Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa
File:                     kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa (raw, json)
Hash identifier:          fD+DPakjx+5js2A3hi9PatTQBmYJ3TFX1f5kxVsztbM=
Subject key identifier:   91:4F:32:8D:9D:B2:A6:7E:D5:35:D1:AB:EA:AC:19:72:EE:C7:C1:14
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018572BA9B0C4BDF1E3E6687247F18A48C7B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa
Signing time:             Mon 02 Jan 2023 13:45:10 +0000
ROA not before:           Mon 02 Jan 2023 13:45:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202827
IP address blocks:        45.148.117.0/24 maxlen: 24
                          2a0e:b107:1ce1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:9b:0c:4b:df:1e:3e:66:87:24:7f:18:a4:8c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 13:45:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=914f328d9db2a67ed535d1abeaac1972eec7c114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:3c:e3:30:89:f2:5c:8d:ce:71:e3:b9:b7:
                    ac:45:6c:dc:f9:8a:20:9c:f5:b2:44:9e:b2:b3:97:
                    7c:18:32:3c:5b:d0:21:74:46:85:4b:dc:f9:f3:58:
                    46:5b:39:57:d6:f7:26:a0:7c:ca:73:bd:bb:c8:c1:
                    03:10:77:1a:1f:90:6c:ed:f3:3d:c0:ef:44:63:82:
                    70:67:79:16:94:67:18:85:bf:2b:2e:1b:bd:a1:f2:
                    ac:d1:53:a9:4f:bd:93:d9:48:ef:aa:f2:cf:46:5b:
                    32:d4:69:c1:1c:3f:e0:a8:2d:a2:6b:e1:3e:15:09:
                    69:68:3f:4f:7c:f9:6f:e9:11:ea:c4:68:32:6b:50:
                    a6:f3:41:92:3f:2b:1d:1a:d1:5f:0e:10:35:47:a8:
                    2c:84:8c:2d:9c:3c:1e:0b:15:cd:5f:40:94:d7:44:
                    83:ea:ba:2d:e7:16:80:44:fe:bc:62:27:99:87:7c:
                    4f:9f:18:5d:3e:10:a3:63:35:64:24:25:05:89:9b:
                    aa:e1:b1:35:ad:ba:7a:1d:4e:69:66:33:5f:a5:cd:
                    5d:a9:c0:9d:4d:60:2b:ce:53:ee:38:57:8f:29:36:
                    2e:dd:04:eb:bf:53:6c:16:ae:78:a3:25:28:a8:c8:
                    25:1a:22:f5:9a:22:b0:23:6f:25:9f:a2:de:35:10:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4F:32:8D:9D:B2:A6:7E:D5:35:D1:AB:EA:AC:19:72:EE:C7:C1:14
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kU8yjZ2ypn7VNdGr6qwZcu7HwRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.117.0/24
                IPv6:
                  2a0e:b107:1ce1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:35:7b:e5:f2:48:b6:9b:86:09:7f:ec:72:a0:91:de:48:
         a5:f5:39:5e:66:3c:ee:e7:4e:7f:9d:57:02:7f:8f:04:9e:69:
         1c:8b:15:88:8c:de:a2:f3:99:51:85:4b:14:56:a1:81:26:9c:
         ef:39:c9:22:f5:c9:98:b5:43:a2:8e:dc:6f:33:88:2d:e1:4e:
         26:c5:e6:cc:a3:56:80:78:78:c0:4c:2f:7a:37:ce:64:3a:29:
         ef:da:6c:a1:0a:5f:94:86:8a:5b:98:f8:64:0c:a1:f2:8f:64:
         f7:df:56:46:44:3a:33:cc:ff:4a:a1:9f:00:a6:7d:ca:d5:ec:
         d9:29:12:d8:2d:00:fa:9d:22:0d:0f:74:71:41:21:b0:e3:3a:
         04:23:03:ac:22:0f:15:e3:de:c5:84:6f:15:ee:51:51:e4:db:
         b6:24:a7:b4:35:80:12:8b:3e:bf:67:58:a1:f0:7f:25:a0:62:
         a1:55:09:af:82:92:44:98:47:9e:fb:d4:ed:35:04:10:8b:6f:
         8d:c8:5f:a0:3d:8a:f9:d3:46:2b:b2:43:6e:12:b7:9f:65:55:
         64:f2:07:08:16:1c:c9:e9:27:47:f2:3a:ce:d7:b0:18:a7:8e:
         a7:0e:cb:39:65:e6:d0:ea:b2:01:11:6c:78:21:0a:ee:05:68:
         12:6e:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----