Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa
File:                     ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa (raw, json)
Hash identifier:          7YiSkt1yNRDKnIlBnVWBV1Xqr0+KOYWsv5YirPz6+C4=
Subject key identifier:   8A:18:D0:09:BE:EB:DF:36:93:BD:6A:BB:82:6A:2F:B5:4E:04:CA:4F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F799057C3D41208AF37D1481596EA5A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa
Signing time:             Sun 01 Jan 2023 22:35:15 +0000
ROA not before:           Sun 01 Jan 2023 22:35:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204687
IP address blocks:        45.83.207.0/24 maxlen: 24
                          2a07:e342::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:90:57:c3:d4:12:08:af:37:d1:48:15:96:ea:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a18d009beebdf3693bd6abb826a2fb54e04ca4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:19:7b:de:01:8b:1b:fa:a2:7a:40:07:68:
                    55:9c:e9:d5:39:2c:54:b7:95:66:29:aa:54:ec:bf:
                    2c:c0:d0:6d:f3:fc:41:42:5e:05:ee:bc:53:ed:74:
                    17:20:bf:8a:0a:86:2f:39:85:0e:fe:b5:ce:16:f5:
                    76:6b:6f:b9:61:38:49:f5:18:14:9d:87:56:03:92:
                    74:6a:32:16:2d:16:75:b7:a8:53:4f:7d:62:03:ed:
                    5d:7d:1a:4f:70:cf:d7:97:a7:4d:a9:99:96:46:12:
                    97:66:69:30:24:e0:3a:61:11:3c:c9:c7:54:21:ce:
                    5f:b3:2c:05:a6:d5:de:09:f0:f0:77:54:f8:88:66:
                    6f:e0:53:34:bd:43:87:ff:80:67:c0:fc:64:52:3c:
                    ba:4c:e6:66:ae:0f:01:08:a3:f4:2b:13:8e:07:41:
                    55:af:03:6b:4f:21:a9:ec:56:dd:40:05:ca:f7:c7:
                    f2:0a:20:92:8b:33:be:5d:55:10:aa:61:89:f8:5b:
                    95:a3:f9:2d:f0:18:bb:d9:5d:90:e8:3b:10:ef:1b:
                    7d:c6:1f:b2:d4:54:2c:aa:cb:55:57:f5:3c:83:76:
                    7b:a0:c4:e4:a6:ec:d2:fc:8d:e7:86:69:6c:a2:0a:
                    ca:0a:47:3e:a6:d2:93:b1:5d:02:a9:d5:4e:69:7e:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:D0:09:BE:EB:DF:36:93:BD:6A:BB:82:6A:2F:B5:4E:04:CA:4F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ihjQCb7r3zaTvWq7gmovtU4Eyk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.207.0/24
                IPv6:
                  2a07:e342::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:84:36:b1:e0:61:02:e1:10:84:ac:88:0a:df:5e:7d:85:
         0e:c8:d5:b2:14:b4:22:f0:48:cc:e1:85:eb:c9:37:10:49:ba:
         5a:da:ec:a3:bc:74:0f:3d:48:5e:a1:5b:96:83:9b:b3:97:04:
         25:e6:a9:13:e0:06:51:40:6a:fa:ad:b7:11:cc:fc:a5:44:78:
         bf:9d:02:cc:c4:10:e7:e1:42:c3:a8:bb:04:58:ca:f9:d3:76:
         2f:04:f9:b1:62:14:c0:73:ba:1e:bb:eb:39:af:23:6a:6e:14:
         f4:0c:aa:ae:19:b9:09:39:01:50:05:a5:38:ea:fd:99:20:77:
         aa:f4:30:4b:14:19:23:b9:97:58:f8:5c:b2:f2:da:7c:88:a7:
         e8:a2:6a:62:7f:c1:ca:d1:f3:d1:88:ed:42:0c:6a:62:20:d8:
         ed:21:c5:8a:31:42:b3:2a:85:92:92:50:a8:0a:74:f0:e7:d6:
         28:f1:fb:b8:11:e9:59:5b:b1:39:43:41:f2:ca:11:96:fd:ee:
         26:af:6a:c2:b0:a6:19:60:ef:6c:c7:bc:15:2f:a3:26:51:15:
         e1:0a:a0:81:35:19:2b:14:90:15:4e:54:a5:11:1b:72:65:ca:
         39:49:b2:b8:d5:45:b7:be:cd:45:aa:41:ae:c4:f5:09:06:07:
         26:73:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----