Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa
File:                     l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa (raw, json)
Hash identifier:          XRL5lF6FLcxPMQGBGXTsAv/iBMTuF7JmU79LD3EK0GI=
Subject key identifier:   97:FC:A3:D0:F6:9E:2A:5E:99:29:0D:77:0B:E3:58:FC:19:5B:5B:3D
Certificate issuer:       /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial:       01856DC1A3E7FF633C5371939C0925293A4F
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa
Signing time:             Sun 01 Jan 2023 14:34:44 +0000
ROA not before:           Sun 01 Jan 2023 14:34:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212745
IP address blocks:        45.81.228.0/22 maxlen: 22
                          2a0e:6080::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:c1:a3:e7:ff:63:3c:53:71:93:9c:09:25:29:3a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
        Validity
            Not Before: Jan  1 14:34:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=97fca3d0f69e2a5e99290d770be358fc195b5b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:7f:1d:a8:b6:e3:1c:23:de:34:c3:b5:d3:
                    10:8f:64:3d:45:28:34:43:04:d3:ee:53:87:74:30:
                    f5:4a:f4:2b:82:fa:7e:21:20:d2:fc:fc:5a:09:a5:
                    c5:f3:49:23:56:b4:4c:11:9c:9b:4b:ed:55:62:86:
                    95:38:11:b9:93:c7:45:d3:ef:82:46:19:02:58:76:
                    1a:8a:14:b4:a9:b9:a6:34:ec:08:ce:de:18:9b:bb:
                    f1:93:4a:eb:87:0c:6a:fa:4a:c8:ec:00:97:69:8b:
                    ef:3b:fc:eb:fb:4b:5f:1d:80:d7:5d:46:5d:93:5a:
                    a9:ef:58:ec:a2:c9:37:36:72:fe:59:0b:34:6b:57:
                    01:2e:05:88:10:fb:77:2c:69:b9:89:58:bf:7d:ce:
                    36:f3:d1:4e:be:1d:cc:c9:f8:47:6e:7c:42:62:ea:
                    95:f6:e8:71:d7:79:bd:c8:a2:3c:10:fb:49:d9:06:
                    4a:3c:9b:79:71:a0:35:e0:ec:d8:20:62:8e:ba:99:
                    84:b3:cf:ec:49:4b:a4:eb:f1:16:d8:14:de:4d:6f:
                    ce:79:2e:9c:86:3d:4e:36:bc:4f:ca:44:c5:16:14:
                    fe:7a:2a:ee:0b:cb:72:d2:31:00:89:eb:74:49:0a:
                    77:c3:f2:7a:4b:55:27:a1:0a:e4:9b:3f:69:b7:c0:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FC:A3:D0:F6:9E:2A:5E:99:29:0D:77:0B:E3:58:FC:19:5B:5B:3D
            X509v3 Authority Key Identifier:
                keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/l_yj0PaeKl6ZKQ13C-NY_BlbWz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.228.0/22
                IPv6:
                  2a0e:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:53:33:b3:4c:0e:79:d9:01:6d:4e:22:b2:6e:42:6e:e1:
         a9:b7:95:3e:6e:35:80:64:dd:34:ac:68:6f:2e:d3:04:61:f6:
         78:f4:7e:00:d9:57:c0:58:d6:f1:eb:fa:60:4f:03:9d:ce:21:
         be:2c:96:cc:f1:75:ab:6b:f5:05:86:5b:51:c2:0c:2b:cd:84:
         1d:6b:8f:62:42:0c:f0:7e:7a:74:d7:66:a8:10:88:99:5e:57:
         83:2a:4e:a4:da:01:60:13:cb:0f:34:77:12:7c:49:62:b3:aa:
         58:cf:3f:58:5f:00:89:b5:97:a6:c4:84:63:bf:a5:84:61:59:
         97:cf:7e:16:8a:d7:d1:b1:3a:d9:91:50:0e:25:ed:81:15:1e:
         f2:d1:62:d9:8c:86:ad:b1:37:a4:d5:c4:26:99:d2:e1:ba:64:
         78:a8:f9:8b:14:3e:f3:94:a6:0f:80:38:37:8d:2b:c9:bc:cc:
         83:fd:f4:5e:b1:e6:84:5b:f5:78:ca:2a:e5:48:5f:89:7c:5a:
         7f:4b:a5:7f:4a:7e:12:13:3e:c6:c6:85:61:3e:61:99:29:68:
         2b:03:4e:81:bb:e4:f4:88:db:e0:65:59:94:c6:c2:95:22:05:
         f9:d5:2a:56:af:46:b4:7f:be:66:3b:13:05:db:90:63:46:aa:
         57:f0:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----