Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9UEwiUp8U9ZJaA92L4g9Z1mwiGA.roa
File:                     9UEwiUp8U9ZJaA92L4g9Z1mwiGA.roa (raw, json)
Hash identifier:          IAZ/pxnprTBUi7hIQMFio99ZUUlOqyjUURWphBQ+wQc=
Subject key identifier:   F5:41:30:89:4A:7C:53:D6:49:68:0F:76:2F:88:3D:67:59:B0:88:60
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018656F21D2EE8A3EAA9FEA83A7FD687C86F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9UEwiUp8U9ZJaA92L4g9Z1mwiGA.roa
Signing time:             Wed 15 Feb 2023 21:19:13 +0000
ROA not before:           Wed 15 Feb 2023 21:19:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        193.105.177.0/24 maxlen: 24
                          178.218.145.0/24 maxlen: 24
                          194.56.226.0/24 maxlen: 24
                          194.56.224.0/24 maxlen: 24
                          194.56.225.0/24 maxlen: 24
                          45.90.145.0/24 maxlen: 24
                          45.90.146.0/24 maxlen: 24
                          185.186.67.0/24 maxlen: 24
                          185.234.74.0/24 maxlen: 24
                          185.234.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:56:f2:1d:2e:e8:a3:ea:a9:fe:a8:3a:7f:d6:87:c8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Feb 15 21:19:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f54130894a7c53d649680f762f883d6759b08860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:0c:a1:6c:7e:be:f2:bd:31:53:ee:80:9e:
                    c3:18:5f:78:05:fe:32:a6:6e:c5:98:bc:13:6b:94:
                    75:75:57:ad:4a:ca:4e:81:58:98:1b:db:c1:43:3d:
                    33:5a:62:ac:16:cd:ea:d6:b1:f6:b0:d5:3d:76:98:
                    f9:a2:fb:55:9e:c6:75:31:a2:b5:e4:63:dc:8c:c9:
                    f1:4c:b2:c4:d3:23:89:94:e4:d9:0d:46:c5:fa:56:
                    91:20:d7:3a:19:9e:5b:a2:3a:2d:e1:cd:68:25:72:
                    66:b2:2d:ee:98:fb:99:84:a7:32:03:03:e9:4b:f2:
                    49:c1:36:d1:7a:82:20:48:a8:a4:20:87:2e:44:01:
                    d6:8a:62:1e:68:bf:81:42:2d:f3:a4:1f:d4:67:6f:
                    83:b7:71:e4:9e:fc:cf:a3:b1:2f:e8:3d:9f:a1:6b:
                    47:ad:96:59:9d:5e:f8:4e:b1:36:44:ec:ac:6d:69:
                    fb:56:33:80:1d:5f:1b:ee:1c:d1:1f:4c:7b:93:19:
                    f4:e7:8f:5c:27:df:a3:15:64:01:e5:cb:9b:a2:8a:
                    30:aa:9f:3a:62:73:47:df:cc:e2:fc:b1:59:00:16:
                    c2:11:ac:a7:a4:eb:37:94:dc:2e:c3:38:ee:83:a8:
                    59:ec:f0:dd:7e:be:ad:86:18:ad:aa:3c:5b:b6:e2:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:30:89:4A:7C:53:D6:49:68:0F:76:2F:88:3D:67:59:B0:88:60
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9UEwiUp8U9ZJaA92L4g9Z1mwiGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.145.0-45.90.146.255
                  178.218.145.0/24
                  185.186.67.0/24
                  185.234.74.0/23
                  193.105.177.0/24
                  194.56.224.0-194.56.226.255

    Signature Algorithm: sha256WithRSAEncryption
         13:37:c9:ea:09:17:ba:bb:92:79:9c:54:00:53:fc:83:03:91:
         57:ad:81:df:be:8e:73:0b:ef:65:0e:d2:4d:9e:25:15:cd:55:
         52:d9:ef:6d:4e:0d:e9:7a:56:45:70:86:8f:3e:9c:3e:3f:99:
         23:97:f0:3e:76:d6:26:c2:56:15:13:f8:8c:12:c3:00:7c:af:
         0b:87:eb:ce:e9:06:c0:f9:96:21:48:34:b5:c6:4b:7e:fb:31:
         60:aa:3d:78:61:92:bd:d4:42:6d:8a:4a:14:3e:ac:73:1b:9d:
         8d:4f:65:a8:a0:d6:be:03:d6:85:6d:8a:cc:e4:0b:9c:cb:97:
         f7:14:4c:f2:df:c9:3a:be:36:f3:41:1c:af:20:72:43:a5:9d:
         01:d5:c4:27:f4:e7:b4:87:d9:ee:07:1c:46:26:d1:e3:f9:21:
         ad:9e:92:16:1f:e4:01:16:9f:93:88:50:9c:08:f5:9d:31:f4:
         28:b7:70:24:94:e6:9f:6b:d1:9c:4d:ac:72:6f:25:fb:20:4b:
         62:97:38:1e:5e:48:33:91:71:b7:49:3b:bb:13:91:71:84:cf:
         64:5b:94:22:32:af:76:a7:71:d6:79:6a:25:b5:79:07:49:3b:
         f2:9e:43:96:ae:d3:d8:be:07:84:4f:b2:6c:b2:33:f2:4d:96:
         18:17:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----