Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa
File:                     RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa (raw, json)
Hash identifier:          PGru7iTEycZTPUwH/uO+jhY5pErxWP+fyGDhUDPQaMw=
Subject key identifier:   45:50:64:DA:58:C2:70:9E:F0:19:5D:15:BF:28:0D:95:A4:97:87:50
Certificate issuer:       /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial:       0185E33F56FA011BA862FE2F319234117886
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa
Signing time:             Tue 24 Jan 2023 10:07:37 +0000
ROA not before:           Tue 24 Jan 2023 10:07:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.145.120.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e3:3f:56:fa:01:1b:a8:62:fe:2f:31:92:34:11:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
        Validity
            Not Before: Jan 24 10:07:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=455064da58c2709ef0195d15bf280d95a4978750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:a0:24:9d:b6:86:b6:b9:c4:44:9b:99:6c:
                    78:65:c5:70:2c:a2:b2:16:b6:7f:65:98:17:22:ca:
                    1e:8e:2a:56:22:d7:d4:54:60:41:e6:8b:e3:a5:d2:
                    66:c0:f0:54:67:8e:35:b2:31:3f:0e:89:56:b2:d9:
                    4d:ac:61:9d:47:47:1b:b5:fb:73:9b:36:ff:45:60:
                    5e:ce:02:f0:90:ec:bd:b8:58:0a:7d:4b:fd:65:d1:
                    30:84:e4:c5:16:d9:45:40:ba:94:db:15:a1:52:97:
                    69:d1:b6:78:b1:70:78:c6:6b:3c:ce:5a:7a:fb:95:
                    eb:23:76:5f:61:f2:aa:d7:4c:89:bb:cd:a1:95:cb:
                    69:60:39:06:61:9d:f5:4f:44:67:49:cb:2b:a3:d4:
                    52:76:99:e3:2e:be:4f:f8:56:a3:7a:3b:f3:c2:63:
                    67:b6:94:e8:e1:75:52:d9:3e:53:d2:f4:ff:e4:58:
                    42:9e:fa:e7:a8:3f:49:85:7f:d2:b8:f6:c3:14:6b:
                    43:84:04:17:8f:e4:6d:90:dc:a0:ee:55:2e:61:e1:
                    f2:49:cb:c5:3a:b4:81:e9:56:97:58:a7:5a:79:2a:
                    58:f6:71:55:e6:c7:fd:f6:fd:f1:49:e0:a7:b4:de:
                    00:1f:0a:b9:59:dc:e3:7c:a7:17:9b:54:b4:45:29:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:64:DA:58:C2:70:9E:F0:19:5D:15:BF:28:0D:95:A4:97:87:50
            X509v3 Authority Key Identifier:
                keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/RVBk2ljCcJ7wGV0VvygNlaSXh1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:b0:5a:2d:61:c0:81:83:bb:32:e6:80:91:1b:64:19:63:
         a1:8f:6b:a5:37:de:35:03:2e:2e:ff:f8:36:72:61:7d:05:59:
         82:2f:7b:0a:77:e6:e3:f9:56:1a:9d:48:27:05:c9:dc:92:81:
         9b:71:d4:17:62:73:77:55:82:b4:5c:d7:9d:bd:f6:0b:15:e5:
         26:43:cb:16:f6:d0:36:7a:10:71:c2:c8:59:e1:27:bc:24:00:
         f2:34:26:8d:1e:c3:f0:62:3f:7b:c4:d9:fc:22:97:66:ff:9c:
         d3:83:a1:35:aa:ac:93:5c:06:c7:34:ac:39:14:06:ed:c1:96:
         3e:ff:4e:4d:1a:68:d6:dd:8d:d9:b0:24:5a:3f:77:74:c6:56:
         66:3d:7d:68:dc:e9:b9:d1:71:e9:58:06:bf:2f:cf:15:6c:40:
         27:b0:97:87:be:d9:62:b0:ff:48:67:4e:b9:1d:e3:82:8d:64:
         9d:12:3b:15:23:0f:24:91:8d:17:5e:79:eb:4d:ae:34:5d:23:
         06:b9:dd:ba:11:4d:64:89:5f:9f:52:63:f0:32:23:5a:be:c3:
         c6:b3:96:a6:d6:15:a2:83:2b:a5:1f:6b:d6:7e:e6:b2:11:81:
         17:b2:8e:82:c9:df:ae:9d:c6:18:28:6d:74:e9:81:71:62:94:
         23:1f:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----