Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/LT2SOzSgZZEuVGxdpzrhLhWsH5w.roa
File:                     LT2SOzSgZZEuVGxdpzrhLhWsH5w.roa (raw, json)
Hash identifier:          ePX+QOYALDJQ4mEViEcOrkMszgJcWiRcO0nHoCjt59Q=
Subject key identifier:   2D:3D:92:3B:34:A0:65:91:2E:54:6C:5D:A7:3A:E1:2E:15:AC:1F:9C
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       0185732841DDCE955F6C84C9AC4F106DA428
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/LT2SOzSgZZEuVGxdpzrhLhWsH5w.roa
Signing time:             Mon 02 Jan 2023 15:44:56 +0000
ROA not before:           Mon 02 Jan 2023 15:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211619
IP address blocks:        45.95.168.0/22 maxlen: 22
                          2a0e:bfc0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:28:41:dd:ce:95:5f:6c:84:c9:ac:4f:10:6d:a4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Jan  2 15:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d3d923b34a065912e546c5da73ae12e15ac1f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:db:e0:78:ef:f8:1c:91:7e:dc:64:f6:f6:
                    fd:47:87:7d:6a:a1:56:16:6a:99:5a:3f:17:c7:e4:
                    07:1b:fc:dc:c3:57:3b:9c:51:fd:37:2e:18:67:42:
                    e0:1b:4b:9f:78:5b:89:83:2d:c5:1b:d4:32:a2:16:
                    68:5c:9a:ab:97:47:11:95:28:d0:2c:11:6d:d0:fb:
                    c2:eb:74:91:b2:6f:3b:42:35:f0:d4:87:38:02:d7:
                    5a:c3:0b:5e:29:c2:c1:81:6d:25:e5:95:cd:da:bf:
                    70:56:85:c5:12:b8:f5:fd:69:e5:8f:c8:94:cd:b7:
                    89:3e:0b:25:ff:8a:a4:02:bf:7c:1f:c1:76:1b:b3:
                    7e:90:a2:72:58:d0:9b:a6:53:e8:08:a0:f9:28:f9:
                    d6:6a:9a:09:de:3c:59:d2:ef:b5:f2:f6:77:68:d3:
                    05:41:af:a8:cd:c9:3b:4a:4a:0e:51:1e:be:44:48:
                    6f:38:16:ba:a8:a2:93:ff:84:92:54:17:ac:0b:d6:
                    97:c1:28:f7:08:10:b9:00:08:98:77:67:93:19:4d:
                    63:4d:90:6a:6f:6b:34:4e:08:9f:7c:15:83:42:67:
                    10:31:92:c7:8d:ca:f3:80:ab:36:45:da:41:97:3a:
                    d9:81:ee:23:b4:77:66:22:f6:3b:f7:5f:e9:f4:a9:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:92:3B:34:A0:65:91:2E:54:6C:5D:A7:3A:E1:2E:15:AC:1F:9C
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/LT2SOzSgZZEuVGxdpzrhLhWsH5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.168.0/22
                IPv6:
                  2a0e:bfc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:35:0b:59:68:60:37:30:73:d9:06:cf:1b:c4:29:fe:5e:
         02:89:57:1a:d0:4f:bf:9c:29:4b:bd:af:e4:03:9f:7e:8c:9a:
         c3:20:97:61:e6:a6:0b:07:32:bd:35:a9:ab:0a:26:02:dd:82:
         8c:7c:b4:01:5d:50:1c:97:25:8e:3e:21:9f:89:d9:3e:d6:d7:
         5a:b2:0f:73:71:58:e0:25:70:4a:d3:41:f4:8b:8c:eb:a5:13:
         96:c2:db:04:0e:e9:92:2c:02:08:71:b0:87:d8:d7:ac:63:6c:
         cc:cb:86:0c:c6:47:ba:c0:d6:78:66:57:44:86:c7:3b:1d:5a:
         b8:9c:6f:8b:6f:a0:31:69:c1:96:40:de:8b:da:ba:a0:20:0a:
         cd:40:0b:10:52:20:24:fb:70:b6:d4:9e:b8:d3:72:04:37:0d:
         6f:8d:80:f3:f8:4a:6c:1c:18:e9:79:fa:61:b3:51:04:95:32:
         37:e8:83:7c:b9:a2:59:37:66:df:74:0c:f0:ec:e0:78:30:54:
         6e:37:13:ab:83:5c:f2:a3:a9:a7:e0:5b:9a:48:a5:4b:67:8b:
         b3:93:a0:21:a9:43:95:4a:f4:e9:97:30:51:f2:0f:20:11:59:
         05:e0:34:a0:32:6a:da:14:5c:e0:3b:96:b1:b9:08:25:c7:f8:
         54:30:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----