Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Jg1Wy1oXWm9mqpe71zKZYIfaL8I.roa
File:                     Jg1Wy1oXWm9mqpe71zKZYIfaL8I.roa (raw, json)
Hash identifier:          2SeiiJzwiL4iy7Vov5ySKCNowIZ+SCtVSwjutz5ZM08=
Subject key identifier:   26:0D:56:CB:5A:17:5A:6F:66:AA:97:BB:D7:32:99:60:87:DA:2F:C2
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F7972903750BC44B059D62074C55411
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Jg1Wy1oXWm9mqpe71zKZYIfaL8I.roa
Signing time:             Sun 01 Jan 2023 22:35:07 +0000
ROA not before:           Sun 01 Jan 2023 22:35:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6939
IP address blocks:        45.145.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:72:90:37:50:bc:44:b0:59:d6:20:74:c5:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=260d56cb5a175a6f66aa97bbd732996087da2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:35:0a:3f:35:2f:c6:41:78:f6:ee:f3:e5:
                    5e:f3:0a:60:3e:0a:a6:86:c2:18:91:0c:36:13:13:
                    5a:81:0d:e8:48:01:9b:e8:e7:f5:f8:40:8f:20:4d:
                    23:da:c0:13:0a:cb:38:a0:11:d6:41:3a:b4:3b:d7:
                    de:43:2a:49:45:7d:f2:43:19:5c:a0:b0:38:94:d6:
                    39:25:71:69:b4:96:df:93:5d:04:2c:db:4e:49:b5:
                    78:77:ca:a3:5e:3f:59:55:dd:24:28:4c:47:e4:2a:
                    2b:50:da:40:af:32:52:56:dd:c6:40:d8:7a:cb:05:
                    50:59:3a:08:89:65:b0:22:65:bb:f3:76:e6:95:ae:
                    3f:8e:a9:99:bf:33:26:bb:46:73:2d:1c:70:1f:b9:
                    7a:c0:6c:d8:cc:dd:42:d4:65:33:29:48:45:40:5d:
                    b3:f7:ee:31:91:fd:b1:15:dd:39:a3:fe:ce:0f:d1:
                    94:b6:75:13:56:fd:69:7a:25:e5:a9:12:65:45:4d:
                    4c:5d:01:fa:c0:5c:a1:06:f7:c2:0a:79:4c:68:2b:
                    ad:1d:d6:73:f7:58:4b:dc:fe:a6:71:4c:92:cb:13:
                    8a:02:d4:ce:53:68:df:83:73:58:10:dc:14:a7:26:
                    6e:b1:b4:d9:25:ee:41:f0:fb:2c:ab:b0:c3:32:e2:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0D:56:CB:5A:17:5A:6F:66:AA:97:BB:D7:32:99:60:87:DA:2F:C2
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Jg1Wy1oXWm9mqpe71zKZYIfaL8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:ba:f6:a7:c1:aa:24:13:a3:33:02:00:96:ba:7f:d4:93:
         e9:49:de:84:c7:f7:0d:75:d4:84:1d:91:3d:52:ee:1c:7d:ed:
         9a:3f:c3:7d:ff:3a:e7:a3:06:d6:37:04:e0:f1:65:e1:4d:df:
         c6:3a:7a:ce:c5:7f:bc:f9:54:ea:7f:ee:3b:46:d7:8e:eb:31:
         fd:b8:74:bc:55:95:99:35:52:c6:d6:47:7d:e7:af:8b:78:d0:
         bb:f0:69:76:1f:3d:20:48:c6:ca:3d:d5:38:a5:23:cb:28:c6:
         d1:88:10:b2:f4:51:3a:7d:09:6b:9d:37:40:72:9e:a9:78:db:
         5f:91:49:36:3d:3c:be:77:c1:b8:e6:f2:ca:87:31:4b:26:34:
         5f:c0:2c:ef:51:c1:ef:64:8f:b0:dd:d8:cc:f6:17:77:84:6d:
         c7:c5:fd:ca:8e:90:23:ee:dc:e6:39:e3:a3:b8:24:7b:10:c1:
         e1:db:aa:06:0f:47:21:4e:d0:93:b3:00:57:66:08:01:34:37:
         1f:e4:1b:f5:c8:1b:f5:4f:29:0f:10:88:93:2e:2d:f9:69:5f:
         f3:d9:79:ef:9b:54:4b:b3:96:d9:5f:6b:93:63:34:72:b4:be:
         27:f6:e3:f3:d6:4d:48:27:e2:99:dc:9e:f1:20:66:f1:27:53:
         74:df:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----