Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/b7J2R16c22uxHij6hhYU5oCuKNc.roa
File:                     b7J2R16c22uxHij6hhYU5oCuKNc.roa (raw, json)
Hash identifier:          PESBuAByKon1gdDTxFrlNZ9YgKHH2r4ISYqRsKM9vFg=
Subject key identifier:   6F:B2:76:47:5E:9C:DB:6B:B1:1E:28:FA:86:16:14:E6:80:AE:28:D7
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE62F2A56E06B93914814F471B6E3DD
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/b7J2R16c22uxHij6hhYU5oCuKNc.roa
Signing time:             Sun 01 Jan 2023 10:35:02 +0000
ROA not before:           Sun 01 Jan 2023 10:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400705
IP address blocks:        45.134.108.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:2f:2a:56:e0:6b:93:91:48:14:f4:71:b6:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fb276475e9cdb6bb11e28fa861614e680ae28d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:28:9c:c8:20:52:02:18:0b:d4:31:af:b5:
                    39:37:9d:b0:8c:43:dc:88:8c:48:eb:52:d6:8a:82:
                    ca:fd:0b:e3:24:43:f8:76:dd:b9:de:c6:7a:40:46:
                    dc:b4:99:78:9b:6e:19:b1:b3:60:d3:38:0e:53:cc:
                    7a:f6:98:55:d9:8b:8f:63:00:4d:f9:2c:48:4d:d3:
                    ec:42:9d:b8:ba:93:f3:d5:a4:9b:49:4c:71:44:b0:
                    d0:91:fa:2a:7e:32:54:e1:b4:74:83:44:a9:9b:7b:
                    12:8d:7b:d0:f4:a8:0d:d3:52:4d:8d:cd:bd:1d:ea:
                    8a:07:b5:ad:bb:60:36:9a:c6:b3:de:34:50:b5:40:
                    c3:67:d3:b1:4b:ba:f7:c9:ce:aa:30:b1:fb:e3:a9:
                    d3:f9:08:c3:ce:f4:23:32:10:cf:17:62:93:3e:ed:
                    87:16:11:9b:70:24:90:83:0b:c7:32:1f:ed:55:40:
                    1f:26:30:e1:39:be:c7:eb:a8:73:51:fc:ec:85:36:
                    d4:d7:c9:d3:25:75:9e:32:e4:3d:e7:cc:67:e5:ea:
                    6a:4b:ad:17:7b:1b:00:7b:d7:4e:22:45:ab:21:01:
                    8c:86:e3:18:21:6b:f6:5b:28:a7:ce:b6:1e:65:1d:
                    e2:ac:67:08:3a:6b:f4:25:73:53:c0:30:76:d9:52:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B2:76:47:5E:9C:DB:6B:B1:1E:28:FA:86:16:14:E6:80:AE:28:D7
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/b7J2R16c22uxHij6hhYU5oCuKNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:fd:5e:e3:f6:31:1f:6e:f7:93:4e:ee:39:64:3f:31:ec:08:
         34:97:d4:1f:c2:24:f5:cd:b2:a4:7c:01:88:eb:81:25:1e:0b:
         bf:19:80:1e:b0:71:69:e1:6b:82:75:31:5f:f0:04:ce:f3:85:
         63:91:36:7f:a2:93:d4:0b:7d:4e:74:67:18:f5:2c:ba:20:8a:
         30:7f:47:85:00:23:f6:cd:9b:d5:44:16:15:6a:01:03:40:60:
         96:18:5e:03:28:c5:c0:ce:09:2d:89:d1:60:24:61:04:a3:2d:
         43:20:a6:d2:40:5f:4a:d9:27:8f:6a:1e:3e:c2:5c:cc:c6:fc:
         f9:3e:34:46:34:ae:54:89:7e:4a:05:60:4a:17:e2:60:96:d1:
         85:99:e3:fa:3b:d8:1a:5f:58:56:e0:5b:f4:38:86:5b:44:18:
         c9:82:78:5b:26:78:7b:21:14:49:9f:dc:66:0c:c7:54:7d:fc:
         31:22:ba:1f:49:ca:13:e0:88:7f:e6:fc:15:c8:a5:13:c6:64:
         5b:11:bb:00:b3:7d:2c:42:9a:c2:fb:cf:d7:00:8a:b6:2c:eb:
         3c:ad:4e:d7:15:71:04:04:95:80:dd:b0:2b:9a:93:5f:f7:cc:
         30:f0:47:a4:3b:81:4c:d9:b9:3b:ff:d4:10:46:a8:b6:02:b7:
         be:45:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----