Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SJX-lVi4qE_l-ijZd-485iSzSsM.roa
File:                     SJX-lVi4qE_l-ijZd-485iSzSsM.roa (raw, json)
Hash identifier:          fuVXDfdM0QaRjY+q28N2gqnDA3jHNEJfObWVLXAgT3I=
Subject key identifier:   48:95:FE:95:58:B8:A8:4F:E5:FA:28:D9:77:EE:3C:E6:24:B3:4A:C3
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       018AEF1E2B1925E5E4AB6D0D689BAFDB00D3
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SJX-lVi4qE_l-ijZd-485iSzSsM.roa
Signing time:             Mon 02 Oct 2023 06:40:46 +0000
ROA not before:           Mon 02 Oct 2023 06:40:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        45.145.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ef:1e:2b:19:25:e5:e4:ab:6d:0d:68:9b:af:db:00:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Oct  2 06:40:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4895fe9558b8a84fe5fa28d977ee3ce624b34ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:39:2f:d7:1d:50:97:5e:30:b2:ad:23:a3:
                    2e:aa:11:dd:50:d9:ee:4a:a3:50:57:76:ca:d1:60:
                    f2:1d:80:a3:75:e1:f7:1c:93:cf:70:d7:a6:22:e3:
                    e6:91:1d:1c:36:7a:9e:02:9c:b8:25:bf:5d:59:1d:
                    67:c8:e4:36:45:86:a1:2e:6b:65:07:7b:55:73:5b:
                    b7:62:7e:6e:1b:4e:14:d2:f3:1e:25:3a:19:21:a1:
                    17:b7:24:e6:ef:05:33:04:f6:ed:ee:47:e6:c8:a5:
                    47:1e:90:c2:3c:86:17:38:b6:e8:ed:88:1d:bd:d1:
                    d0:f9:dc:e5:a5:08:15:75:9e:6c:d2:ab:15:23:42:
                    ea:31:8b:7d:cf:99:84:54:74:fb:e6:e0:b9:93:ee:
                    6a:27:60:ed:3c:15:27:b5:46:45:28:cb:53:2e:31:
                    32:0f:22:15:e0:0d:4a:73:8c:c5:73:55:47:a4:a0:
                    25:0d:db:53:8d:a2:d5:c5:d6:2f:9e:6b:47:5b:ff:
                    0b:f0:cb:ca:67:2b:17:9b:28:f0:3f:5f:fa:a7:96:
                    c2:ec:5a:aa:43:9e:11:f9:05:54:61:c3:c2:80:5c:
                    01:2d:28:25:71:70:58:1f:67:83:ae:49:bf:68:4b:
                    36:8e:ef:ca:69:2e:aa:6e:7d:49:55:c2:d7:0e:6a:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:FE:95:58:B8:A8:4F:E5:FA:28:D9:77:EE:3C:E6:24:B3:4A:C3
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SJX-lVi4qE_l-ijZd-485iSzSsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:08:ee:23:84:7a:9a:75:9a:f4:d3:09:62:96:ac:f3:d2:98:
         7c:1e:ca:ab:f3:26:db:31:7e:cb:25:dc:10:1d:a9:8e:12:1f:
         12:98:5b:b9:5f:6a:06:fa:34:d6:1d:07:3f:08:d1:41:f0:d0:
         17:1f:bd:48:62:95:22:b2:5b:d3:90:14:65:54:63:32:87:a2:
         75:57:d3:05:ee:4c:47:53:13:26:d9:23:0f:54:8d:c2:e4:d6:
         06:46:36:47:09:11:80:78:d7:cc:7f:38:f4:3e:74:7a:7c:8e:
         af:22:6d:a1:fc:e4:7e:d8:c2:66:f4:b5:22:3b:c8:4e:c4:a9:
         a1:99:21:cd:88:08:27:fb:f9:d5:24:6f:7d:92:2f:4d:c8:df:
         9e:fe:c4:99:48:48:b9:c4:e4:c4:b9:2d:a3:e3:e1:92:58:e4:
         47:06:c0:24:6b:7e:df:5c:d5:f0:d2:a4:2b:79:aa:69:e3:cf:
         a1:74:57:fd:33:bc:df:81:99:a3:d5:c2:db:56:6e:7f:6e:7e:
         22:22:ac:d0:2d:a3:71:0a:92:1a:a7:ba:5f:13:7b:b2:88:67:
         e3:81:99:41:fb:51:87:97:e4:93:35:f2:d4:29:f0:3a:d8:a3:
         21:0e:3a:e4:96:b7:8c:c5:88:82:9d:c6:3c:7a:3c:c1:1f:1e:
         7c:2c:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----