Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa
File:                     HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa (raw, json)
Hash identifier:          dkdrwyaCHQgvhldaYXnbMj7yMcFrf6aF2nRMEh4s6bs=
Subject key identifier:   1D:C5:EC:0A:0A:B6:74:5E:C5:ED:38:3F:02:A6:75:F8:05:D2:29:A6
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       01856ED4DB0AB9F955FFBC5312EBCF4A6CBE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa
Signing time:             Sun 01 Jan 2023 19:35:21 +0000
ROA not before:           Sun 01 Jan 2023 19:35:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209235
IP address blocks:        45.80.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:db:0a:b9:f9:55:ff:bc:53:12:eb:cf:4a:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  1 19:35:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1dc5ec0a0ab6745ec5ed383f02a675f805d229a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:1b:c9:0f:51:56:33:5b:81:2d:61:6b:a1:
                    88:65:62:18:c3:db:96:0c:6f:23:b5:33:5d:75:ed:
                    6f:e4:b1:e3:ef:47:a6:bd:4e:c9:be:e3:64:fa:d6:
                    04:8c:d7:d9:b6:2e:a2:e3:82:97:bd:61:cf:29:b9:
                    88:81:9a:2b:fa:08:2c:60:3d:10:e5:5f:e4:b0:6b:
                    5b:30:c7:66:3d:63:49:47:53:68:d7:fb:78:9f:32:
                    f0:e6:6a:3e:46:25:cc:00:28:f1:3e:d8:29:50:52:
                    2a:19:bd:8e:43:5c:a1:d2:56:2f:e0:ff:7a:43:ba:
                    77:2d:91:4f:80:da:eb:3f:19:9d:d7:e4:19:6f:22:
                    1a:42:6a:9f:20:18:79:06:a3:cb:d6:3a:17:03:07:
                    4b:25:10:a5:88:3f:82:92:e2:7e:3b:8d:5c:42:2b:
                    92:20:67:aa:03:41:3f:94:14:f2:29:3e:69:c7:1b:
                    ff:90:5a:09:79:c3:b3:d5:8c:a2:03:28:f0:b0:ed:
                    3e:9d:69:b0:cb:cb:b8:f2:bd:e2:60:4b:8b:46:99:
                    81:07:e3:e5:70:4d:36:bf:af:58:d5:ad:d7:09:de:
                    bf:53:c5:e5:02:1f:2d:4f:d0:8f:51:f9:50:a7:ae:
                    3f:d3:99:5c:e3:68:9b:96:4a:07:26:8a:c3:a6:e9:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:EC:0A:0A:B6:74:5E:C5:ED:38:3F:02:A6:75:F8:05:D2:29:A6
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/HcXsCgq2dF7F7Tg_AqZ1-AXSKaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:3f:a9:59:d8:28:d9:3e:69:be:3b:0e:d1:ab:eb:08:cd:
         83:0a:d5:fa:6f:93:ae:dd:c9:92:fd:82:15:a2:54:dd:3d:b1:
         01:c9:85:1a:69:68:76:aa:7d:f7:b2:d6:09:58:b0:0e:b6:89:
         21:07:b2:08:19:2b:74:c4:fd:d0:ec:ab:7e:c7:58:85:cd:ae:
         8b:e6:97:d4:94:2b:fc:12:53:40:a0:2c:1a:64:b3:b5:aa:ff:
         9e:45:61:24:d2:1b:bc:5a:bd:52:d5:37:84:cf:dd:34:d2:81:
         74:e4:1b:38:9b:d2:a5:7f:05:12:8d:4d:49:52:08:b1:14:21:
         0a:8b:59:eb:86:3e:f4:0b:d8:1c:d8:25:d6:51:07:1a:17:39:
         8a:e4:4a:3e:34:19:c0:4b:ea:c4:ba:28:44:2b:a5:88:19:26:
         5f:11:53:a4:4b:f0:40:65:6c:d7:ab:c5:8a:29:61:67:77:45:
         c7:a5:46:5c:45:de:94:d6:33:c8:0b:63:27:f0:a8:02:c7:17:
         6b:b3:26:4a:62:67:3b:41:d1:c8:e9:ac:9e:7d:b0:fc:17:ef:
         de:b4:bc:9b:7d:d0:fd:01:f0:a8:c4:10:91:85:7a:4f:7f:7c:
         40:fb:dc:2b:d7:10:9e:05:7c:03:73:4b:4c:37:46:fb:0f:cb:
         5e:65:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----