Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/EgwaiIuEhpJHXB1GzqBh1B2S6c8.roa
File:                     EgwaiIuEhpJHXB1GzqBh1B2S6c8.roa (raw, json)
Hash identifier:          iOQTVdGMM8wOT1g6shjhsTLP6WJi/GUx84jR3i2gSpE=
Subject key identifier:   12:0C:1A:88:8B:84:86:92:47:5C:1D:46:CE:A0:61:D4:1D:92:E9:CF
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       01857328408CA46BC97AF3E4B6F0913177F4
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/EgwaiIuEhpJHXB1GzqBh1B2S6c8.roa
Signing time:             Mon 02 Jan 2023 15:44:55 +0000
ROA not before:           Mon 02 Jan 2023 15:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42864
IP address blocks:        45.95.168.0/22 maxlen: 22
                          2a0e:bfc0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:28:40:8c:a4:6b:c9:7a:f3:e4:b6:f0:91:31:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Jan  2 15:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=120c1a888b848692475c1d46cea061d41d92e9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:7c:05:53:51:c9:34:75:7e:70:eb:b5:82:
                    a4:03:d5:64:d9:89:36:6c:0b:14:56:c8:75:0e:fb:
                    00:2a:0e:cf:02:93:70:56:45:e7:43:81:d7:20:c6:
                    6f:7c:3e:f6:a8:38:d8:10:33:d2:e0:a8:2b:05:b2:
                    1f:86:17:d7:67:42:74:af:1b:65:a2:58:52:1a:54:
                    62:78:e5:e0:f3:f7:f4:bb:65:82:0e:41:4a:66:ec:
                    71:6b:e5:9a:29:2e:99:ee:cf:97:5d:b0:2d:97:87:
                    dc:81:89:09:a5:a5:f8:f1:c3:95:c6:4d:49:c4:b1:
                    c1:dd:b6:9a:84:1c:3c:39:f1:55:2c:30:f7:11:7f:
                    c8:c4:52:33:c5:5d:0c:2d:97:47:fe:35:c4:f2:d3:
                    a7:3b:f2:f8:fa:8d:42:33:04:9f:27:5a:9a:f7:1c:
                    b7:cd:dc:55:f5:3e:25:e8:43:fe:86:64:71:30:0d:
                    ad:42:0f:14:32:94:9d:fa:48:5c:6f:b2:40:1a:ba:
                    7a:68:be:e8:f5:6d:d5:58:08:9f:44:6f:4d:a5:b1:
                    37:a7:d8:72:35:7b:95:33:21:a5:b4:4d:e4:f1:5f:
                    7a:72:43:1a:0a:15:db:05:ec:6e:65:53:97:25:db:
                    ab:94:31:9b:18:e6:0a:1c:2f:ba:be:bd:52:4c:a3:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:1A:88:8B:84:86:92:47:5C:1D:46:CE:A0:61:D4:1D:92:E9:CF
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/EgwaiIuEhpJHXB1GzqBh1B2S6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.168.0/22
                IPv6:
                  2a0e:bfc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:66:15:2f:9f:c8:45:4f:0a:05:2b:f3:a7:6b:ae:98:3f:
         46:c8:ab:ec:8c:95:77:66:a5:0c:a6:06:c3:46:ab:86:9e:e9:
         18:15:33:23:46:a4:b1:d2:7b:43:1a:f2:80:ad:db:50:11:a4:
         ed:ec:e4:86:8c:59:bf:a3:92:0b:82:fe:62:00:0c:88:7a:72:
         a5:88:2a:e9:7b:cd:45:6f:4d:f3:f4:5f:84:3a:41:10:74:cb:
         fb:e8:d0:e9:bd:ae:ed:e0:d9:39:3a:bb:f5:33:c2:32:4d:bc:
         1c:08:b0:ac:a3:89:bf:22:26:8a:c4:0c:a2:5d:83:ed:ed:7e:
         e0:c8:5c:af:80:a9:e2:a9:ce:c7:bd:fd:fe:22:b4:25:5a:2f:
         20:53:d6:ac:57:5f:b5:92:0a:58:14:b6:64:03:cb:2a:89:32:
         33:49:2e:6d:ab:30:1c:46:09:29:50:9a:00:31:e9:23:bc:1c:
         47:24:1e:98:a7:85:56:90:2b:05:6c:a1:bc:cb:43:9c:f6:0a:
         09:0d:f8:a8:8a:2e:68:87:15:f5:eb:16:9b:1a:2a:5d:7b:10:
         4d:88:76:68:ca:ff:99:c8:01:55:07:53:bc:7e:36:df:d3:6b:
         55:c5:0a:ee:25:c9:c5:a3:9f:42:b7:7a:36:97:1a:55:b2:fa:
         87:25:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----