Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1TpDWA2o-3YEBTp_arI76OMr6Ps.roa
File:                     1TpDWA2o-3YEBTp_arI76OMr6Ps.roa (raw, json)
Hash identifier:          ZKBIlkJ3io2Y+T2QqsfRM7mKsqzXnB06zWyyruGKLu4=
Subject key identifier:   D5:3A:43:58:0D:A8:FB:76:04:05:3A:7F:6A:B2:3B:E8:E3:2B:E8:FB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7ABF9EBF6FEB726E345BFC73C02CB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1TpDWA2o-3YEBTp_arI76OMr6Ps.roa
Signing time:             Mon 02 Jan 2023 05:15:09 +0000
ROA not before:           Mon 02 Jan 2023 05:15:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        45.148.117.0/24 maxlen: 24
                          2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ab:f9:eb:f6:fe:b7:26:e3:45:bf:c7:3c:02:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d53a43580da8fb7604053a7f6ab23be8e32be8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:5e:36:f2:01:b7:b1:73:dd:a6:1b:d3:b6:
                    00:7b:66:21:15:d8:45:87:f5:a9:c5:06:51:42:48:
                    e7:ec:d8:da:da:d9:1d:46:3a:a8:f9:15:a6:59:30:
                    d2:b3:b0:ec:e5:4f:a8:07:14:2b:52:90:50:c9:29:
                    52:08:6a:14:55:78:10:77:29:d9:2f:28:2e:9f:26:
                    dd:56:d3:69:77:bd:55:16:ef:92:2a:13:86:ee:bf:
                    57:3a:e8:3e:b0:5f:38:67:c4:71:bb:37:46:d3:a5:
                    4c:a7:72:a7:e2:9e:28:f7:98:75:3b:42:43:67:47:
                    da:36:c0:b2:fc:0c:e4:62:ad:09:04:6d:37:52:5a:
                    59:cf:9e:30:9c:84:63:f4:f9:77:4b:ab:5b:95:5c:
                    c2:a7:24:c9:0a:a2:7e:bf:e8:b6:5e:1a:d0:df:fc:
                    56:eb:b1:70:86:ac:8f:1a:6f:9a:ec:a1:ed:b7:fb:
                    da:58:1b:7f:6b:82:ec:97:98:d7:c1:a1:89:a2:a9:
                    0c:2e:65:b7:50:0f:fd:fb:9d:66:da:6e:58:4c:ee:
                    94:29:d3:26:e7:4f:c9:ff:dc:05:97:a7:94:cc:10:
                    4e:9d:06:ee:fd:2a:61:9a:f6:2a:8d:53:10:4d:27:
                    83:af:25:bc:79:a2:63:f4:2e:10:53:b3:15:7e:bb:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3A:43:58:0D:A8:FB:76:04:05:3A:7F:6A:B2:3B:E8:E3:2B:E8:FB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1TpDWA2o-3YEBTp_arI76OMr6Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.117.0/24
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:88:63:59:77:34:de:20:d5:da:cb:80:8d:79:bb:09:fa:
         50:c4:0d:80:75:0f:43:87:3f:f5:39:77:a2:69:70:c2:bd:90:
         d0:55:d1:32:42:91:1a:5b:5a:df:72:4f:38:3e:42:da:c5:32:
         48:d6:fd:4e:e1:8a:0f:d0:1e:59:fc:16:03:ee:a9:77:43:d7:
         e3:d3:8f:d7:88:f2:73:3d:95:96:e5:d9:0e:4e:67:90:74:45:
         0e:9f:9d:bc:d8:04:88:ea:b0:0c:62:20:49:77:72:9c:1b:b6:
         6a:dc:40:50:62:2c:fb:0a:84:e4:96:65:8b:5f:af:39:49:fe:
         9c:30:f2:5e:db:4f:9b:db:06:e0:df:59:69:bc:50:9f:cd:d7:
         fb:d6:fc:ad:96:35:79:a5:11:b1:01:24:9f:51:d2:15:02:af:
         05:b3:f0:0b:b0:fc:b4:06:8c:ce:76:ca:4c:74:cf:44:34:b5:
         d9:65:39:63:0c:ce:4b:18:72:50:7a:cb:57:a3:36:84:d5:a4:
         78:53:b9:77:71:c5:0c:03:3a:a6:3d:17:51:67:eb:3e:ea:5c:
         e8:41:84:af:09:a1:69:de:69:b8:5f:05:86:2a:ad:00:c8:8a:
         ee:12:f6:03:c2:08:21:73:c8:54:7b:4e:36:05:86:b6:1b:16:
         ea:9c:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----