Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/L8219nqvtBRZWZ8_Zzpw1dVIIx4.roa
File:                     L8219nqvtBRZWZ8_Zzpw1dVIIx4.roa (raw, json)
Hash identifier:          A24Si5oblSNDqlOxTOPQ2eQ9Xd2UVb5gTEzda2aRMDc=
Subject key identifier:   2F:CD:B5:F6:7A:AF:B4:14:59:59:9F:3F:67:3A:70:D5:D5:48:23:1E
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       0185A7594ADA6BCE59D3BE078B8226B56EA2
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/L8219nqvtBRZWZ8_Zzpw1dVIIx4.roa
Signing time:             Thu 12 Jan 2023 18:58:45 +0000
ROA not before:           Thu 12 Jan 2023 18:58:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40015
IP address blocks:        45.151.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a7:59:4a:da:6b:ce:59:d3:be:07:8b:82:26:b5:6e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Jan 12 18:58:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2fcdb5f67aafb41459599f3f673a70d5d548231e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:48:0d:cb:62:d6:d9:9c:f6:97:50:81:18:
                    9a:07:45:0c:03:de:4a:c1:89:7f:3e:16:af:49:71:
                    07:f9:01:59:f3:0e:43:90:c9:19:28:74:16:61:db:
                    00:bd:0b:78:34:4a:7e:27:cd:63:4f:2e:63:c9:ba:
                    32:ba:31:5d:9b:a5:07:19:1a:11:20:dd:db:99:98:
                    40:bd:39:e6:45:69:4f:8c:bb:06:af:e5:ab:cf:e2:
                    c5:9d:98:95:9c:ec:99:97:eb:71:9a:32:4d:77:2c:
                    f0:8e:04:d9:5e:76:88:cc:8d:08:b9:6d:cd:43:79:
                    4c:45:bb:a7:c0:89:93:36:c0:fc:a3:7f:6f:96:f3:
                    dd:a7:f6:ec:0e:74:06:4f:f4:a2:5b:c2:d9:b9:5b:
                    d3:b7:4d:1f:7f:95:18:2f:76:1d:44:1d:9d:c2:3e:
                    a2:ef:85:2f:ec:be:e4:8b:0f:9a:e0:ad:0c:2b:9f:
                    58:cf:d4:99:73:5c:b2:75:52:23:98:40:4c:e9:3f:
                    a5:fa:01:80:51:32:91:32:bd:c3:78:4e:6e:b3:65:
                    3f:08:ab:82:dd:5d:67:49:b4:2b:9b:12:d6:77:4f:
                    d3:c2:39:b7:ad:4a:59:eb:93:a2:e5:0c:6f:ae:fe:
                    68:2d:8e:be:b8:b4:67:fc:8e:f4:d8:10:1d:31:33:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CD:B5:F6:7A:AF:B4:14:59:59:9F:3F:67:3A:70:D5:D5:48:23:1E
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/L8219nqvtBRZWZ8_Zzpw1dVIIx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:fb:38:e4:36:c5:5e:a9:c9:3e:19:4c:21:e1:b5:61:52:
         70:2f:50:69:c3:c4:f5:0d:8d:72:45:36:7e:12:50:54:8d:80:
         ea:77:58:33:6d:65:fb:eb:5a:4b:fa:f2:78:8c:91:a1:84:7e:
         b5:be:6b:52:cb:e9:6d:c8:6c:b5:2a:0b:17:4c:53:f6:74:e5:
         12:a7:31:3c:b4:7f:8f:48:21:34:3f:46:cf:05:06:ab:51:94:
         e9:ae:cd:7e:df:f1:29:05:ae:3f:37:58:c4:4d:83:53:48:76:
         31:81:8f:5d:0e:ef:7b:75:d1:d3:e7:6a:91:bd:d8:3f:1b:da:
         41:c0:3c:1d:02:b3:24:42:37:fa:0e:23:ca:9d:18:0b:5b:25:
         f3:88:17:ff:68:26:a1:77:b4:44:b2:d2:f2:0c:b5:c5:3b:3c:
         3a:62:04:07:76:8f:0d:36:1f:ee:02:f3:71:62:7e:a2:93:3d:
         06:ef:4b:a5:c5:b3:88:bc:ed:fa:cb:9e:d3:30:a8:49:52:b6:
         09:46:05:be:38:a1:3d:4d:10:04:64:15:83:05:3a:e0:57:d7:
         c6:f1:fa:93:33:80:34:9f:8c:25:94:66:e3:2a:6a:99:74:03:
         35:09:ff:ee:79:bb:6d:bf:69:55:af:fd:6c:79:f7:86:ba:8f:
         22:0c:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----