Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIjo7Ev4pUaTWo4GL6fD5m5aGRA.roa
File:                     BIjo7Ev4pUaTWo4GL6fD5m5aGRA.roa (raw, json)
Hash identifier:          vc02e+yyU/xAywTfDb3eGx+4R5TDlO5Pp6cPoJg7cpg=
Subject key identifier:   04:88:E8:EC:4B:F8:A5:46:93:5A:8E:06:2F:A7:C3:E6:6E:5A:19:10
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE62161F689B0BF8C73677FA61BA516
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIjo7Ev4pUaTWo4GL6fD5m5aGRA.roa
Signing time:             Sun 01 Jan 2023 10:34:59 +0000
ROA not before:           Sun 01 Jan 2023 10:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141677
IP address blocks:        45.142.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:21:61:f6:89:b0:bf:8c:73:67:7f:a6:1b:a5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0488e8ec4bf8a546935a8e062fa7c3e66e5a1910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:ef:d7:ee:f8:42:a5:6c:8d:e2:3c:d3:c3:
                    82:bc:d6:83:a2:50:31:3b:9c:d0:d6:d6:bd:31:ea:
                    73:02:d5:00:5f:c8:85:41:b8:9a:0c:5d:fb:3e:25:
                    fa:7b:e0:52:be:8f:88:27:14:eb:ec:52:be:e5:01:
                    3e:ae:d4:d8:9b:d9:df:ab:9c:54:a4:81:3d:58:b5:
                    37:1f:23:34:59:55:28:26:1d:66:c3:77:b8:cc:45:
                    96:2d:f8:68:4b:32:ff:ee:f9:1c:77:82:cd:33:e5:
                    6d:eb:ab:de:f3:ee:97:cf:eb:d3:0b:64:30:dd:b0:
                    9e:15:6c:47:63:2c:1f:48:75:99:dd:3b:df:e6:24:
                    1d:3d:8e:18:66:22:d6:12:64:5c:6f:57:3d:57:28:
                    9d:79:b0:b4:77:cb:d4:f1:d6:25:3e:0f:a3:19:33:
                    47:58:20:af:aa:ce:77:43:59:22:d7:01:bd:b6:20:
                    f3:77:48:1c:c5:25:44:64:cf:3a:83:24:1f:a8:ca:
                    3b:be:17:11:12:cd:3a:97:cd:49:ba:4a:ba:27:00:
                    9d:72:ea:97:13:a9:48:aa:e1:1e:63:eb:2c:ee:ab:
                    d5:19:4b:56:4f:d3:31:10:3c:a5:b8:a7:07:ce:24:
                    5b:7f:eb:8d:a5:a9:56:7d:16:40:b9:47:3d:14:3a:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:88:E8:EC:4B:F8:A5:46:93:5A:8E:06:2F:A7:C3:E6:6E:5A:19:10
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIjo7Ev4pUaTWo4GL6fD5m5aGRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e5:10:42:ec:c4:c5:b0:cb:97:16:fc:72:62:ee:d0:27:73:
         66:8b:fb:2e:b1:e0:8f:cb:45:e5:c3:b2:94:a3:3d:ac:87:3c:
         3f:5f:eb:c8:1b:bc:6f:9d:49:cc:68:3f:32:ad:f0:d6:71:84:
         3d:21:67:7d:52:70:44:2e:07:01:9f:97:c2:51:86:96:42:20:
         bd:04:6d:81:fc:93:b5:6f:04:e8:f1:97:94:5c:55:73:fe:9b:
         ec:2e:f9:66:c9:d1:18:e1:02:1b:f2:79:d5:b5:b0:9e:26:cc:
         17:b1:17:fc:02:96:b0:15:4e:1f:67:a0:56:65:4f:e0:70:6b:
         2c:76:db:e8:07:18:32:22:d6:5b:e9:53:11:88:69:b7:6c:25:
         6d:ac:50:d6:86:91:72:bd:68:70:c3:7d:f9:01:b9:d1:6f:69:
         10:9a:f8:0b:6d:e7:5c:75:e3:06:2a:29:65:35:62:4e:5a:92:
         65:d6:cf:97:14:4d:e3:95:9f:1b:2d:e5:06:70:df:ba:ea:1d:
         85:80:0a:4a:aa:42:c7:79:a8:09:4a:02:09:2d:a1:47:c3:04:
         45:7f:57:73:bf:c4:78:42:b1:45:ce:2a:8d:02:30:e9:63:cd:
         7b:a1:5c:17:fa:8a:0c:21:4b:8b:57:8f:53:24:93:7f:a3:4a:
         8d:b1:b0:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5iFh9omwv4xzZ3+mG6UWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTAxMTAzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDg4ZThlYzRiZjhhNTQ2OTM1YThlMDYyZmE3YzNlNjZlNWExOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTXv1+74QqVsjeI808OCvNaDolAx
O5zQ1ta9MepzAtUAX8iFQbiaDF37PiX6e+BSvo+IJxTr7FK+5QE+rtTYm9nfq5xU
pIE9WLU3HyM0WVUoJh1mw3e4zEWWLfhoSzL/7vkcd4LNM+Vt66ve8+6Xz+vTC2Qw
3bCeFWxHYywfSHWZ3Tvf5iQdPY4YZiLWEmRcb1c9VyidebC0d8vU8dYlPg+jGTNH
WCCvqs53Q1ki1wG9tiDzd0gcxSVEZM86gyQfqMo7vhcREs06l81Jukq6JwCdcuqX
E6lIquEeY+ss7qvVGUtWT9MxEDyluKcHziRbf+uNpalWfRZAuUc9FDrtuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFASI6OxL+KVGk1qOBi+nw+ZuWhkQMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvQklqbzdFdjRwVWFUV280R0w2ZkQ1bTVhR1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5qMA0G
CSqGSIb3DQEBCwUAA4IBAQBX5RBC7MTFsMuXFvxyYu7QJ3Nmi/suseCPy0Xlw7KU
oz2shzw/X+vIG7xvnUnMaD8yrfDWcYQ9IWd9UnBELgcBn5fCUYaWQiC9BG2B/JO1
bwTo8ZeUXFVz/pvsLvlmydEY4QIb8nnVtbCeJswXsRf8ApawFU4fZ6BWZU/gcGss
dtvoBxgyItZb6VMRiGm3bCVtrFDWhpFyvWhww335AbnRb2kQmvgLbedcdeMGKill
NWJOWpJl1s+XFE3jlZ8bLeUGcN+66h2FgApKqkLHeagJSgIJLaFHwwRFf1dzv8R4
QrFFziqNAjDpY817oVwX+ooMIUuLV49TJJN/o0qNsbBK
-----END CERTIFICATE-----