Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa
File:                     p-J1ihlV5rmJs54eRMoOeqFPyzE.roa (raw, json)
Hash identifier:          eqjmgiAYJc/zDTAeFxgGuBDfT2YhrPWOIqiSgLUPRCE=
Subject key identifier:   A7:E2:75:8A:19:55:E6:B9:89:B3:9E:1E:44:CA:0E:7A:A1:4F:CB:31
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       018931C8318B4A6A90BCF09F10D681F1DF11
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa
Signing time:             Fri 07 Jul 2023 19:15:50 +0000
ROA not before:           Fri 07 Jul 2023 19:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.66.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:31:c8:31:8b:4a:6a:90:bc:f0:9f:10:d6:81:f1:df:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Jul  7 19:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7e2758a1955e6b989b39e1e44ca0e7aa14fcb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:08:8b:66:da:31:5e:c5:40:ef:0e:2e:14:
                    52:41:44:91:e5:dc:d9:cf:f9:a2:e6:4d:9b:54:ea:
                    a9:c0:27:5b:c2:65:20:0b:c9:7f:43:fc:03:1c:92:
                    7c:3e:a6:01:95:df:4d:1a:5e:9f:42:0b:b7:cc:ec:
                    18:3f:17:22:f3:a8:fb:df:9a:81:7f:56:52:6d:5a:
                    fb:26:cc:57:08:9a:16:be:6c:d5:bf:d1:92:b8:f5:
                    0f:b9:8d:9a:ef:da:e8:09:6a:b0:b7:a9:31:28:06:
                    be:0e:0b:e0:e8:e4:f6:b6:c8:ee:11:3d:5f:c0:6b:
                    fe:73:50:77:e2:a2:f2:94:21:cd:c8:06:fb:ef:6c:
                    56:a8:0b:8e:e0:a0:97:3f:94:da:da:80:ae:2b:99:
                    3a:b2:7e:4a:49:76:38:16:0f:8d:41:ea:f5:3c:76:
                    fc:d9:44:35:0c:79:8a:3e:6a:a4:63:98:15:20:6e:
                    cf:1f:5e:d0:89:5b:57:98:f0:64:09:4b:f8:84:40:
                    1e:7a:d0:82:36:29:96:e2:43:50:85:9f:d2:f2:d5:
                    75:04:af:6a:1d:ba:91:42:01:f9:8e:c4:85:71:3f:
                    fc:9b:d8:72:38:1a:e7:0e:3e:99:e1:5a:1a:15:ce:
                    9b:50:30:ba:b7:5f:45:06:e3:a6:f0:d1:0a:33:7c:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:75:8A:19:55:E6:B9:89:B3:9E:1E:44:CA:0E:7A:A1:4F:CB:31
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:84:e1:7e:89:d1:d8:dc:0f:e5:a0:5c:4b:d6:44:39:67:
         e8:6d:0d:49:bf:d4:a5:c4:51:de:16:c0:e3:c5:6e:ef:ff:53:
         99:05:15:1f:86:a1:32:f5:0c:ba:2a:32:ec:09:53:68:ce:6a:
         51:86:99:79:c4:cc:6e:36:f7:61:54:ab:9c:71:ce:b3:cc:ea:
         df:3d:85:79:8f:04:1c:56:99:e7:d0:23:a3:c7:3f:22:f7:56:
         ac:2c:fe:8f:2e:08:e4:b4:9d:d7:e6:34:02:68:fc:54:4a:9e:
         fe:e8:83:8d:0c:14:cb:65:49:ef:dc:44:74:7c:1f:e0:3a:d5:
         81:2e:52:7e:34:17:62:cf:6b:d8:bb:28:3b:b5:78:d4:e4:d9:
         e2:1f:04:cf:02:eb:5c:b5:06:89:23:bf:ee:39:8b:d1:16:eb:
         a3:6a:b2:a4:e0:c0:7c:99:fd:6c:31:01:38:4c:7f:b8:59:07:
         df:6f:40:44:b6:2b:77:83:a5:8f:81:8a:b7:f2:f3:ac:7e:39:
         81:ec:c0:d2:9f:0c:86:9c:fc:15:16:dd:4d:62:21:fb:7a:f1:
         f4:f6:27:8c:af:c8:f1:aa:03:e1:5b:0b:3f:2a:1b:75:88:a8:
         0d:34:b2:b6:1c:59:d7:6f:e1:07:51:4a:3a:a9:ea:09:d7:85:
         a0:59:ab:ce
-----BEGIN CERTIFICATE-----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