Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa
File:                     1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa (raw, json)
Hash identifier:          zgyWAm1GKKYyX8NcCS9CxOVzOfltz15x7enzmzSaN6A=
Subject key identifier:   F9:39:19:41:77:EB:72:3B:EC:53:F5:D6:D1:88:3F:43:E7:F0:CF:CB
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE6257E7B830548A2B998F875865EF8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa
Signing time:             Sun 01 Jan 2023 10:35:00 +0000
ROA not before:           Sun 01 Jan 2023 10:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204174
IP address blocks:        45.134.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:25:7e:7b:83:05:48:a2:b9:98:f8:75:86:5e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f939194177eb723bec53f5d6d1883f43e7f0cfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:45:1a:ce:6c:01:32:22:db:0b:a7:96:d4:
                    e8:cb:30:28:6e:c5:61:eb:d6:d6:77:04:80:45:2d:
                    0c:02:ef:61:dc:53:87:66:7d:4f:2c:6c:53:a9:7d:
                    bf:8f:a5:a9:20:19:0b:30:66:2f:04:5a:24:37:42:
                    0f:0a:d9:01:1f:0c:9f:0a:e3:df:53:0f:6f:2c:ce:
                    36:69:0a:25:c2:7c:d5:b7:86:bf:fa:c8:44:65:3f:
                    6d:09:df:01:f5:3f:98:d5:91:67:b9:0a:f4:e7:7b:
                    d2:54:3b:d0:8f:76:e0:5d:33:10:39:58:ac:eb:9c:
                    09:14:56:93:9d:a5:6a:af:f9:83:30:21:a9:b4:7b:
                    e5:a6:dc:64:39:5c:07:6e:cc:3e:cb:30:7f:48:15:
                    1c:cd:45:36:e7:4b:0c:49:a6:4d:82:6c:d9:40:f2:
                    89:81:3a:85:e8:38:0b:25:13:36:66:b4:b5:6f:e0:
                    b9:31:95:64:56:10:34:78:78:ce:7e:e4:80:12:73:
                    bd:87:c7:1d:35:aa:ad:50:6d:4d:d4:3d:91:37:c9:
                    29:c1:d2:22:e6:d9:a2:fb:34:c7:bb:bc:ef:21:67:
                    20:88:fe:2b:29:c4:ab:0c:5b:95:98:1c:9a:0f:50:
                    9b:28:8e:4e:ad:d6:5b:bf:14:9a:32:b7:df:89:6e:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:19:41:77:EB:72:3B:EC:53:F5:D6:D1:88:3F:43:E7:F0:CF:CB
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-TkZQXfrcjvsU_XW0Yg_Q-fwz8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:25:10:a7:53:a7:67:f8:e7:7c:8f:6a:65:3d:82:a7:4c:1a:
         4b:ef:db:22:92:19:12:3c:1b:37:3d:60:f8:b6:54:2a:87:c2:
         90:37:88:69:9d:8c:cc:d7:ec:95:3e:55:f9:92:29:68:8e:d5:
         67:01:fc:35:e8:28:ae:b4:5b:3b:cd:95:a9:70:f9:6a:d4:30:
         84:6d:9f:7d:e6:7a:10:26:1a:b1:29:ee:2d:2d:25:c3:5f:2e:
         2d:7a:67:c9:87:6a:ec:e8:31:12:7a:78:23:26:7e:71:83:51:
         2b:83:44:c0:ac:e9:16:52:7d:1a:70:f0:84:8f:9a:c9:bd:67:
         57:5b:4d:48:47:b3:39:a7:78:cf:ae:09:51:d2:c8:f0:51:da:
         ef:5b:0e:16:55:49:a6:b2:aa:44:a5:f8:ff:f2:65:53:f7:75:
         10:71:9f:5b:6c:0c:0d:b9:0c:21:81:50:92:6a:77:d4:b3:8f:
         80:2e:52:f1:53:c8:bc:85:0d:bc:53:a4:55:d2:08:3b:f1:0d:
         c6:5d:07:98:e8:35:9c:67:74:17:ab:f1:15:7e:83:a7:31:60:
         b0:28:cb:ff:cd:f1:2f:9e:34:e0:d9:70:62:03:3e:3a:a9:ba:
         75:1b:d9:e1:e2:f7:a3:1b:d0:e3:70:0d:68:c4:94:d8:b6:89:
         48:d9:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----