Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8XkAXgy6t3NIbxF0Z7VFFe4KnMc.roa
File:                     8XkAXgy6t3NIbxF0Z7VFFe4KnMc.roa (raw, json)
Hash identifier:          AtK3LJVOj7xRaYerRTto1w4s97dixASofc/vZTcWfCA=
Subject key identifier:   F1:79:00:5E:0C:BA:B7:73:48:6F:11:74:67:B5:45:15:EE:0A:9C:C7
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       01889A504B9757408329C78888786A5753A1
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8XkAXgy6t3NIbxF0Z7VFFe4KnMc.roa
Signing time:             Thu 08 Jun 2023 09:22:13 +0000
ROA not before:           Thu 08 Jun 2023 09:22:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.151.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9a:50:4b:97:57:40:83:29:c7:88:88:78:6a:57:53:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Jun  8 09:22:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f179005e0cbab773486f117467b54515ee0a9cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:f5:54:f9:4f:e3:e6:4d:40:a2:d6:26:40:
                    ee:59:7e:10:e5:67:f6:3e:b9:3a:dc:84:2d:b5:1a:
                    d1:98:b9:bc:63:2a:7d:f7:16:0e:a8:b2:14:51:39:
                    46:c1:e4:89:eb:92:0a:92:7c:b7:57:40:08:8b:b8:
                    da:59:e1:0b:8a:b7:20:8d:df:95:2c:1d:2d:05:a1:
                    8e:fe:fe:27:49:84:28:0d:ff:a2:f1:1f:cf:8e:10:
                    b0:4e:35:e1:b8:26:90:6f:ab:29:2d:0d:27:15:6f:
                    8d:ce:61:61:3e:d3:ab:0c:91:3b:2c:e4:bd:17:d3:
                    c2:79:3c:e1:d0:e7:62:0d:6c:ea:5b:2c:5a:dd:95:
                    b1:ac:60:ba:d2:3b:64:db:58:3c:84:e5:77:98:05:
                    e0:71:be:ea:9e:e7:59:02:43:6b:36:1e:40:8d:49:
                    65:43:e5:65:80:d6:8f:72:4f:90:bc:a8:db:98:37:
                    2e:6a:fc:aa:b2:1e:30:dd:f2:86:4e:8f:6e:25:66:
                    13:bb:bc:90:16:e8:1f:dc:89:00:70:80:bc:da:db:
                    eb:ae:ec:59:f3:72:c7:77:97:f2:86:c6:d9:db:54:
                    94:ef:3d:47:f0:2c:7f:8b:5d:ba:36:75:f5:db:c5:
                    14:e2:68:8b:2b:d1:df:fc:5e:07:1f:7d:1f:fd:78:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:00:5E:0C:BA:B7:73:48:6F:11:74:67:B5:45:15:EE:0A:9C:C7
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8XkAXgy6t3NIbxF0Z7VFFe4KnMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:10:fc:b1:16:d1:02:79:03:a6:15:b4:5d:7b:99:38:39:
         bd:f1:c2:8c:e7:b4:07:60:b4:02:61:f0:00:d6:65:f0:be:09:
         6c:98:14:3b:d4:45:9c:05:0e:81:2d:be:90:20:b4:f4:e2:48:
         84:f0:b7:f9:b8:83:09:0d:1b:60:1e:dc:08:13:b2:0e:b0:04:
         75:83:8f:e7:30:68:0d:d5:a0:a4:82:d8:01:9b:72:22:97:b2:
         d6:04:01:c6:d1:3c:b4:06:26:43:e2:c3:87:33:fe:99:56:70:
         a6:e5:ab:df:6c:a6:c5:23:47:6c:b9:f7:3a:40:14:bd:70:54:
         68:21:12:9c:db:47:ac:b6:f3:7f:a0:82:32:d5:5a:8f:96:6d:
         25:93:be:de:f4:8c:1c:f7:c2:fc:f4:d8:77:c7:84:1d:69:04:
         a3:fd:08:d9:bd:61:11:33:a5:db:12:92:eb:f3:01:2b:b9:20:
         0e:56:cf:f9:4c:1b:5f:b8:8e:3d:86:76:53:1c:5d:07:60:73:
         34:83:69:b5:dd:da:b0:33:0b:46:a9:46:9f:b3:99:77:99:05:
         a3:b7:d2:b0:b2:54:15:77:1a:dd:b2:c4:db:c9:80:08:25:07:
         17:c0:13:c6:a8:28:5b:5c:cb:d6:11:f2:0d:73:cc:4f:8a:aa:
         8d:0d:32:2f
-----BEGIN CERTIFICATE-----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Generated at Tue Nov 7 20:27:20 2023 by rpki-client on console-ams.rpki-client.org