Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa
File:                     xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa (raw, json)
Hash identifier:          VeXj0BqAMvMxnKoElaYuwaX3nqIRAB1sKpb/91VPNhw=
Subject key identifier:   C5:7E:4C:3D:64:7C:10:4B:9F:F9:CA:A8:88:58:71:79:7B:1F:6C:E3
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       0188E77C31FAC369F7A4C68BE7B79B5EEAF5
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa
Signing time:             Fri 23 Jun 2023 09:00:56 +0000
ROA not before:           Fri 23 Jun 2023 09:00:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202265
IP address blocks:        45.87.162.0/23 maxlen: 23
                          45.87.161.0/24 maxlen: 24
                          2a04:5b81:1fff::/48 maxlen: 48
                          2a04:5b80:53::/48 maxlen: 48
                          2a04:5b86:1::/48 maxlen: 48
                          2a04:5b81:1000::/40 maxlen: 40
                          2a04:5b87:1::/48 maxlen: 48
                          2a04:5b84:1::/48 maxlen: 48
                          2a04:5b81:2010::/44 maxlen: 44
                          2a04:5b81:2060::/44 maxlen: 44
                          2a04:5b82::/44 maxlen: 44
                          2a04:5b82:8::/48 maxlen: 48
                          2a04:5b80:200::/48 maxlen: 48
                          2a04:5b80::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e7:7c:31:fa:c3:69:f7:a4:c6:8b:e7:b7:9b:5e:ea:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jun 23 09:00:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c57e4c3d647c104b9ff9caa8885871797b1f6ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:b5:cb:74:93:30:61:d8:15:f6:c8:c1:49:
                    ca:9d:fb:e5:96:29:84:89:61:ec:e6:07:c0:26:95:
                    3f:6a:e9:18:f1:13:f5:61:88:98:4c:28:ed:48:aa:
                    86:b1:c7:f7:4c:91:7c:74:ed:26:bf:f1:d7:87:41:
                    fb:ff:91:04:46:da:43:37:5d:44:f1:07:1c:67:04:
                    70:bf:00:f2:9a:7f:c1:c6:7b:44:77:e4:bf:be:29:
                    be:4b:74:69:33:4e:df:30:bb:a9:0c:8f:52:ed:49:
                    70:cb:3c:da:e0:f6:d8:88:61:01:7a:30:f9:0d:b3:
                    fa:2e:61:0d:72:73:68:00:04:32:2c:63:0d:69:f7:
                    ac:50:3a:39:6b:23:35:c6:3c:e4:3e:2e:61:cc:c0:
                    b3:30:81:10:7e:b8:86:53:85:08:3e:61:c0:dd:ce:
                    9f:c9:05:d0:37:3c:68:89:1f:1d:23:36:52:f5:cf:
                    ae:57:05:6b:f3:57:ea:9b:c3:28:e6:a8:8f:d9:90:
                    56:04:56:49:cf:d9:e6:58:d7:47:83:28:9e:b9:d2:
                    52:a9:4d:7c:d6:25:5a:42:93:2a:35:d8:c3:ff:5d:
                    ea:62:c5:f5:00:aa:ca:92:e2:33:02:2a:38:e7:54:
                    06:28:f5:c0:73:01:13:a3:f9:f3:99:82:bc:db:be:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:4C:3D:64:7C:10:4B:9F:F9:CA:A8:88:58:71:79:7B:1F:6C:E3
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/xX5MPWR8EEuf-cqoiFhxeXsfbOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.161.0-45.87.163.255
                IPv6:
                  2a04:5b80::/48
                  2a04:5b80:53::/48
                  2a04:5b80:200::/48
                  2a04:5b81:1000::/40
                  2a04:5b81:1fff::/48
                  2a04:5b81:2010::/44
                  2a04:5b81:2060::/44
                  2a04:5b82::/44
                  2a04:5b84:1::/48
                  2a04:5b86:1::/48
                  2a04:5b87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:60:4b:19:9c:0b:a7:3b:4d:09:96:6f:2b:ff:f9:4a:45:
         f6:2a:66:91:df:76:eb:f2:fb:44:1a:69:a8:da:ba:fb:af:fa:
         82:8c:0b:2f:77:8a:6b:ce:f0:b7:b2:27:9d:09:e3:9f:7b:fb:
         c7:9a:a5:6b:61:a1:92:28:cd:3b:48:1f:90:5b:d8:b1:bb:97:
         a8:85:0b:38:99:e2:89:e2:2e:75:e2:5d:b6:05:3a:bd:98:e8:
         80:e6:10:b4:cd:04:e1:aa:27:6a:bd:30:6f:f6:2d:60:a6:42:
         10:66:80:f6:e2:97:98:fb:da:bd:a0:84:7f:24:d5:d6:43:4f:
         25:5a:2f:6b:74:30:61:d5:89:cd:5e:bb:16:f1:75:db:e6:98:
         18:03:85:0f:2a:8a:e8:70:02:b3:3a:b0:f4:5a:b8:c0:d1:31:
         9e:2b:46:aa:f1:d7:e2:ec:e1:b3:ed:f3:b2:1c:11:fa:81:50:
         a7:b2:30:0f:2a:0c:8f:c7:a5:e7:23:2d:83:dc:61:0b:c6:0b:
         56:ab:75:f1:3f:2d:8e:9b:45:5a:e4:38:56:d0:63:af:cb:b9:
         d5:bf:92:cd:4b:9b:a7:18:4a:2f:94:55:12:0f:29:45:f7:97:
         c4:3d:d4:72:3d:34:7a:21:56:05:47:3d:fe:58:c3:2d:75:4d:
         94:dc:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----