Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6kZm9DPuQVli0ANL1GoVDrm_mfY.roa
File:                     6kZm9DPuQVli0ANL1GoVDrm_mfY.roa (raw, json)
Hash identifier:          1hsuMV7rG2vBMHhpK27zW60AuzfMqeExyyCo+xauwpc=
Subject key identifier:   EA:46:66:F4:33:EE:41:59:62:D0:03:4B:D4:6A:15:0E:B9:BF:99:F6
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0186CB81EBFBA89943DBFF68E8C7CF778716
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6kZm9DPuQVli0ANL1GoVDrm_mfY.roa
Signing time:             Fri 10 Mar 2023 12:32:14 +0000
ROA not before:           Fri 10 Mar 2023 12:32:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207326
IP address blocks:        45.14.166.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:81:eb:fb:a8:99:43:db:ff:68:e8:c7:cf:77:87:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 10 12:32:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea4666f433ee415962d0034bd46a150eb9bf99f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:5b:78:37:24:c0:66:49:e0:ae:50:46:c9:
                    9d:db:b0:26:21:91:8f:37:88:15:e0:52:a5:55:31:
                    d0:01:a8:d0:a9:0c:6a:75:6c:b9:40:2e:ff:d1:e8:
                    68:ff:b9:69:d0:c6:ff:bd:73:74:84:ac:0a:ca:05:
                    13:5f:b3:ce:91:05:8f:eb:a6:d9:84:aa:d7:70:19:
                    aa:9a:4f:87:87:c6:96:7c:67:38:11:87:6f:fd:32:
                    47:f1:a3:21:44:f6:cb:70:f9:6a:e0:33:cf:da:fc:
                    c8:ba:b7:0b:9e:a4:ab:68:b9:20:a8:62:52:81:f0:
                    7a:01:e7:a5:49:d4:24:86:bd:d1:c6:6f:46:f3:b1:
                    25:cd:15:e2:02:28:28:97:e0:e5:ee:3d:4c:60:29:
                    12:10:47:e9:4b:96:93:8b:7f:48:58:e4:5e:f4:8b:
                    a7:43:52:f8:d9:a2:50:e5:3f:6f:05:77:fa:1f:93:
                    4c:78:d0:af:c5:3d:39:05:fc:98:39:69:da:3b:1b:
                    7e:60:36:39:07:9d:03:11:22:dd:eb:b2:1d:f9:c7:
                    39:d5:de:56:5d:73:42:81:94:33:80:5b:5a:1d:1b:
                    f2:f3:2b:6e:88:11:4a:7f:29:00:37:9e:fd:08:9f:
                    65:0d:f4:fa:f4:5c:c4:48:62:ed:f6:85:f7:0c:66:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:66:F4:33:EE:41:59:62:D0:03:4B:D4:6A:15:0E:B9:BF:99:F6
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6kZm9DPuQVli0ANL1GoVDrm_mfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:7e:51:1b:9c:62:61:e8:a1:49:80:eb:fa:94:fd:44:e0:55:
         4b:22:99:b3:98:42:21:a4:83:dc:69:43:90:ae:68:01:94:1c:
         07:7f:8d:0d:80:4c:42:ee:10:2c:05:d6:3b:05:3e:3f:b7:fd:
         61:39:a3:bc:05:c4:62:f9:8c:f5:d2:65:66:ee:03:64:b0:1b:
         38:f5:e9:78:32:26:b9:3d:0d:0b:9a:6c:0f:ce:c9:98:a6:bb:
         11:68:72:62:63:21:f3:f2:3c:b2:6a:c3:f4:bd:b1:6d:51:ad:
         d2:39:43:32:b2:43:40:90:6b:c6:2e:e3:e9:16:e8:84:20:bb:
         35:8d:09:50:f3:21:e8:dc:d6:59:a2:69:a8:1a:84:f9:4f:b3:
         3a:16:04:f4:9d:8e:5e:20:74:b0:f0:73:8e:25:d1:5b:7d:1c:
         f4:87:1d:54:ac:ac:13:f2:9f:b2:97:9e:29:e3:ea:94:7c:fc:
         92:85:ab:87:6e:ff:c3:91:35:a0:93:c3:57:81:92:5c:2a:47:
         7a:4b:49:0e:4f:d2:bd:20:90:e8:d1:f5:c2:96:e8:f8:49:4b:
         e6:88:a1:e4:0d:ef:fd:7f:4a:a9:bd:cc:f1:b1:e4:8a:de:6c:
         77:19:cb:67:8b:d7:f7:42:29:15:99:d2:2b:b0:52:d2:7b:0b:
         1e:80:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----