Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hoL0xoPDB4Wbf5-5r_emYokYyQQ.roa
File:                     hoL0xoPDB4Wbf5-5r_emYokYyQQ.roa (raw, json)
Hash identifier:          njm66zgMwd6SvVCwnSLw3+PCWFKB7+yMaM+6RsnTNiM=
Subject key identifier:   86:82:F4:C6:83:C3:07:85:9B:7F:9F:B9:AF:F7:A6:62:89:18:C9:04
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018B6B2A9A3662B4E9656B42748FC8BF4CCE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hoL0xoPDB4Wbf5-5r_emYokYyQQ.roa
Signing time:             Thu 26 Oct 2023 08:47:15 +0000
ROA not before:           Thu 26 Oct 2023 08:47:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52073
IP address blocks:        45.151.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6b:2a:9a:36:62:b4:e9:65:6b:42:74:8f:c8:bf:4c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Oct 26 08:47:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8682f4c683c307859b7f9fb9aff7a6628918c904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:cc:61:81:0e:45:05:52:ec:3f:23:40:df:
                    d2:c4:72:b2:e0:6a:7e:bc:9d:75:db:87:c0:d5:4f:
                    1a:d8:fa:3d:44:ce:0b:26:ff:c3:52:98:7f:49:7d:
                    ed:fd:bf:ab:0c:47:42:20:c1:76:2a:21:43:6b:a7:
                    07:09:ee:14:91:36:2d:94:9f:42:b2:43:e6:21:3c:
                    dd:e2:de:3c:e1:e5:d9:35:dd:a2:d5:fe:80:04:67:
                    5a:06:57:d8:e4:9f:80:fe:63:73:e7:47:34:a4:47:
                    95:51:98:3c:a8:da:81:2a:0d:8b:6a:a7:19:a8:2d:
                    0c:e1:14:82:2b:58:32:78:85:2c:50:db:53:79:b5:
                    24:4e:a5:8a:87:fc:37:35:d4:77:a8:33:6c:ed:74:
                    0d:ae:af:06:89:17:88:31:45:9c:dd:f0:7b:14:ee:
                    de:5f:dd:49:e8:17:c1:67:54:10:b5:51:21:8d:2d:
                    3f:fe:c2:49:f1:71:11:b0:8b:e3:5d:5f:64:d3:9a:
                    9e:54:a9:cc:fc:92:61:b9:81:18:ac:22:eb:c8:65:
                    59:e9:cb:7c:5a:bf:67:2c:46:5c:95:89:e5:f7:c4:
                    5e:cb:d4:3e:2a:9a:34:d4:4c:6d:20:5b:c9:7e:c1:
                    48:fb:91:55:86:fa:f3:4a:48:53:4b:e5:06:26:cf:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:82:F4:C6:83:C3:07:85:9B:7F:9F:B9:AF:F7:A6:62:89:18:C9:04
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hoL0xoPDB4Wbf5-5r_emYokYyQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:85:16:d8:8d:b0:4e:85:8a:ff:ea:39:ed:79:33:de:42:
         3e:e7:db:d2:19:ee:62:40:eb:ef:6a:96:79:ce:cf:22:18:b7:
         4e:53:d4:ae:a3:08:9b:f6:54:44:46:f3:4f:b4:24:aa:d1:08:
         ac:e4:9a:fc:b9:c5:8d:26:92:c6:0e:da:4a:a8:ea:c7:34:bf:
         db:3e:d6:de:b5:80:29:22:92:1e:6c:fb:b4:01:ca:80:ca:94:
         78:02:83:53:1e:d4:0c:e4:27:35:40:d8:43:d0:3e:68:83:6a:
         10:2f:c5:46:e0:ed:7c:3c:d3:88:56:79:d4:dd:1d:28:e5:8a:
         68:0e:ea:93:31:e0:e9:82:84:e9:bb:c7:2b:01:f6:c7:c6:ed:
         d3:63:f2:84:82:90:d4:3e:10:36:df:7b:14:73:32:09:4d:d6:
         9d:a3:ae:60:07:92:9b:0b:c0:cd:03:ff:ca:ea:6e:9d:9a:3d:
         60:e8:78:11:f0:d9:df:07:60:1f:dd:0d:14:4b:d8:f1:4a:0f:
         6c:93:a5:2f:70:4e:47:ed:af:ec:e3:02:1c:93:0e:9a:13:50:
         9f:6d:78:ba:2b:74:35:1a:b9:e3:17:95:b4:5d:80:35:88:5c:
         5e:03:fb:37:0f:94:86:f0:bb:72:2b:26:62:eb:fc:60:10:28:
         e0:e2:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----