Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OZOhNr0kj7gfg45_GX_iLI91kuI.roa
File:                     OZOhNr0kj7gfg45_GX_iLI91kuI.roa (raw, json)
Hash identifier:          zueHEpMp45rQc0zDzAXF1WhtXdS0lfpDxtA19x5ET1s=
Subject key identifier:   39:93:A1:36:BD:24:8F:B8:1F:83:8E:7F:19:7F:E2:2C:8F:75:92:E2
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE6239CEDC99EB11E57615DAB5CFC4E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OZOhNr0kj7gfg45_GX_iLI91kuI.roa
Signing time:             Sun 01 Jan 2023 10:34:59 +0000
ROA not before:           Sun 01 Jan 2023 10:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201814
IP address blocks:        45.142.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:23:9c:ed:c9:9e:b1:1e:57:61:5d:ab:5c:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3993a136bd248fb81f838e7f197fe22c8f7592e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5e:b7:6d:ed:ca:1d:9c:36:12:45:76:de:1e:
                    f6:e3:6e:28:3d:d2:bf:49:0a:7e:73:b8:2f:26:61:
                    73:a2:2f:db:68:84:87:17:2a:6f:ed:21:6a:95:00:
                    ba:1a:c8:f6:1d:28:ed:09:a1:45:b2:23:8a:5e:82:
                    9a:c0:ce:ec:e0:0c:32:c1:dc:f4:35:6b:51:42:5f:
                    99:19:45:ad:32:70:74:c3:ae:a2:ec:59:96:76:25:
                    e6:dd:ac:7f:21:09:c7:0c:68:20:ed:64:39:dd:45:
                    68:de:e8:8c:0e:5b:21:f1:3a:26:30:69:7a:1b:55:
                    2f:d2:bb:6a:2f:30:56:c3:e9:fa:c3:3a:d2:6b:b5:
                    0f:59:ae:3c:6a:46:a5:4c:da:38:33:f5:4f:e4:9e:
                    78:9b:45:6a:7a:c1:bd:0b:b7:18:f4:b5:4b:27:27:
                    5a:1f:b4:0d:15:5d:ac:e9:7a:b4:c9:76:64:97:ac:
                    f0:66:dc:85:dd:dc:35:41:25:92:3b:ac:d8:0c:cb:
                    76:8c:3b:5d:5a:39:30:e6:ad:5e:21:03:09:77:2f:
                    a6:4b:7c:05:a2:8d:0d:38:87:46:6b:6b:11:67:60:
                    69:c2:ae:8e:e3:7d:4c:a1:44:17:8d:24:f3:c9:53:
                    30:62:58:5c:05:8e:55:47:2b:2e:e9:4e:d0:92:8c:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:A1:36:BD:24:8F:B8:1F:83:8E:7F:19:7F:E2:2C:8F:75:92:E2
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OZOhNr0kj7gfg45_GX_iLI91kuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:f9:0a:35:76:de:e5:e2:ce:d6:5e:5d:c0:c8:46:10:e5:
         fe:2f:da:a4:ae:d4:5a:8a:a0:c4:5f:ad:79:fe:29:e9:2e:70:
         0f:5f:7f:79:bb:77:b9:4d:83:f1:68:f3:93:66:72:70:a0:86:
         36:f1:57:d1:ef:aa:10:3f:de:07:8f:cb:c4:a9:b2:0c:26:2c:
         ad:91:f8:b0:84:b4:42:92:a8:b8:eb:39:5e:91:97:2f:73:c2:
         be:3a:2c:ce:a0:2f:a3:b9:ef:ac:ba:c7:35:8c:8e:2e:00:22:
         77:b7:c1:5d:43:59:49:3d:2c:f7:af:15:f3:22:b3:08:8b:76:
         f6:3a:c6:14:ba:3f:a0:0f:5c:8d:49:b0:b3:48:59:5e:3a:be:
         93:f1:85:87:e9:09:dd:b3:a3:da:30:bd:64:34:93:47:10:d2:
         58:8c:cf:17:b7:51:f1:14:ee:6f:1b:f7:ea:6a:94:43:fa:27:
         7a:ef:13:24:19:b3:cf:9a:f1:b2:8c:91:6d:4e:a0:46:97:0f:
         7b:5d:8a:c3:8b:74:86:7c:0e:a3:09:4d:99:c8:e5:59:f4:c8:
         43:e7:5a:f4:ec:64:e7:8d:8c:2d:2a:a8:47:5a:e3:dc:6e:7f:
         5f:5c:2b:21:c5:84:89:41:f6:3d:9d:b4:d9:cc:97:6a:df:62:
         40:89:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----