Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Re5DvAk8AmKzjwhCBnqJVW7N2rQ.roa
File:                     Re5DvAk8AmKzjwhCBnqJVW7N2rQ.roa (raw, json)
Hash identifier:          wOUPw8oT3Wj2l8IDRHuaEvLaNu7I9Uai5+jYzfjBjio=
Subject key identifier:   45:EE:43:BC:09:3C:02:62:B3:8F:08:42:06:7A:89:55:6E:CD:DA:B4
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       0185730392386D78ACF547182B5901AD2A9A
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Re5DvAk8AmKzjwhCBnqJVW7N2rQ.roa
Signing time:             Mon 02 Jan 2023 15:04:51 +0000
ROA not before:           Mon 02 Jan 2023 15:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        109.105.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:03:92:38:6d:78:ac:f5:47:18:2b:59:01:ad:2a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jan  2 15:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=45ee43bc093c0262b38f0842067a89556ecddab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:d5:4d:4d:9a:7c:6a:87:25:ea:1f:5f:84:
                    9b:a8:06:96:e9:63:97:a5:f2:88:80:f8:80:7f:3a:
                    81:62:b3:5b:2a:7a:61:f2:21:24:bf:c2:44:00:c0:
                    12:60:f0:47:a7:8b:2f:a6:37:d2:8c:63:7f:69:b4:
                    37:61:de:2b:28:4c:4e:94:ea:ad:55:41:75:17:7e:
                    14:41:62:46:5a:25:9d:34:a3:c8:ca:79:34:05:22:
                    c1:11:be:f7:4b:ba:ae:56:7a:47:a5:02:ae:d9:a7:
                    f8:d2:7b:48:30:5f:db:55:18:1e:10:dc:35:b0:09:
                    9e:69:33:ff:92:3f:78:b0:33:c7:db:a7:c8:db:b8:
                    5c:4a:1e:9e:74:61:d0:71:f4:c9:13:73:f0:4e:33:
                    4d:d1:6b:8a:02:73:ac:73:5d:29:88:6c:f2:ee:54:
                    e7:1d:de:3e:f9:ea:3f:34:5c:ed:ea:5f:ae:35:af:
                    df:89:8f:99:50:e0:39:55:03:81:a7:a0:f4:8b:67:
                    60:90:9c:cf:2f:5c:f3:d7:5f:9d:90:92:4b:a9:cc:
                    ca:5d:4b:82:12:b4:5d:ca:e3:10:e8:26:6b:9c:59:
                    7a:43:81:1b:33:bc:4b:22:33:52:7c:56:73:e5:93:
                    c7:10:0f:c9:1f:3f:f6:e1:fb:92:bf:8b:78:3a:28:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:43:BC:09:3C:02:62:B3:8F:08:42:06:7A:89:55:6E:CD:DA:B4
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Re5DvAk8AmKzjwhCBnqJVW7N2rQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.105.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:4c:f0:e5:92:ac:3a:d2:8f:f7:50:ab:de:8e:3e:76:85:
         14:c6:ed:0e:27:9f:d9:cc:37:2c:6a:0f:80:14:c0:64:e3:56:
         34:13:93:0a:f5:f2:59:8c:a8:95:7b:1e:b2:05:bd:6c:5c:5b:
         df:2b:fe:6d:94:b1:48:82:4f:3c:06:44:4e:70:51:e2:60:81:
         2c:4f:88:b4:33:51:20:24:b0:c1:0a:78:b8:fc:70:96:17:66:
         99:08:ee:d5:b9:95:5c:90:83:81:e2:2a:5d:5f:43:ba:e0:f2:
         f3:2e:3d:93:07:5d:de:2c:db:7a:13:df:a4:f2:3d:c4:8c:b9:
         6d:57:82:48:3b:33:92:50:12:63:e3:fd:ea:5c:35:99:63:e5:
         ac:45:76:7d:07:a6:49:66:fe:e1:23:c3:a6:94:51:03:d3:47:
         bb:e5:71:75:ad:4f:80:29:4c:e7:7d:2e:20:7c:62:47:f6:aa:
         5c:db:22:b9:9c:a1:70:58:f1:20:9e:b8:29:f1:21:b9:d7:09:
         e3:e9:4d:14:cd:26:ac:3c:37:78:4a:fc:df:9f:1b:f5:c1:cd:
         99:49:b3:b1:23:74:63:83:0d:ca:70:cc:e7:fe:a2:7d:8a:6f:
         f6:70:7d:9c:a7:74:b9:73:79:d0:07:7b:7e:59:35:51:90:7a:
         18:d3:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----