Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h_dSJZ6-ybCKh6utkKbGFJU3-vo.roa
File:                     h_dSJZ6-ybCKh6utkKbGFJU3-vo.roa (raw, json)
Hash identifier:          nw5c7rwRYRMU5mW9sd3df9gH1X72hCFN4A0UHZsljiA=
Subject key identifier:   87:F7:52:25:9E:BE:C9:B0:8A:87:AB:AD:90:A6:C6:14:95:37:FA:FA
Certificate issuer:       /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial:       0187248C23C0B79E7E8686217DCF71974030
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h_dSJZ6-ybCKh6utkKbGFJU3-vo.roa
Signing time:             Mon 27 Mar 2023 19:29:36 +0000
ROA not before:           Mon 27 Mar 2023 19:29:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42375
IP address blocks:        45.151.30.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:24:8c:23:c0:b7:9e:7e:86:86:21:7d:cf:71:97:40:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
        Validity
            Not Before: Mar 27 19:29:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87f752259ebec9b08a87abad90a6c6149537fafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:58:7e:bf:69:d0:99:b9:54:e9:6b:96:1b:
                    21:6c:58:64:9c:04:88:eb:7c:0d:74:32:1d:da:f2:
                    c0:29:a4:29:f2:aa:22:ee:71:65:f1:f0:22:4b:83:
                    10:1e:0b:e5:21:f2:8c:72:45:3c:6d:b2:d9:74:b1:
                    c9:fe:17:96:88:b0:10:5f:9a:22:1a:2e:d8:09:cd:
                    25:82:10:17:d7:51:3a:ab:32:6d:3f:59:0b:3d:1e:
                    84:d5:ac:c0:e0:73:92:e8:73:90:fa:46:b3:55:57:
                    99:88:ad:25:ae:0c:35:d7:25:38:92:4a:4b:11:1b:
                    fd:85:c6:74:a7:df:fa:0a:26:8f:bc:34:f3:cd:7f:
                    ad:45:35:b9:1e:58:97:0b:48:f3:b3:dc:5f:67:64:
                    2a:78:b0:b0:15:ef:66:b3:40:38:25:15:fd:8b:cb:
                    4a:fe:dd:43:e5:c2:68:bd:19:19:80:2f:33:03:04:
                    cc:09:27:00:fd:b6:27:ab:1c:da:89:31:79:b1:01:
                    b3:bb:9e:6f:62:21:95:45:96:cf:0b:90:77:4c:2d:
                    b7:de:50:65:f0:fb:af:0d:75:85:98:4e:04:26:39:
                    f8:7a:51:8d:26:01:c6:5d:e3:7d:81:5a:0d:48:32:
                    ce:e5:68:bf:6b:66:58:7c:57:23:6f:94:71:b1:1e:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F7:52:25:9E:BE:C9:B0:8A:87:AB:AD:90:A6:C6:14:95:37:FA:FA
            X509v3 Authority Key Identifier:
                keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/h_dSJZ6-ybCKh6utkKbGFJU3-vo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:2a:dd:b8:9f:db:57:8f:1c:7a:79:e0:6b:f4:8f:59:50:48:
         7b:93:57:77:1d:a6:0a:e8:92:d0:5e:79:ec:66:9b:28:54:92:
         12:9c:a8:99:79:5d:14:a4:2f:f8:59:ba:f6:5d:98:ff:15:1b:
         5d:0e:15:88:de:01:73:51:0c:c6:a1:a2:18:68:82:4d:31:3d:
         6d:4d:03:64:ae:5f:d4:dd:29:87:46:5b:51:f8:5c:c0:4a:df:
         12:4f:d8:fa:95:c8:2b:64:6a:53:8e:57:82:e8:ab:fa:94:9a:
         c4:b0:c9:e2:f2:12:19:77:50:74:d3:39:2d:f2:86:a7:95:75:
         4f:bc:84:b7:2a:13:df:c9:4b:e3:82:55:4a:a0:8a:3b:89:c9:
         7a:6c:f4:b9:56:c8:e4:8a:65:4e:29:e7:8e:2a:41:1f:54:fb:
         df:00:0d:34:41:fa:7d:4e:21:d8:e1:85:d8:60:2b:00:0a:e1:
         90:16:f6:eb:79:27:a3:db:2f:da:2a:3a:8a:8a:a2:95:5d:51:
         a5:bd:72:cd:ad:ee:66:2e:f8:8e:ed:34:a8:fd:7b:4b:67:cd:
         90:de:0c:ce:03:00:01:c6:be:11:b3:af:ac:7a:2c:ac:06:1e:
         6c:6a:ca:5f:bc:c0:76:39:cc:02:bc:34:83:9d:de:c8:ad:a9:
         64:2b:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----