Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/MYgycORAmZ7s2lYLKO2YmyeUCzw.roa
File:                     MYgycORAmZ7s2lYLKO2YmyeUCzw.roa (raw, json)
Hash identifier:          LdlHYv27MFHDGHlrhefaXTTSolR0U7HbAXqDkMBzdUA=
Subject key identifier:   31:88:32:70:E4:40:99:9E:EC:DA:56:0B:28:ED:98:9B:27:94:0B:3C
Certificate issuer:       /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial:       0187749EAC078E413F2783B3A0D2EF95DC00
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/MYgycORAmZ7s2lYLKO2YmyeUCzw.roa
Signing time:             Wed 12 Apr 2023 08:39:28 +0000
ROA not before:           Wed 12 Apr 2023 08:39:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        45.145.122.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:9e:ac:07:8e:41:3f:27:83:b3:a0:d2:ef:95:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
        Validity
            Not Before: Apr 12 08:39:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31883270e440999eecda560b28ed989b27940b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:f1:b2:c7:1d:9c:25:84:3c:b8:37:51:d5:
                    90:f3:a6:2d:fb:c4:a5:5b:06:4a:de:4c:d8:3b:f2:
                    98:cf:ee:51:fa:b4:d0:0a:cd:30:81:ac:85:a5:61:
                    fa:46:8d:d1:1a:31:b6:d8:1b:ff:d8:11:fd:4b:af:
                    dc:a6:cd:3c:6e:43:71:78:c3:21:8c:3f:57:6d:9b:
                    92:fe:e4:70:b1:95:ff:8d:c8:e9:1f:2f:50:15:dc:
                    c5:a8:fb:57:44:8b:6f:e6:07:7b:53:5b:dc:ba:bc:
                    85:a7:df:fa:52:b1:12:76:2b:8a:28:0a:23:ee:56:
                    85:65:05:5f:ae:0b:0f:37:67:c2:b9:35:ba:09:24:
                    5b:ae:49:37:64:2a:94:7a:64:6b:62:fd:76:54:90:
                    33:10:ad:ec:16:72:47:fb:d1:22:70:e7:eb:f4:b6:
                    be:9c:13:44:0f:5c:3a:48:56:97:e0:d1:0b:e1:f6:
                    4c:0b:ed:36:19:70:08:bc:52:f2:2e:c6:17:e2:50:
                    e3:5b:8f:85:da:0c:33:92:1e:15:8a:b3:dc:d3:2b:
                    e2:ec:22:ab:21:62:05:b1:2b:e0:6b:cd:2e:c3:38:
                    87:02:16:78:6f:dd:e5:8d:36:c0:2a:6c:d7:e0:84:
                    d0:71:80:17:ef:12:55:80:a8:98:da:24:01:5f:03:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:32:70:E4:40:99:9E:EC:DA:56:0B:28:ED:98:9B:27:94:0B:3C
            X509v3 Authority Key Identifier:
                keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/MYgycORAmZ7s2lYLKO2YmyeUCzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:31:b0:e1:13:81:f4:01:4e:3a:ec:53:37:52:0b:b6:30:7e:
         7e:de:bc:31:ff:5b:9b:a4:91:d4:67:d8:bb:4e:3b:f1:6f:76:
         4b:4c:80:e3:96:54:c0:db:ed:d1:d9:a0:64:db:a8:df:75:cf:
         9d:fa:f4:ac:7a:cf:4c:4c:b9:ee:79:fd:83:98:76:a5:1f:4b:
         68:81:2e:3a:7c:b5:ec:1c:3e:1e:60:e7:29:b6:0a:1d:2f:cf:
         c7:3c:1b:68:31:f3:ae:ab:9c:5f:09:29:d5:5b:91:56:2e:09:
         2e:fd:49:b4:d0:4c:33:ea:0d:ce:7c:40:76:8b:4c:e2:6c:fc:
         38:ef:14:7e:64:26:c4:bb:40:34:75:fa:5d:c3:59:62:b4:ae:
         c2:e4:b8:fb:e7:e0:b6:5a:bc:ce:02:a9:2e:87:eb:b9:a7:03:
         d8:3d:d1:b0:41:e3:2a:da:30:98:75:21:48:48:dd:3b:6e:4b:
         cf:d0:39:bc:33:10:93:d6:47:9c:3e:d8:ec:84:e1:b4:95:65:
         21:a8:70:53:eb:9c:de:f5:da:77:89:1a:2f:1e:36:56:b7:8b:
         e6:a6:35:6b:bb:e4:7e:34:2c:9f:34:25:52:d6:6c:cb:82:61:
         eb:87:74:23:b2:c7:74:9c:3c:70:40:89:12:e7:4f:7d:b0:41:
         59:cd:3b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----