Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/Guh_lxezaQJLi6xVQVpkCliRS6U.roa
File:                     Guh_lxezaQJLi6xVQVpkCliRS6U.roa (raw, json)
Hash identifier:          OGETxG7/RIV91siA+i9IR3vv517F2+1mjqQz1CbBJS4=
Subject key identifier:   1A:E8:7F:97:17:B3:69:02:4B:8B:AC:55:41:5A:64:0A:58:91:4B:A5
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       018B94562734937BA1F2A9F19DD7F88B0F6E
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/Guh_lxezaQJLi6xVQVpkCliRS6U.roa
Signing time:             Fri 03 Nov 2023 08:39:15 +0000
ROA not before:           Fri 03 Nov 2023 08:39:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        45.12.200.0/22 maxlen: 24
                          2a0e:bf00::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:56:27:34:93:7b:a1:f2:a9:f1:9d:d7:f8:8b:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Nov  3 08:39:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ae87f9717b369024b8bac55415a640a58914ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:67:bc:50:4e:82:69:85:00:a8:c7:c3:1d:
                    f6:70:bd:03:ab:b5:b8:2d:b2:c2:75:7c:a3:79:95:
                    e6:e7:9a:20:85:2d:14:c6:3f:ec:0f:d4:6d:78:cd:
                    fe:30:c1:ce:6c:76:a6:e5:34:e4:0c:14:a6:45:34:
                    4a:01:67:86:af:70:2b:f6:20:bc:e2:4e:31:ef:9f:
                    7a:3a:55:6b:34:27:a3:d1:b6:97:51:80:ff:f4:57:
                    97:23:13:59:7b:1c:f2:61:4d:e5:2e:76:40:dd:8e:
                    57:6b:9b:f3:92:3b:60:55:6c:d1:bf:28:fa:93:b1:
                    07:4e:2e:e1:a6:56:97:02:14:85:76:f4:97:d8:79:
                    c5:5d:25:3a:ba:74:23:1a:e9:ed:6d:9e:e7:5e:17:
                    29:cf:4b:b0:b3:8c:44:3c:f4:9e:6b:73:9e:c9:dc:
                    da:be:4e:1e:a5:98:52:f4:ef:43:e1:5e:d2:ff:e0:
                    c0:69:cf:47:2c:7b:d6:f3:48:07:ad:5d:c6:cf:7a:
                    34:bf:22:69:19:ef:74:c3:6c:3b:43:78:62:df:e7:
                    4f:a2:61:7d:81:bf:3b:8d:66:64:81:6d:54:19:08:
                    88:b2:28:6d:7b:ed:da:27:3d:c6:f8:31:c2:ba:b5:
                    88:3e:f6:e8:fc:3f:2c:e2:76:0b:b5:10:e6:40:5e:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E8:7F:97:17:B3:69:02:4B:8B:AC:55:41:5A:64:0A:58:91:4B:A5
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/Guh_lxezaQJLi6xVQVpkCliRS6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.200.0/22
                IPv6:
                  2a0e:bf00::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:9e:dd:b7:df:5e:e6:aa:1c:a4:75:2c:01:85:36:13:c5:f8:
         89:a7:fc:fd:99:0d:9f:85:99:70:27:8e:66:44:e3:bf:bf:1b:
         91:a1:df:97:f8:81:a7:79:0d:28:30:7a:91:18:bc:60:22:81:
         7b:c6:ea:81:6d:60:8d:54:cc:a7:40:eb:2d:8b:74:a9:d2:ef:
         9a:68:72:e8:72:9b:04:6d:74:0e:8c:17:8a:31:c4:87:b0:44:
         b5:08:1a:b5:83:ac:f7:43:28:2c:fc:56:28:a3:ca:ca:48:c7:
         4f:a7:ce:05:a1:d9:bf:0e:e7:42:8c:34:fc:eb:43:41:52:98:
         1e:28:ee:a8:c0:0f:3b:0c:7e:c0:4b:d5:4b:60:40:f1:fe:a0:
         97:1f:f6:eb:a5:99:5e:f6:70:91:78:82:34:99:ac:9b:87:95:
         32:8c:9f:b0:02:6f:64:0d:40:4f:a4:80:6f:a1:07:12:5c:6d:
         1f:2d:04:c2:ec:74:c4:d2:fe:cf:d0:64:44:63:e4:7b:85:50:
         df:4e:a7:9d:32:29:d9:93:bd:6a:19:61:6e:9d:c9:90:d2:84:
         35:98:90:23:b3:d1:91:87:bb:d8:9c:3c:e7:8c:5e:19:20:1e:
         e0:4e:b0:f0:52:b8:4a:6f:28:ae:20:68:93:c8:b9:a2:5f:ed:
         57:81:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----