Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa
File:                     cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa (raw, json)
Hash identifier:          0DxRQdxz3NUsd+Z3TObraZqvWlj9yB5xb2Kk2lpwm+c=
Subject key identifier:   70:CE:CB:A6:AC:6D:76:22:F8:B3:79:33:3B:72:C8:B0:E7:7F:19:69
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       01856F6708ADB38E6B2F9FD431DB437BB5E7
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa
Signing time:             Sun 01 Jan 2023 22:15:01 +0000
ROA not before:           Sun 01 Jan 2023 22:15:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8495
IP address blocks:        45.135.106.0/24 maxlen: 24
                          2a0e:6b40:20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:08:ad:b3:8e:6b:2f:9f:d4:31:db:43:7b:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Jan  1 22:15:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=70cecba6ac6d7622f8b379333b72c8b0e77f1969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:fa:3b:af:ef:2f:5d:e5:da:5a:6c:15:3c:
                    6a:47:7b:7e:e2:35:1b:1e:55:00:7b:b3:f6:a8:b6:
                    ea:6c:ea:64:6d:76:78:08:e1:8b:e1:5d:64:47:98:
                    24:d0:ab:c7:5a:97:ec:dc:0f:02:84:a1:00:5a:1f:
                    4f:8a:58:fa:af:31:21:d3:b7:01:a7:72:cc:32:a5:
                    47:67:72:19:4d:f1:43:86:c6:3c:87:3e:62:ff:eb:
                    39:2f:77:6e:73:84:0c:cf:ba:ca:31:40:e9:ef:48:
                    11:ad:c6:00:72:73:34:a5:a7:b3:3c:20:99:0d:8a:
                    18:e7:73:d2:b7:2c:4b:b8:54:b4:dc:ed:67:c5:2e:
                    05:d7:8b:72:d5:81:19:85:e7:61:52:2a:17:24:61:
                    c2:12:b5:09:8a:5a:33:4d:a6:47:55:f8:db:88:08:
                    74:53:b0:a7:1e:35:88:c7:6b:0b:14:a8:88:24:b2:
                    7a:81:c6:85:4b:57:b3:bb:02:9a:fc:34:b3:95:d9:
                    c8:c8:24:79:a6:86:d5:33:54:bb:81:fa:45:70:5e:
                    be:41:54:67:df:90:02:a5:03:09:42:1a:b6:00:67:
                    ab:89:c2:88:70:2c:6b:a0:89:2a:37:23:7f:ef:ef:
                    d8:aa:53:c2:0c:cc:f6:20:9b:f4:34:da:ae:20:43:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CE:CB:A6:AC:6D:76:22:F8:B3:79:33:3B:72:C8:B0:E7:7F:19:69
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/cM7LpqxtdiL4s3kzO3LIsOd_GWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.106.0/24
                IPv6:
                  2a0e:6b40:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:96:f4:7a:54:6f:ee:17:d4:a6:f9:65:2a:d9:cc:5d:dc:
         c3:2e:25:b5:85:68:0f:c4:88:fa:2d:08:3a:c7:aa:1d:5f:d9:
         bc:ef:da:18:b9:2b:58:a4:50:b0:a2:8a:b5:0f:9c:7a:fb:56:
         43:6f:f3:55:78:c4:77:21:44:b6:57:d0:c5:44:b7:4d:67:6a:
         ec:74:18:8f:14:84:55:9f:ad:2f:04:86:b5:53:e5:04:34:16:
         25:d1:e4:db:23:21:05:28:09:35:3d:69:d3:6b:9c:03:7f:46:
         57:50:33:e7:c2:6d:75:5d:aa:d2:63:30:a4:19:d1:37:ea:53:
         d7:ca:42:6c:c8:1e:82:97:1b:16:2e:14:fd:24:d0:6c:73:d1:
         0e:10:d3:cd:d5:1e:74:a5:62:99:16:21:b7:97:c4:a7:ef:80:
         40:57:d9:d8:2e:5c:a8:e9:56:85:5f:60:0f:85:11:c0:d7:38:
         90:15:87:19:ab:22:67:2e:90:ce:a6:81:0d:bf:5b:38:b8:85:
         d0:a4:13:df:76:d9:d5:73:51:48:c3:68:19:2e:cb:da:b2:44:
         7a:25:1b:d4:da:8c:cd:ac:1e:cb:a3:d3:71:88:4c:1a:79:f1:
         f0:32:67:3f:6b:a9:f4:d2:a0:6f:f0:db:c6:04:25:82:dc:f8:
         36:b4:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----