Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fTegnhVHyL_oa5R49-rb1vLmVXc.roa
File:                     fTegnhVHyL_oa5R49-rb1vLmVXc.roa (raw, json)
Hash identifier:          j3AIVBlBrCKqKS/3XSo/ZGAw1357q2XwGB++Z9Zf1HI=
Subject key identifier:   7D:37:A0:9E:15:47:C8:BF:E8:6B:94:78:F7:EA:DB:D6:F2:E6:55:77
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       018572E82FAC2F8D018CAD62B704B0ADC84D
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fTegnhVHyL_oa5R49-rb1vLmVXc.roa
Signing time:             Mon 02 Jan 2023 14:34:57 +0000
ROA not before:           Mon 02 Jan 2023 14:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        45.82.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:2f:ac:2f:8d:01:8c:ad:62:b7:04:b0:ad:c8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jan  2 14:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d37a09e1547c8bfe86b9478f7eadbd6f2e65577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:58:53:2f:f0:f1:f0:2f:f6:2f:36:cd:15:
                    e9:78:93:b6:c0:ef:ba:c1:cc:ae:c0:15:94:5d:4f:
                    1c:20:46:48:5d:75:3a:24:e7:68:73:a6:5d:9d:c0:
                    02:97:be:72:92:c5:4f:27:9e:fe:97:d5:aa:9d:71:
                    85:da:1e:39:c9:ca:a5:0f:83:76:5c:aa:d7:ca:a7:
                    c6:49:d9:68:c7:22:8e:9d:43:4e:f7:f2:52:31:cc:
                    c0:a3:e1:22:d6:be:d0:55:82:c5:98:db:53:e4:c9:
                    43:e9:ed:c3:da:8e:84:d4:97:5b:c9:17:23:df:9b:
                    4a:fa:15:f9:32:3c:69:97:08:12:3e:8a:3f:aa:d0:
                    b8:9e:02:e2:a3:88:b9:f8:f1:10:74:67:e1:16:da:
                    ce:f9:58:88:8d:1c:96:99:a2:fe:c7:5f:b6:35:be:
                    4a:f6:63:20:7a:42:53:99:c8:f4:f5:15:8f:f1:89:
                    3a:35:1b:af:55:67:c8:c2:ff:01:cf:aa:a6:c4:e2:
                    1f:a3:95:cf:27:83:43:f2:0f:85:1c:80:86:6b:7b:
                    61:6a:93:4f:da:48:8b:c5:e3:e4:f6:92:1e:ce:b4:
                    27:de:bd:4a:4e:50:0a:2d:8c:b3:30:5e:72:9f:c1:
                    32:d3:68:7a:17:61:bd:56:5e:c6:24:fa:b1:6a:88:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:37:A0:9E:15:47:C8:BF:E8:6B:94:78:F7:EA:DB:D6:F2:E6:55:77
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/fTegnhVHyL_oa5R49-rb1vLmVXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:1c:06:0a:20:93:7b:12:f8:f2:85:f4:07:14:58:d6:78:
         28:2c:79:02:f9:e1:a3:0e:8b:42:54:fd:aa:19:99:2f:5a:b3:
         58:af:38:21:1d:9d:5d:dd:d9:84:a0:c4:83:d9:f8:d4:5a:a2:
         31:26:fe:8c:6b:d6:c2:cb:e2:36:40:bd:68:ff:e3:46:ba:b0:
         bc:ff:4c:57:05:a7:8d:fd:89:57:73:ca:83:a4:d8:c3:88:8c:
         26:87:8c:d9:2b:17:db:7e:e4:f3:6b:3f:c6:5a:f5:1a:f4:dc:
         81:1b:03:9c:20:d8:ab:18:71:3a:16:9f:b3:4a:d3:2c:e3:2c:
         4e:a3:81:5e:0c:ca:79:1b:5b:3c:9e:17:dc:2f:0c:aa:5a:8d:
         bc:80:6f:bc:38:37:d8:06:2e:5d:e6:60:15:37:0c:47:49:db:
         37:62:01:20:59:ba:2c:cf:de:a6:2c:f5:2b:ab:86:ff:17:0e:
         fc:3c:4b:2b:84:99:62:1b:af:85:d5:f5:23:0c:2d:1a:cf:52:
         ca:73:f1:7c:3b:36:4e:fd:13:24:97:7c:77:24:99:3c:a2:5e:
         7d:80:e1:1d:a9:a1:3e:55:1b:5b:a7:ad:d7:b8:c1:e9:25:bb:
         ea:09:84:1d:53:ff:d0:d3:c5:19:c0:f8:87:7b:a2:78:17:c4:
         95:65:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----