Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/wBsjPykW9dkaUJMhsJgcDPB2lis.roa
File:                     wBsjPykW9dkaUJMhsJgcDPB2lis.roa (raw, json)
Hash identifier:          TovLlyp6fWwulYxZrIQTHhCx9uiFNBt0UOXF5kVyknQ=
Subject key identifier:   C0:1B:23:3F:29:16:F5:D9:1A:50:93:21:B0:98:1C:0C:F0:76:96:2B
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       018B6544E60E04A6370EB6F7F83B1740663F
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/wBsjPykW9dkaUJMhsJgcDPB2lis.roa
Signing time:             Wed 25 Oct 2023 05:18:15 +0000
ROA not before:           Wed 25 Oct 2023 05:18:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210917
IP address blocks:        193.30.116.0/24 maxlen: 24
                          2a13:4b00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:65:44:e6:0e:04:a6:37:0e:b6:f7:f8:3b:17:40:66:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Oct 25 05:18:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c01b233f2916f5d91a509321b0981c0cf076962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:98:59:c9:f6:92:2d:ec:87:7d:62:b4:35:
                    20:f2:b0:61:c3:dd:72:16:50:2c:9e:24:22:1f:8a:
                    af:f0:df:72:e2:65:ca:af:c7:1d:e5:54:c1:7d:27:
                    e8:3d:b6:c9:4e:83:28:61:7d:6a:75:86:86:3a:e4:
                    b6:be:e6:46:72:11:75:be:9f:12:e5:7c:55:31:03:
                    e4:fb:28:93:08:b3:17:e2:f8:5b:f6:82:69:8d:21:
                    2d:79:64:e5:d6:26:28:0b:b2:ec:f8:c2:af:0c:de:
                    6a:df:68:1e:53:69:56:ee:56:ed:07:78:2b:80:d3:
                    e0:b2:6e:45:81:f2:1d:b8:50:92:84:84:aa:db:5a:
                    99:61:06:fc:cb:11:a0:5b:43:3e:05:14:8d:07:fb:
                    33:8b:b6:1b:48:0b:bb:10:76:a9:83:4c:a9:d5:ce:
                    e9:c9:cc:9b:e8:f7:cd:68:7d:a6:53:1f:a0:d0:f1:
                    a0:8b:44:60:ad:ef:30:88:f9:06:3f:8e:a8:2e:b1:
                    8a:e2:22:7b:a7:b2:ce:81:66:ca:31:55:34:68:60:
                    fd:34:04:e5:40:ba:88:8c:28:f8:19:9e:c9:94:c3:
                    62:3e:8b:00:09:f1:73:11:d8:2b:08:50:a0:3b:97:
                    0f:6d:b9:84:45:e8:d1:28:c3:67:75:e2:d8:07:ca:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1B:23:3F:29:16:F5:D9:1A:50:93:21:B0:98:1C:0C:F0:76:96:2B
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/wBsjPykW9dkaUJMhsJgcDPB2lis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.116.0/24
                IPv6:
                  2a13:4b00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:79:90:ab:d7:13:9c:07:3f:ae:28:06:99:8d:ba:7a:de:
         1e:c7:31:6e:5c:a5:5a:05:29:96:7b:df:84:01:3f:43:e0:87:
         de:bf:a5:ea:cd:f0:cc:53:27:ab:38:c4:f8:af:75:8a:d3:30:
         c6:13:4d:9e:b9:ee:3e:f2:89:1d:46:ea:b2:3e:dc:4a:59:bf:
         42:ce:fe:b1:38:5c:3a:3f:05:43:a9:54:08:01:40:03:86:eb:
         c7:ab:ea:a0:a5:c1:dd:b7:99:c2:46:50:ee:e1:c3:62:c5:98:
         57:1c:28:0e:8d:b1:4d:d9:7c:21:ee:f4:7e:65:ce:82:fe:3e:
         7a:bf:d2:63:42:c3:90:a4:17:bb:12:a9:f4:8d:ee:6e:78:fe:
         c1:ac:95:e3:5b:79:4e:e9:2d:ab:83:ad:66:61:4a:9a:65:b4:
         3e:b4:e1:42:4a:f2:4f:e2:08:d1:4a:b9:70:74:4c:c3:8f:25:
         d8:d1:86:a8:59:78:c0:75:36:f2:fb:65:9c:ab:82:83:18:8d:
         6e:d2:ce:d4:7c:ae:2f:1f:ab:0e:f4:0c:f5:7e:88:7e:8d:23:
         32:84:0b:5b:df:3b:c6:70:79:f2:8a:3f:8a:c2:0f:8c:4b:e0:
         f0:9a:82:22:58:d3:0c:e4:0f:4b:57:06:fb:55:91:43:c7:29:
         e7:5c:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----