Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/1lcrylbSEf_oXTBQXxVOW4ck4lo.roa
File:                     1lcrylbSEf_oXTBQXxVOW4ck4lo.roa (raw, json)
Hash identifier:          y76zoR0oyv5NYZonqYATf+sN6DLvGm8iRjjtLszPR5A=
Subject key identifier:   D6:57:2B:CA:56:D2:11:FF:E8:5D:30:50:5F:15:4E:5B:87:24:E2:5A
Certificate issuer:       /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial:       01856F26CA137FBA7A48AF5278795AE43113
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/1lcrylbSEf_oXTBQXxVOW4ck4lo.roa
Signing time:             Sun 01 Jan 2023 21:04:51 +0000
ROA not before:           Sun 01 Jan 2023 21:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212196
IP address blocks:        87.239.176.0/21 maxlen: 24
                          2001:67c:2b28::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:26:ca:13:7f:ba:7a:48:af:52:78:79:5a:e4:31:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
        Validity
            Not Before: Jan  1 21:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6572bca56d211ffe85d30505f154e5b8724e25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:3c:95:23:e3:69:db:f6:00:a4:31:5a:23:
                    f2:1c:ed:0b:cf:6d:dc:ee:b4:c1:ac:d9:63:d2:36:
                    29:cd:88:fa:e5:82:be:a9:38:1f:7c:b7:75:33:6e:
                    68:5a:40:21:cc:9f:e7:fb:51:39:c1:1e:7b:c6:e9:
                    29:83:e7:2a:c4:92:17:50:94:56:3e:1c:ee:f5:39:
                    66:27:23:68:9b:cc:4a:b6:9c:1d:84:2e:b9:20:9e:
                    82:2e:4a:00:07:f4:60:44:b8:c4:d1:24:3a:22:a7:
                    01:4d:4c:b5:73:28:b9:d5:4e:28:f8:61:23:00:3b:
                    23:12:6f:a6:c3:86:2a:76:1a:26:4f:42:74:75:cd:
                    43:fd:ac:25:94:82:17:c5:e1:3a:01:58:20:a2:1c:
                    54:1a:04:37:a1:4b:48:61:39:cd:e5:da:b3:a7:46:
                    0f:80:a1:ff:ce:57:6a:9d:68:e2:bb:55:51:e5:4e:
                    4d:83:3c:d3:20:8e:f7:d0:8f:6b:3f:c4:1d:78:2d:
                    0c:bc:f6:a4:9c:e6:d5:2c:7e:46:01:3b:52:f1:9d:
                    c8:e5:c8:43:b9:3e:a8:af:46:b3:c9:98:dd:69:54:
                    89:5f:e2:a8:41:cd:e1:aa:39:72:4b:b7:ef:5f:31:
                    dc:ba:c4:44:b9:c5:61:46:c8:c6:38:22:8a:6c:69:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:2B:CA:56:D2:11:FF:E8:5D:30:50:5F:15:4E:5B:87:24:E2:5A
            X509v3 Authority Key Identifier:
                keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/1lcrylbSEf_oXTBQXxVOW4ck4lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.239.176.0/21
                IPv6:
                  2001:67c:2b28::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:53:5a:cd:8a:37:bf:ed:39:2c:c5:c1:93:2b:1e:5f:29:
         d2:fe:61:10:6d:3d:60:01:29:bb:6e:ad:01:89:13:89:d2:96:
         d6:ba:bf:58:3f:0b:cd:34:2a:4a:3e:64:c2:c1:00:37:70:03:
         2a:5a:91:11:d9:41:e4:a8:5e:0e:2a:33:bb:62:88:99:5e:fd:
         da:04:a0:15:9f:8c:27:d3:70:80:a4:ea:a8:20:b3:64:a0:e9:
         7e:8b:27:f1:2b:cc:4f:8e:fc:3d:02:0c:a6:90:7e:04:71:c0:
         ca:41:9f:95:2a:df:fc:04:ff:cc:6c:0e:e9:92:68:90:63:da:
         d5:de:5a:d2:51:9c:da:41:9b:42:dd:d9:d6:e1:f3:5c:6c:1d:
         b1:0f:4e:b5:f0:20:dc:7d:d2:3a:71:5c:1c:0d:6e:0b:4a:9a:
         bb:52:4c:35:83:ed:4b:fc:47:e5:8f:49:eb:79:28:4d:77:36:
         e3:de:a7:d4:d4:d5:3b:4f:5f:e0:e9:1e:0a:e3:62:2a:75:52:
         2a:99:b3:10:ae:c6:78:e3:ec:14:16:89:03:1e:8e:ec:3e:29:
         b6:fb:ad:e4:68:48:b2:6f:d6:f9:82:aa:ae:e3:59:4d:d4:b7:
         75:2d:57:7c:7a:5a:12:5a:55:b4:f1:6a:d2:27:f0:a8:8d:a0:
         22:c4:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----