Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/o9S6NVOvSaPj2IC7vvddJbe_tFE.roa
File:                     o9S6NVOvSaPj2IC7vvddJbe_tFE.roa (raw, json)
Hash identifier:          5f52hf20/37PUMr1KpBIbAZBUfafabatabayIYTdHjM=
Subject key identifier:   A3:D4:BA:35:53:AF:49:A3:E3:D8:80:BB:BE:F7:5D:25:B7:BF:B4:51
Certificate issuer:       /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial:       0185704293047AA91BFE52E7DDA68391A0DA
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/o9S6NVOvSaPj2IC7vvddJbe_tFE.roa
Signing time:             Mon 02 Jan 2023 02:14:49 +0000
ROA not before:           Mon 02 Jan 2023 02:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211373
IP address blocks:        45.145.122.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:93:04:7a:a9:1b:fe:52:e7:dd:a6:83:91:a0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
        Validity
            Not Before: Jan  2 02:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3d4ba3553af49a3e3d880bbbef75d25b7bfb451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:e4:a6:87:cc:45:be:8c:9f:bd:68:78:66:
                    f6:31:c2:40:09:41:7c:e1:05:b9:ca:9c:b8:d6:4f:
                    14:aa:69:e6:0a:10:9b:c8:4c:3c:28:c1:a1:5b:da:
                    c2:70:c3:c9:b9:c1:ce:f2:aa:e4:f0:db:5b:a2:26:
                    dc:6f:5a:65:8c:5a:00:c4:f7:c5:68:2d:8b:16:ac:
                    cc:02:ce:b1:a8:1b:c7:8e:ee:ef:95:cb:44:8a:00:
                    ac:8a:17:3a:76:aa:dd:a7:cb:a4:63:54:6f:ac:e6:
                    f0:f0:11:90:8c:d0:9f:4c:71:54:c3:62:2f:2a:d6:
                    20:a6:4a:2f:80:bc:93:94:6d:29:33:bb:b1:88:80:
                    6d:4d:59:f1:7e:3e:fa:00:44:3a:69:11:fb:ef:55:
                    9c:18:7e:47:a3:82:67:6e:80:d0:04:fd:82:bb:ed:
                    86:01:24:9c:7e:68:62:67:ac:ef:a9:d6:ef:94:a4:
                    b9:22:5e:bb:38:b9:40:6e:d4:d2:c4:90:bd:f9:6c:
                    5d:7f:c1:c7:05:6f:c8:82:2e:e6:bd:b9:52:a7:b6:
                    e6:21:36:24:70:a8:da:2e:65:3c:31:fc:19:c2:61:
                    91:f3:9c:ef:08:43:ec:c7:d1:7d:7b:ef:29:9d:f1:
                    d6:a6:5e:e4:e6:d4:03:5a:0d:b2:a2:38:06:db:4e:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:BA:35:53:AF:49:A3:E3:D8:80:BB:BE:F7:5D:25:B7:BF:B4:51
            X509v3 Authority Key Identifier:
                keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/o9S6NVOvSaPj2IC7vvddJbe_tFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:19:e3:6f:7f:72:c7:83:97:04:68:ad:13:e5:30:e0:14:40:
         09:52:ff:67:51:41:4f:54:54:ea:45:8d:7b:71:bb:02:8d:14:
         e5:41:a5:68:eb:d5:08:cd:7c:bf:17:ff:02:59:8d:b9:fb:1f:
         89:e2:e9:98:be:77:97:59:01:98:3d:c4:af:61:16:a1:12:d7:
         5b:29:1e:1f:47:b8:42:59:5c:f3:7a:09:ba:cb:b3:e1:e3:f9:
         95:57:87:73:a1:e4:20:98:a2:69:10:ff:07:8f:64:5b:fa:5b:
         11:78:e2:d1:a8:6d:d8:4e:88:75:91:85:e1:88:6f:0a:6a:2a:
         60:1c:b0:c0:41:f8:09:b4:b4:48:23:37:0f:31:47:87:b6:e1:
         e0:4a:f8:f9:dd:00:1f:8d:85:3f:df:76:2d:2b:89:af:87:74:
         cf:1f:db:ff:f6:b0:03:89:f0:e6:b6:8e:c3:e8:de:b8:78:a6:
         53:b4:12:11:b7:49:15:50:43:c3:cc:2d:00:11:74:20:9e:ab:
         fb:71:e3:f0:f3:e9:62:d9:6e:40:21:97:a4:21:27:6c:61:40:
         dd:d6:d8:38:e7:e0:12:c1:c6:fe:ff:cb:61:9f:9c:18:47:fc:
         50:f2:3f:83:51:bf:17:a6:b4:47:ff:ca:c1:47:73:ac:59:9b:
         93:45:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----