c8:17:67:71:d7:de:48:
         92:70:b1:e9:55:e9:2e:ec:f8:ff:24:0c:eb:3e:ff:b9:03:c7:
         b6:3e:a6:56:2d:41:c7:51:7a:15:ad:92:5d:84:d4:f0:74:87:
         49:e3:6b:87:ea:e9:89:50:42:c2:bd:8f:13:32:35:70:5a:50:
         49:fb:a0:0c:f1:9e:6c:1d:98:c3:76:d5:f6:f6:f3:94:08:07:
         1f:c6:61:1f:8a:09:0e:ca:e8:1f:4e:9b:e6:61:03:3d:bd:d0:
         fd:79:d7:ba:c6:67:8c:53:81:11:b0:77:5d:33:2d:4e:d0:71:
         a6:6e:6f:82:de:d8:08:fd:68:fc:fa:43:b0:52:7b:b3:c1:26:
         72:4f:79:db
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 26 06:06:21 2023 by rpki-client on console-ams.rpki-client.org