Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lyDEVhK5vy_0-Kknf3NMbf7JOHw.roa
File:                     lyDEVhK5vy_0-Kknf3NMbf7JOHw.roa (raw, json)
Hash identifier:          d8bJ523Lgzt/QRgb770FrmM9hxIdrdXjd3BMBTO0/Vk=
Subject key identifier:   97:20:C4:56:12:B9:BF:2F:F4:F8:A9:27:7F:73:4C:6D:FE:C9:38:7C
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01865B4251046BA09E12058D83552B097553
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lyDEVhK5vy_0-Kknf3NMbf7JOHw.roa
Signing time:             Thu 16 Feb 2023 17:25:18 +0000
ROA not before:           Thu 16 Feb 2023 17:25:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44486
IP address blocks:        45.145.227.0/24 maxlen: 24
                          212.87.214.0/23 maxlen: 23
                          185.132.55.0/24 maxlen: 24
                          185.132.54.0/24 maxlen: 24
                          45.137.71.0/24 maxlen: 24
                          45.137.69.0/24 maxlen: 24
                          45.131.109.0/24 maxlen: 24
                          45.145.224.0/23 maxlen: 23
                          45.91.251.0/24 maxlen: 24
                          5.180.252.0/23 maxlen: 23
                          5.180.254.0/23 maxlen: 23
                          5.253.244.0/24 maxlen: 24
                          45.134.108.0/23 maxlen: 23
                          45.84.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5b:42:51:04:6b:a0:9e:12:05:8d:83:55:2b:09:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Feb 16 17:25:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9720c45612b9bf2ff4f8a9277f734c6dfec9387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:52:5c:a0:eb:7d:7d:9e:d3:a8:6e:f0:8a:
                    9f:85:6b:91:3e:ec:e8:13:e7:26:d5:b9:fc:2e:cf:
                    29:f9:b9:19:a9:d9:80:d1:88:2a:bd:69:5d:2a:63:
                    62:b1:0a:c6:cf:1d:80:52:ee:4a:0d:ce:48:08:3f:
                    f7:ad:bc:c2:75:de:94:5f:0d:d9:6d:5e:d8:e5:50:
                    79:08:13:61:61:2a:75:be:da:e8:35:eb:5a:29:f6:
                    3e:88:84:20:f9:28:ed:66:d2:7b:69:78:e0:fb:a4:
                    98:1b:71:df:e6:d3:ca:7b:e3:a7:d1:5f:55:69:7e:
                    67:72:bb:4f:3c:5b:6a:d8:c7:fd:c0:6a:7d:dc:6a:
                    20:30:32:4c:94:87:14:3c:14:ef:b1:e8:17:5c:49:
                    15:c7:63:86:fe:02:02:3e:35:ab:bd:81:36:1a:ff:
                    a6:73:19:54:2f:02:f5:f7:4a:68:69:8d:42:1b:5d:
                    25:95:ef:c0:e0:a1:e7:63:91:c0:f6:c0:78:e8:21:
                    60:2c:79:52:51:e3:86:73:e7:53:83:31:31:ca:10:
                    38:fe:c4:21:8f:4e:4f:0d:39:d5:d0:38:b0:49:07:
                    ff:29:3a:e7:d7:f8:76:7a:47:b9:09:89:a0:74:ab:
                    c7:9b:74:26:86:90:1b:15:b2:80:aa:60:91:fe:1f:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:20:C4:56:12:B9:BF:2F:F4:F8:A9:27:7F:73:4C:6D:FE:C9:38:7C
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/lyDEVhK5vy_0-Kknf3NMbf7JOHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.252.0/22
                  5.253.244.0/24
                  45.84.199.0/24
                  45.91.251.0/24
                  45.131.109.0/24
                  45.134.108.0/23
                  45.137.69.0/24
                  45.137.71.0/24
                  45.145.224.0/23
                  45.145.227.0/24
                  185.132.54.0/23
                  212.87.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:1f:61:2f:a3:53:d5:41:49:33:39:57:09:b0:94:a0:7f:
         36:d8:82:5c:5f:d0:9a:f3:6a:41:6b:5f:5b:39:4b:e7:c5:c7:
         05:b6:e9:d3:fa:dc:e7:1c:e6:be:b8:dd:68:fe:48:f7:31:f3:
         fe:2a:6e:43:c8:c6:4b:19:f3:8a:10:14:d6:ab:37:80:0c:f5:
         fc:77:d8:59:6b:c5:ce:05:d7:ce:36:4b:8c:56:39:2d:7e:f8:
         ec:f5:9a:27:97:31:ac:d3:3b:8b:c0:db:99:94:5d:14:62:36:
         84:31:fa:ce:f6:80:9f:8d:d7:f7:ae:97:53:67:aa:5b:96:bb:
         cc:af:b0:52:0f:ab:e8:f1:91:8d:b2:f3:4f:e3:e8:51:d1:38:
         8c:bb:f2:ac:92:7b:18:46:86:a0:da:8a:39:63:82:47:1a:d2:
         16:8d:0f:08:f8:67:14:56:84:7d:b1:22:f7:ef:8d:8d:b2:99:
         6f:39:40:9e:88:f3:2b:a1:f6:e4:6b:30:71:7a:61:b0:ba:86:
         ab:ec:3d:59:50:e1:63:a2:a4:b0:62:c9:f7:5a:df:ec:12:93:
         7c:c1:5a:33:86:ae:75:40:1b:5c:f0:b5:54:04:ec:03:2d:10:
         28:a9:3a:5a:0a:6e:62:9f:ca:9f:b2:2e:ad:cd:b3:59:b8:3b:
         93:09:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----