Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/kjLBmh7Md1z3RHJtxPdOkDnALg4.roa
File:                     kjLBmh7Md1z3RHJtxPdOkDnALg4.roa (raw, json)
Hash identifier:          5Zb9Sb9Cj2E/SlzI4jdB7iegt7YibE+IjHQOvCEWYGM=
Subject key identifier:   92:32:C1:9A:1E:CC:77:5C:F7:44:72:6D:C4:F7:4E:90:39:C0:2E:0E
Certificate issuer:       /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial:       018B4731BB2B9D75F0A6F3A6F667D02D7FD1
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/kjLBmh7Md1z3RHJtxPdOkDnALg4.roa
Signing time:             Thu 19 Oct 2023 09:08:43 +0000
ROA not before:           Thu 19 Oct 2023 09:08:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60456
IP address blocks:        45.81.204.0/22 maxlen: 22
                          2a0e:5f80::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:47:31:bb:2b:9d:75:f0:a6:f3:a6:f6:67:d0:2d:7f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
        Validity
            Not Before: Oct 19 09:08:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9232c19a1ecc775cf744726dc4f74e9039c02e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:68:47:a5:47:99:4b:bb:62:4c:55:a7:a9:
                    a1:4a:0d:c7:2f:95:de:92:64:a3:24:55:a2:1a:05:
                    5c:a0:a5:26:75:0a:b3:f5:68:ac:1f:f9:59:c1:1c:
                    5d:13:22:03:3b:d7:d5:40:41:4e:a1:59:b2:31:f5:
                    45:5a:c8:5f:ee:fc:c0:f0:bb:52:24:e6:bf:87:06:
                    e0:9d:e3:74:02:d4:d5:e7:46:66:31:d9:13:25:e1:
                    43:91:13:4e:69:06:9e:8b:6e:f0:7f:8d:e1:1d:83:
                    0f:3d:eb:0e:85:a4:21:fa:86:d1:e6:72:b0:07:cf:
                    77:27:23:b9:a4:b9:d5:f8:e1:a5:54:a3:ef:ab:4a:
                    73:32:3d:64:fb:e3:f5:6d:ca:95:72:27:73:5d:63:
                    e4:eb:01:b9:99:2a:3c:b2:2a:32:93:b4:e2:e5:77:
                    88:6d:3c:5b:20:26:9c:24:90:97:ac:30:67:ef:32:
                    ef:54:f9:91:ff:9f:01:74:16:6d:7c:60:07:9b:c8:
                    b3:7e:f3:7c:90:30:5b:d0:f5:0f:37:e2:78:4f:97:
                    df:1d:a1:df:33:f7:a8:62:d5:f8:40:36:26:10:5d:
                    88:b3:31:d3:03:5c:b4:7e:1a:c2:da:37:dc:38:07:
                    9e:ba:32:47:3b:44:68:5a:dd:38:c3:f2:f2:5c:0d:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:32:C1:9A:1E:CC:77:5C:F7:44:72:6D:C4:F7:4E:90:39:C0:2E:0E
            X509v3 Authority Key Identifier:
                keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/kjLBmh7Md1z3RHJtxPdOkDnALg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.204.0/22
                IPv6:
                  2a0e:5f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         c4:a9:0c:30:82:9e:34:6d:63:26:a6:2d:66:54:19:f0:a2:76:
         75:0d:0e:69:3b:82:e0:4d:37:1c:3d:84:70:c2:b2:6d:74:2a:
         21:2f:3a:2e:1a:5a:f2:f1:a0:cb:f1:be:65:dc:45:2f:46:a4:
         99:25:d2:59:92:99:99:38:c8:ce:03:cc:02:1f:64:d8:44:c9:
         52:5f:c5:31:30:a5:45:dc:7a:df:c3:79:7a:bd:b4:1c:94:3f:
         0b:76:aa:80:23:d5:43:0b:98:ad:33:95:64:70:e7:bd:69:db:
         a4:6b:23:24:6b:64:96:f1:0b:ca:40:75:fd:f4:55:5e:f1:9b:
         cd:9c:d6:1e:dc:de:09:e2:f4:7b:dc:b6:42:c1:56:31:2c:17:
         73:7b:44:b8:4d:87:2a:05:87:24:1b:74:7c:bd:8a:57:1c:59:
         a4:27:2a:ff:a2:80:68:80:10:d7:dd:b3:fd:ce:51:6e:8a:c1:
         8e:cb:85:12:eb:9a:7c:1a:d1:dd:07:1e:21:a3:ad:2e:a6:47:
         4a:a1:14:76:90:cd:66:d2:b3:ec:89:36:2e:fb:92:23:6f:25:
         cc:7e:b3:f6:fe:fe:bb:5f:53:75:9f:61:68:81:8d:ee:30:db:
         e8:0d:12:c8:28:08:6b:75:8f:ae:e7:a3:b8:26:5a:51:7b:a1:
         6d:8b:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----