Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/R4r4prW-SYtyE2GXJ7EdNBddJ6c.roa
File:                     R4r4prW-SYtyE2GXJ7EdNBddJ6c.roa (raw, json)
Hash identifier:          RPCbBPaj07C5caJwq/dwn79M+X7gGdo0Gq+0GgDesTw=
Subject key identifier:   47:8A:F8:A6:B5:BE:49:8B:72:13:61:97:27:B1:1D:34:17:5D:27:A7
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       01857315EB3988EEEF0F0F18EE9296809EB0
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/R4r4prW-SYtyE2GXJ7EdNBddJ6c.roa
Signing time:             Mon 02 Jan 2023 15:24:54 +0000
ROA not before:           Mon 02 Jan 2023 15:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25415
IP address blocks:        212.51.0.0/19 maxlen: 19
                          2a01:780::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:eb:39:88:ee:ef:0f:0f:18:ee:92:96:80:9e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: Jan  2 15:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=478af8a6b5be498b7213619727b11d34175d27a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:48:a0:da:cc:97:e0:4a:2d:fc:b3:cd:5b:
                    66:47:43:d2:30:bf:2e:16:24:e8:f7:3d:55:e6:45:
                    39:34:37:83:c2:0a:19:1b:50:3e:4e:ab:cb:9f:c7:
                    1e:6a:07:66:13:7e:01:2e:07:45:99:fc:29:89:10:
                    3e:7c:94:43:eb:c2:42:aa:33:e3:95:6a:fa:58:89:
                    a8:87:c9:47:92:55:0d:f4:f7:8d:c1:f9:13:84:d1:
                    74:fd:d3:68:d1:c3:a9:d8:fa:f8:2c:a2:e0:2e:a4:
                    28:5d:02:7c:5c:b2:c6:3d:b2:05:d6:de:94:6e:57:
                    84:bb:0d:d6:cc:f6:c4:f8:71:31:36:36:8f:b2:61:
                    f1:c1:39:00:af:1e:45:fe:2e:3c:f5:6c:a7:6b:26:
                    52:4e:70:9f:74:3f:d1:4f:8e:f2:32:f8:9d:c0:c6:
                    a8:ed:6e:4c:f7:f8:37:87:3d:55:84:51:f3:15:ae:
                    98:9c:34:ce:c8:a8:f6:7c:d5:a2:07:92:94:24:ed:
                    b6:51:9a:81:6e:90:a3:fd:4a:c9:d1:98:52:c9:d5:
                    60:1e:49:22:cc:c3:92:c0:76:23:a3:e1:51:e1:88:
                    bb:7d:e0:23:a0:03:6f:f9:dc:3a:8f:e4:3d:e3:80:
                    e1:06:48:ed:47:26:21:8b:86:a0:86:94:2c:9f:5f:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:F8:A6:B5:BE:49:8B:72:13:61:97:27:B1:1D:34:17:5D:27:A7
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/R4r4prW-SYtyE2GXJ7EdNBddJ6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.51.0.0/19
                IPv6:
                  2a01:780::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:a3:54:50:45:66:d0:3b:36:98:6a:07:c6:f5:2f:8d:cd:
         ea:ba:78:d4:dd:5f:02:98:2a:4d:30:bd:dd:f2:b8:23:4b:1e:
         0a:96:40:17:42:21:3e:e6:96:d0:03:82:70:5e:3e:bc:b9:88:
         fd:c2:39:60:0a:ee:ef:11:43:8a:93:8e:b4:04:02:06:56:a4:
         53:1c:4a:72:4f:f5:69:b7:e9:2f:07:06:36:f6:28:92:fc:9e:
         12:37:9f:d2:ca:09:77:e8:21:d7:c7:2a:0e:cb:f6:0e:f7:9c:
         0e:dc:7a:5c:c0:c0:4a:4b:90:83:8a:0b:6b:7c:b2:8c:e1:08:
         36:34:9e:d0:9e:28:92:42:b3:69:8a:20:df:0f:49:92:c1:0b:
         56:25:5b:39:e4:f1:9b:60:e7:bb:a8:d3:08:0b:4b:aa:c7:54:
         e8:47:35:86:83:3b:0c:66:6d:ef:80:9a:11:c9:2c:cf:bc:96:
         32:d9:e0:d4:2e:1b:9c:7f:77:d3:30:36:9d:a8:8e:95:10:c9:
         76:f0:6b:56:85:28:38:10:8a:97:51:76:33:91:49:25:4f:d9:
         89:65:54:61:27:56:9c:e5:70:09:99:48:ee:d0:fc:bb:69:ae:
         a0:e3:bb:e0:bc:a0:c8:02:35:89:12:a1:1a:d1:d8:72:7f:c6:
         58:1e:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----