Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yT7J7-mctVWHb_llcmxMmhYvFcw.roa
File:                     yT7J7-mctVWHb_llcmxMmhYvFcw.roa (raw, json)
Hash identifier:          PdhHrMMilIO+hunFDD1sQz+XKCckqi8SVEX8kdMiiZw=
Subject key identifier:   C9:3E:C9:EF:E9:9C:B5:55:87:6F:F9:65:72:6C:4C:9A:16:2F:15:CC
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0186E6EBA1610F4DCB55DD88C3BF99BB0672
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yT7J7-mctVWHb_llcmxMmhYvFcw.roa
Signing time:             Wed 15 Mar 2023 20:17:27 +0000
ROA not before:           Wed 15 Mar 2023 20:17:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204422
IP address blocks:        45.137.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e6:eb:a1:61:0f:4d:cb:55:dd:88:c3:bf:99:bb:06:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Mar 15 20:17:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c93ec9efe99cb555876ff965726c4c9a162f15cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:20:8c:c9:b2:63:06:4a:7a:95:b4:0d:b6:
                    7a:3a:a1:17:c3:1a:fc:37:08:ca:c3:d7:39:d8:32:
                    d1:a3:b6:74:7b:da:fb:b4:e8:d6:8e:49:73:34:b1:
                    cd:08:66:3e:c6:65:c1:c9:7a:ab:10:64:79:54:27:
                    a9:95:38:c6:65:86:1f:a3:2f:1e:62:93:f0:29:54:
                    5e:29:54:01:f4:ca:11:4f:c0:a5:36:c3:5b:50:98:
                    d9:85:6a:ef:d4:e0:2a:35:c7:3a:0c:3f:6e:5f:8d:
                    83:ad:73:e4:18:74:33:a6:38:5a:a1:a7:53:5a:4e:
                    83:ad:18:d0:bf:15:29:b8:f4:95:96:d4:17:03:17:
                    36:9a:0d:9f:c6:a4:73:66:8f:a7:20:7c:ea:0f:3e:
                    80:a7:3e:8d:85:77:8b:70:f9:53:21:de:90:0a:4a:
                    72:58:56:36:2b:9d:c7:0d:71:1b:27:7a:44:70:5c:
                    2f:00:6a:a9:f5:27:39:e3:be:95:34:e2:fb:87:30:
                    2d:b9:5f:62:01:71:dd:47:85:ae:39:7d:39:f9:c2:
                    03:07:0c:a2:4c:ac:d9:24:c5:49:9c:35:10:a6:c2:
                    e4:18:0f:fc:1b:ab:83:c5:27:d4:06:ea:49:97:52:
                    01:38:d0:f5:c4:c7:e2:64:9c:bb:42:ed:a3:4f:a2:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3E:C9:EF:E9:9C:B5:55:87:6F:F9:65:72:6C:4C:9A:16:2F:15:CC
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yT7J7-mctVWHb_llcmxMmhYvFcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:7f:1f:ec:3d:50:e9:6e:ab:f3:d5:e8:38:51:61:68:46:
         7d:1b:63:13:ab:f6:d1:48:7c:53:c7:21:f1:4c:c0:80:85:8d:
         fa:59:77:8e:81:5b:3a:ad:74:8c:d6:2d:4c:e2:4e:7f:04:8b:
         9e:87:09:df:c0:dd:cf:a9:25:55:b1:c6:c2:09:7b:9b:77:b8:
         73:59:8a:b3:3b:74:35:db:03:7e:5b:5f:3a:53:ab:21:02:43:
         3d:06:3a:99:db:c8:24:5c:9d:61:00:a0:24:7c:ff:32:c8:93:
         f1:f8:76:88:a9:67:fb:3e:7d:ca:72:57:66:f1:c2:b0:63:73:
         3c:f9:38:d6:e6:cc:ef:cf:4f:da:b8:90:9a:45:be:59:76:15:
         3c:90:3d:2d:0d:83:c2:1d:e3:7d:01:a3:1a:d7:fa:b7:0e:14:
         ff:9b:9a:c2:d7:bc:dc:8f:1a:d0:3d:be:d6:dd:c0:ce:be:17:
         84:2c:a5:4d:79:6d:2e:c4:91:0a:a8:20:57:d6:1e:d1:6f:7b:
         c1:9b:70:65:99:ff:e1:c6:99:ca:95:94:51:a4:7a:92:a1:dc:
         07:73:5c:d2:26:34:8d:2b:54:22:7c:ae:88:bb:c3:be:9d:3b:
         ff:45:24:a8:ed:03:00:87:83:77:f6:cb:71:1b:11:24:26:ea:
         d6:0a:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----