Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa
File:                     GcKfucNUUVz-7vyixtAh-QuGRfI.roa (raw, json)
Hash identifier:          v8Sc+jly3u765ZdMrsvYMkW3uHhat3p13GoGqDpMyrI=
Subject key identifier:   19:C2:9F:B9:C3:54:51:5C:FE:EE:FC:A2:C6:D0:21:F9:0B:86:45:F2
Certificate issuer:       /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial:       0187B7FCA7FE1D74C74A0357D1025B55CE20
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa
Signing time:             Tue 25 Apr 2023 10:36:41 +0000
ROA not before:           Tue 25 Apr 2023 10:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.145.120.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:fc:a7:fe:1d:74:c7:4a:03:57:d1:02:5b:55:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
        Validity
            Not Before: Apr 25 10:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19c29fb9c354515cfeeefca2c6d021f90b8645f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:63:32:9a:4c:19:6d:94:65:c5:42:af:68:
                    91:d7:7c:35:cc:82:95:42:14:f8:2d:57:55:22:61:
                    9b:d7:4f:bc:5d:79:3a:d3:d8:50:45:b3:d3:d0:74:
                    7a:d3:07:16:e9:10:ef:bb:ae:9d:88:fb:1c:8b:39:
                    84:5f:29:ff:51:64:3a:80:1a:fd:df:53:1b:fd:56:
                    4c:2c:bd:99:e3:92:74:b4:c5:21:7d:30:ff:06:37:
                    45:9e:c6:2b:bc:13:91:e9:74:af:35:27:1b:82:56:
                    10:ed:89:b9:4b:78:b0:95:68:ea:76:15:c6:91:71:
                    26:24:8e:ec:b1:d2:d2:14:03:51:3f:fd:9f:9f:d7:
                    f0:8a:6a:88:e0:21:95:b1:2f:ed:29:a2:88:78:62:
                    e6:9a:b7:87:bc:ab:80:1e:b4:37:c4:93:e9:2e:95:
                    8c:83:ec:a2:d2:6b:d6:5c:71:f3:db:f8:c5:c1:be:
                    0f:26:5c:eb:41:71:18:41:a7:66:11:f9:95:18:27:
                    c0:9b:32:57:88:ad:87:00:f4:99:9e:40:96:7f:49:
                    fa:6f:af:17:61:35:63:af:03:5c:f5:d5:8d:2a:c1:
                    f4:13:1e:0f:58:37:64:51:af:b0:f2:93:bd:4e:07:
                    ab:fd:7e:fa:91:9e:13:42:27:55:91:3b:c3:65:8f:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C2:9F:B9:C3:54:51:5C:FE:EE:FC:A2:C6:D0:21:F9:0B:86:45:F2
            X509v3 Authority Key Identifier:
                keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/GcKfucNUUVz-7vyixtAh-QuGRfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:85:9f:c7:37:fd:7e:77:a6:0b:34:45:e1:da:80:ae:2f:
         7f:b6:47:42:cc:5e:3d:6b:29:9e:f9:42:1a:3a:82:ce:9c:45:
         d3:16:6b:28:e1:79:a9:5b:07:4b:dc:d4:7d:90:17:3b:a0:ca:
         37:77:6e:29:d8:7d:ed:1c:b7:d2:b9:60:af:c8:ae:d7:6f:5d:
         84:b7:e6:5b:8f:5b:4e:18:7b:9a:6f:fd:ba:b1:79:15:7a:5a:
         cb:fe:68:44:2b:08:a6:e1:a4:3f:b3:5e:8b:ee:ad:03:ff:03:
         35:23:95:60:fe:a5:f8:4d:79:14:94:cf:e5:0e:de:ed:f9:b1:
         5b:56:4c:5b:e0:27:07:66:5e:db:73:b7:13:69:91:0b:b8:12:
         5a:0b:8b:f8:21:49:4f:20:24:d5:0a:9f:c5:4a:78:6d:61:70:
         d3:5c:bd:64:42:21:86:87:24:33:f1:2f:4b:2e:a4:2e:17:ac:
         b1:8e:82:39:5c:c3:d5:45:96:82:af:15:c4:26:3c:62:e0:14:
         95:05:40:76:57:3e:15:69:85:03:7a:c5:70:df:1e:ff:93:1a:
         8d:8c:62:f1:e5:a9:33:4f:cb:18:94:9e:81:56:24:a7:66:3b:
         1d:99:a2:f4:78:31:d3:3d:98:06:45:a5:cf:d8:8d:52:3b:90:
         a1:e1:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----