Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/hx91liwVSiJaxf_WN2qkxqMjiTk.roa
File:                     hx91liwVSiJaxf_WN2qkxqMjiTk.roa (raw, json)
Hash identifier:          +cdIlfr5rdvubOasnkclIP+qI/0vtyfIO1I4N1qwLSs=
Subject key identifier:   87:1F:75:96:2C:15:4A:22:5A:C5:FF:D6:37:6A:A4:C6:A3:23:89:39
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       018962C1403DC4C97268422C37014C354E43
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/hx91liwVSiJaxf_WN2qkxqMjiTk.roa
Signing time:             Mon 17 Jul 2023 07:29:39 +0000
ROA not before:           Mon 17 Jul 2023 07:29:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41789
IP address blocks:        45.82.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:c1:40:3d:c4:c9:72:68:42:2c:37:01:4c:35:4e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jul 17 07:29:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=871f75962c154a225ac5ffd6376aa4c6a3238939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:46:14:71:9a:73:06:c4:f1:ca:2d:d0:04:
                    ac:24:bf:15:d8:bd:2b:c9:d4:c7:81:0d:5a:e0:12:
                    b2:38:b7:54:45:dc:40:34:01:56:69:70:c5:24:93:
                    08:38:47:75:ae:f2:5a:eb:c2:d7:61:24:22:76:50:
                    7c:8d:5c:0f:84:11:23:2e:83:ed:0d:c0:34:12:fd:
                    6d:13:86:8d:9e:c9:14:51:0d:26:46:ff:9a:b2:f9:
                    00:99:36:c1:cc:a4:79:7a:40:e4:dc:a0:c3:9f:40:
                    d0:52:49:16:b9:bb:ed:e4:31:ae:7c:be:38:7a:9e:
                    31:5f:38:aa:eb:49:8b:7b:19:ab:92:ef:7d:25:1e:
                    2f:89:d2:b9:46:2e:51:e7:46:fc:e3:fb:16:1d:56:
                    73:f9:d0:89:77:f8:ce:25:82:5d:7f:13:97:02:6d:
                    27:51:f2:bd:0d:e4:3e:5a:de:d6:bb:6d:af:d7:c4:
                    dc:2f:9e:c1:1c:da:99:89:dd:6c:07:c0:6c:86:8a:
                    0f:4c:16:46:5b:64:af:5c:af:f4:33:8d:f6:3a:3b:
                    16:f4:59:bb:58:29:1f:2c:58:c9:38:ad:ee:d1:d4:
                    e7:27:7d:04:89:fc:8f:63:44:49:bb:07:ee:a1:f4:
                    f6:be:29:ba:c6:43:bc:2f:39:03:23:f4:e7:51:de:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:75:96:2C:15:4A:22:5A:C5:FF:D6:37:6A:A4:C6:A3:23:89:39
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/hx91liwVSiJaxf_WN2qkxqMjiTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:00:ae:80:ee:90:1a:5c:f3:36:2c:33:01:17:c3:3d:19:11:
         61:c4:af:6c:e8:b4:54:fc:c8:6b:89:68:d2:95:70:93:c9:10:
         f0:91:86:ed:11:53:4f:78:27:2c:44:3f:d7:6c:e0:af:06:14:
         1d:b1:90:0a:fd:41:df:b2:6e:e2:17:07:8e:72:d6:29:fd:06:
         32:d3:4c:fd:9b:43:0b:f5:b4:3e:ee:6f:4c:9c:d1:7a:2b:25:
         f1:38:9a:da:be:c7:9f:f6:8c:1d:42:96:c2:d5:63:4d:e9:e2:
         73:ad:f6:5e:ee:db:60:94:a4:8e:09:e2:10:ab:eb:9f:8d:92:
         27:37:88:52:b7:d8:9d:64:76:cd:30:6b:20:64:fe:52:89:39:
         e1:25:7a:b1:21:f8:bc:18:0b:e6:cc:45:36:a4:11:cf:fb:5c:
         bb:3d:ff:e8:eb:90:2d:41:a9:fa:ab:25:0b:22:8a:05:c0:ab:
         86:de:f9:cf:65:2f:d9:13:53:7f:76:c9:4f:03:81:39:31:fd:
         e0:a1:78:e2:22:a4:9a:5a:c1:06:9d:e3:49:c4:79:d4:db:8b:
         7e:d7:64:01:bc:2c:54:e0:41:88:73:87:ee:e0:f9:55:ab:5a:
         02:74:5a:80:5b:08:91:1b:c3:61:3a:b3:a1:63:1f:1d:c0:ab:
         72:d8:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----