Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6xXf4zzYEOGapJXjcZ_KNgCPN2I.roa
File:                     6xXf4zzYEOGapJXjcZ_KNgCPN2I.roa (raw, json)
Hash identifier:          elTypN4ddhXoxy1Vc7zLdP0gvamid1B2AChbjYhVBLY=
Subject key identifier:   EB:15:DF:E3:3C:D8:10:E1:9A:A4:95:E3:71:9F:CA:36:00:8F:37:62
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01862B6B2E0BED22B3E69F8992FFED7265BA
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6xXf4zzYEOGapJXjcZ_KNgCPN2I.roa
Signing time:             Tue 07 Feb 2023 10:28:09 +0000
ROA not before:           Tue 07 Feb 2023 10:28:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206092
IP address blocks:        45.131.194.0/24 maxlen: 24
                          2a0e:d781::/32 maxlen: 32
                          2a0e:d783::/32 maxlen: 32
                          2a0e:d782::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2b:6b:2e:0b:ed:22:b3:e6:9f:89:92:ff:ed:72:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Feb  7 10:28:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb15dfe33cd810e19aa495e3719fca36008f3762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:cc:67:09:26:a3:97:8c:63:f2:4d:6b:25:
                    c2:a9:de:07:5b:cb:d5:43:bc:2b:a6:4b:ab:de:19:
                    94:df:10:a1:b3:54:f2:12:ae:d5:39:11:86:5b:8c:
                    93:49:80:15:23:17:42:a3:ef:58:37:d0:46:09:70:
                    a5:03:28:4c:67:1a:4e:dd:cc:05:3b:20:a9:1d:f4:
                    68:ac:5a:d1:e9:24:0a:82:dc:01:31:8c:48:91:71:
                    46:fa:b6:18:44:07:43:fd:1b:cd:c0:cb:dd:a5:35:
                    39:1a:b3:5e:d7:8c:42:e3:bb:b8:2b:c4:ec:47:c2:
                    a8:f2:12:5f:b5:f4:f1:41:af:a1:87:69:18:b1:a5:
                    19:23:3c:d0:2b:3a:67:72:0b:6d:f9:c6:c5:df:3c:
                    3b:97:ce:bd:a4:d8:08:33:0c:53:48:19:fd:7f:41:
                    fb:cb:fc:55:e5:d7:be:d8:65:f9:52:bd:c5:96:13:
                    53:52:70:e4:18:27:f7:22:c3:34:0b:97:20:27:c0:
                    99:3d:f3:bd:0e:15:4e:2a:4b:00:51:33:57:97:7a:
                    33:03:49:c9:f8:9b:46:68:64:37:b3:eb:63:c6:42:
                    ee:bc:cc:10:4d:ce:c4:9c:2c:ca:40:aa:e1:58:1c:
                    02:9b:a2:18:dc:79:35:90:0d:a8:f5:8b:01:8d:8a:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:DF:E3:3C:D8:10:E1:9A:A4:95:E3:71:9F:CA:36:00:8F:37:62
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/6xXf4zzYEOGapJXjcZ_KNgCPN2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.194.0/24
                IPv6:
                  2a0e:d781::-2a0e:d783:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         10:64:6d:57:59:c7:7d:6a:59:dc:4a:fe:b8:c2:09:37:8d:de:
         47:d2:82:68:7b:e1:0e:80:6d:4a:0b:de:fa:09:11:ae:67:04:
         4e:fb:20:6b:8b:74:c5:fa:a1:60:76:09:3f:18:ef:94:46:0c:
         06:a8:7d:cf:6b:56:1c:30:4e:af:6f:14:73:ef:97:01:dd:d8:
         32:af:31:6c:e2:fd:d6:9a:9a:7e:65:9f:04:9b:22:a7:50:53:
         b0:22:7d:45:b5:b1:48:98:73:de:4d:ca:21:d9:25:b3:cf:b4:
         b8:f5:24:b7:76:bc:c6:c5:87:bd:21:46:c2:f4:36:28:02:a3:
         bc:73:4f:0a:6d:37:88:b4:89:a3:14:f6:7f:fc:9f:ff:6f:14:
         d5:56:f8:ef:2d:96:4e:b6:d7:90:fb:66:e3:d9:e8:5a:14:d0:
         c1:19:ef:49:84:9b:06:f1:bf:18:ac:1c:66:45:11:bf:a3:7e:
         3e:96:e6:7e:cd:e8:31:76:09:47:7d:5e:ad:f6:be:64:11:df:
         64:bd:86:d6:d9:9a:79:95:72:0d:84:00:4b:37:21:1d:de:ae:
         f6:16:bf:0c:df:24:3d:1a:22:05:e0:9f:70:b5:bd:8d:68:e3:
         be:2b:db:3b:37:86:f3:3a:df:28:32:8c:b8:13:4c:4b:3a:e5:
         db:c1:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----