Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2DRH8RBqBPzdN8SntCII8mc8gg.roa
File:                     f2DRH8RBqBPzdN8SntCII8mc8gg.roa (raw, json)
Hash identifier:          hCR840wncW6PyyFcUBGm0lr39IrWnV8NzwCGdOPS7TY=
Subject key identifier:   7F:60:D1:1F:C4:41:A8:13:F3:74:DF:12:9E:D0:88:23:C9:9C:F2:08
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       018BD52A8D18AB2D2CB8147A69F4C66FF437
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2DRH8RBqBPzdN8SntCII8mc8gg.roa
Signing time:             Wed 15 Nov 2023 22:46:57 +0000
ROA not before:           Wed 15 Nov 2023 22:46:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202265
IP address blocks:        94.199.1.0/24 maxlen: 24
                          45.87.162.0/23 maxlen: 23
                          45.87.161.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b86:1::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 40
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2010::/44 maxlen: 44
                          2a04:5b81:2060::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48
                          2a04:5b80::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d5:2a:8d:18:ab:2d:2c:b8:14:7a:69:f4:c6:6f:f4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Nov 15 22:46:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f60d11fc441a813f374df129ed08823c99cf208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:b9:ce:25:22:b2:a0:0c:21:4f:a1:10:2b:
                    61:4a:6d:40:40:aa:0f:dc:3c:4e:07:a1:ba:95:4c:
                    35:d0:72:df:7c:47:c2:73:06:1b:d3:f6:bc:1f:e2:
                    01:5c:66:ed:5c:c6:72:db:f3:78:6e:c7:10:12:85:
                    49:35:2f:3a:9a:11:61:6b:fd:0c:5b:01:73:73:73:
                    84:8e:e6:93:e6:49:da:6e:ae:82:b2:a4:70:8c:ca:
                    4a:06:89:9e:06:fa:d5:71:b5:72:ab:ca:c2:83:1a:
                    be:d5:bd:b0:da:98:ad:e6:c2:f3:7b:7e:07:f3:c4:
                    61:5e:c9:8f:f3:12:55:d3:51:a8:62:f0:2c:32:aa:
                    12:2e:a4:04:55:25:64:09:1f:74:26:cc:84:70:b6:
                    3e:65:55:50:1f:0b:fb:f9:7e:4e:53:09:d5:3e:34:
                    7d:01:4d:94:8d:51:ae:f9:88:9e:f4:25:26:93:ae:
                    2d:31:ee:9c:6f:8b:c3:c3:09:a2:77:3a:d7:1f:89:
                    a4:e5:3b:8c:73:b0:42:17:37:0c:71:fe:06:99:c5:
                    33:1f:fe:60:bc:04:8f:91:19:19:67:f2:c6:f8:da:
                    4a:91:61:16:fa:5a:88:bf:db:75:a4:8a:df:11:e2:
                    34:e2:45:d8:9d:d2:37:54:34:e6:26:0f:e1:7e:22:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:60:D1:1F:C4:41:A8:13:F3:74:DF:12:9E:D0:88:23:C9:9C:F2:08
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/f2DRH8RBqBPzdN8SntCII8mc8gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.161.0-45.87.163.255
                  94.199.1.0/24
                IPv6:
                  2a04:5b80::/48
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b81:2060::/44
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b86:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:29:35:46:3c:3d:ee:4a:0c:9e:4f:8a:48:da:20:9d:c7:
         2e:94:fb:e6:14:7d:36:fd:8f:d9:09:45:7d:35:49:7f:66:9f:
         74:fb:13:0e:2d:c6:a0:a6:10:51:13:70:ed:a9:99:c4:a0:69:
         7c:04:52:5a:5e:f5:bc:51:b2:30:9e:c2:70:3c:0c:c5:17:ac:
         b0:c1:a0:18:e8:12:94:67:8e:0f:c8:28:e0:e4:ad:4a:37:e2:
         a3:5b:e0:f7:09:9c:53:65:d2:2a:a7:1b:a7:3c:9d:3a:aa:e3:
         72:a7:43:9b:ee:23:c7:c8:9a:0c:b2:70:57:0a:71:1f:2e:34:
         f3:96:8d:b0:0a:f4:7a:cd:a4:1e:7a:92:fb:6b:6a:9b:5f:44:
         13:2d:6f:7a:94:be:33:27:36:55:07:35:cd:0e:22:bf:98:87:
         cc:37:fa:5b:25:26:1a:78:11:22:25:1d:f5:e8:0c:80:60:e0:
         cc:f9:4f:c7:83:96:30:94:f3:13:cb:27:c8:e2:1a:fe:a3:ff:
         17:00:83:9c:c4:70:1a:a7:e7:a9:bf:df:9d:90:47:30:7d:47:
         ab:70:04:36:0c:d8:5e:b3:7b:fa:ba:e5:25:3f:64:33:69:73:
         77:ca:98:5d:76:03:9b:2d:34:7a:ad:ea:2a:8f:e1:f1:e9:87:
         50:82:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----