Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa
File:                     05ZrnULriLirZURrwTHDspPnq-g.roa (raw, json)
Hash identifier:          3aytXWeykGkwctwoAAwfQsuFjKp2722OHgWU3AVdpuQ=
Subject key identifier:   D3:96:6B:9D:42:EB:88:B8:AB:65:44:6B:C1:31:C3:B2:93:E7:AB:E8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AD011AEC1EB79D2AA5A7A8CDE04F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa
Signing time:             Tue 24 Jan 2023 16:09:40 +0000
ROA not before:           Tue 24 Jan 2023 16:09:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        45.148.117.0/24 maxlen: 24
                          2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:d0:11:ae:c1:eb:79:d2:aa:5a:7a:8c:de:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3966b9d42eb88b8ab65446bc131c3b293e7abe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:0f:8e:ed:e8:bf:fd:7e:e2:25:d3:11:84:
                    0d:63:26:28:4f:79:fa:3a:65:7a:bf:e6:2c:08:b9:
                    ce:80:93:bb:cc:e4:ec:81:57:d0:aa:47:10:ba:2c:
                    af:a8:1e:94:e1:43:f9:e5:96:98:37:19:b3:9f:82:
                    26:af:6d:a3:26:25:27:f6:f1:df:97:ba:2d:ea:aa:
                    36:50:eb:7d:eb:22:8c:af:74:ce:40:d0:bb:8f:50:
                    ac:84:32:9a:8e:95:2d:52:75:ee:a2:6e:3d:08:30:
                    9a:f8:af:06:37:29:4d:d6:4b:cb:f4:b4:00:8f:3f:
                    66:da:a8:9e:c6:75:a8:a1:b8:a5:fd:4f:9c:6e:d2:
                    36:8a:dd:ad:e6:de:91:bc:51:dc:83:ef:a9:08:38:
                    79:51:38:94:c8:92:17:36:9b:68:e8:cd:88:9b:9b:
                    f6:b2:2a:4d:1d:d2:2c:55:6e:e6:5b:4f:cf:a8:80:
                    ff:88:8c:7d:14:5f:bb:47:43:28:d1:7d:ed:02:72:
                    0d:78:9f:a3:9b:b8:9b:92:57:3e:a0:b2:61:cb:aa:
                    83:68:5e:fd:0c:99:37:81:e8:ad:4b:85:e0:48:d0:
                    85:03:2c:53:66:85:87:54:03:f7:3e:64:12:e1:e5:
                    36:56:77:44:91:fe:74:33:30:b0:72:fd:8f:43:0f:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:6B:9D:42:EB:88:B8:AB:65:44:6B:C1:31:C3:B2:93:E7:AB:E8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.117.0/24
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:19:53:3c:52:b9:96:23:80:ec:05:9d:7d:1f:d9:16:d9:1d:
         b6:da:21:ff:73:2d:7d:6d:3d:e2:4e:45:a3:37:a5:ab:9b:8e:
         71:eb:c6:6f:49:23:a6:df:4e:bd:37:f5:50:f5:3f:c1:62:47:
         68:2a:ec:81:a0:b8:2e:65:42:e5:9c:6c:be:8a:f8:e0:45:5e:
         b4:26:40:ff:52:7c:c4:2b:57:0e:ce:01:b6:b9:77:08:54:ae:
         2e:90:f3:51:c4:a1:fd:34:68:9d:3b:e2:64:ae:ac:9e:a3:dd:
         39:75:c7:60:7a:ec:fc:d6:71:01:35:c2:4d:b6:ef:30:e3:91:
         31:7a:35:9a:ac:4f:ca:63:09:67:ad:b7:c9:66:5b:63:46:51:
         06:3d:7b:8d:6d:b6:68:3b:72:fa:42:fe:34:21:65:5c:ed:fa:
         97:50:ad:ff:3e:58:3e:e9:81:e9:d6:84:4a:f4:c9:0c:22:23:
         46:0c:2c:21:b3:f0:74:0e:eb:93:d4:00:3f:c0:52:30:73:0a:
         07:d5:75:c5:22:74:15:96:f5:a9:71:7d:f4:d4:1f:32:94:ff:
         46:c4:57:2c:9b:a7:e2:92:4a:6a:7d:0e:8b:0a:7f:01:02:02:
         d9:11:6a:4e:9b:c2:0b:88:ce:34:1d:4a:bc:04:c6:b6:fa:b1:
         7c:02:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----