Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa
File:                     UqPcozO38ywmientW6bbMyZbhtA.roa (raw, json)
Hash identifier:          uSb5a6RQNieQ9DXuB1zD1nshjjjvEnjKWx/ELeCys1c=
Subject key identifier:   52:A3:DC:A3:33:B7:F3:2C:26:89:E9:ED:5B:A6:DB:33:26:5B:86:D0
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       018C15D3A7A8E8BE2B10ABF508F5908A1847
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa
Signing time:             Tue 28 Nov 2023 12:07:21 +0000
ROA not before:           Tue 28 Nov 2023 12:07:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201364
IP address blocks:        45.10.56.0/24 maxlen: 24
                          2a0b:a280::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:15:d3:a7:a8:e8:be:2b:10:ab:f5:08:f5:90:8a:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Nov 28 12:07:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52a3dca333b7f32c2689e9ed5ba6db33265b86d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:d6:48:18:d6:7b:93:c9:f9:2a:b9:6d:76:
                    7e:28:2c:1a:62:72:10:fe:66:d6:5d:4e:57:4b:64:
                    b1:16:b8:ad:1a:b9:e1:d3:87:ab:44:be:ad:1f:5b:
                    7b:88:f1:80:89:fa:cc:b9:40:a2:7f:73:a1:84:da:
                    4c:99:12:f7:7d:1f:b0:e6:7e:d2:8a:2c:5c:4a:31:
                    b0:81:e1:19:37:a5:d3:5b:50:ca:75:52:82:88:16:
                    da:95:ad:39:b5:ae:38:ca:f9:d1:10:0d:a0:aa:f6:
                    a7:32:1e:d1:0f:b8:9a:1e:6e:49:48:82:8e:0e:d9:
                    f3:e9:c4:d3:d2:01:05:c4:b3:9a:36:4b:b9:1c:a8:
                    4b:af:6b:41:88:52:2f:6b:ee:a0:6c:5e:3c:7e:24:
                    7d:50:3b:69:99:8e:4b:37:80:82:72:8b:0d:41:48:
                    83:60:2c:d0:13:35:86:e6:7a:76:db:ec:82:b3:2a:
                    7a:d4:a0:bd:e4:89:f5:cf:8d:f8:14:f3:82:19:ef:
                    59:6f:ab:1f:87:a9:3e:dc:13:3e:98:ab:12:02:88:
                    39:39:2f:2c:15:31:fa:01:ce:04:12:ef:81:3d:24:
                    3b:e6:74:c6:d5:43:38:bc:9a:a5:e5:40:33:e4:07:
                    ff:b4:dd:b4:de:ca:10:c2:33:2d:35:18:f0:d1:43:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:DC:A3:33:B7:F3:2C:26:89:E9:ED:5B:A6:DB:33:26:5B:86:D0
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.56.0/24
                IPv6:
                  2a0b:a280::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:34:ba:76:c8:b5:4d:53:00:e0:bd:32:9f:3b:e1:7d:44:
         94:41:a3:f4:96:cd:35:4f:2c:44:20:3b:ab:d7:60:a7:de:74:
         a8:a3:a1:e5:d5:1e:69:7e:ab:2c:c4:58:1d:6c:eb:1e:28:29:
         af:50:1d:89:3b:3b:66:10:85:e0:07:72:16:97:d6:53:bf:a0:
         d5:81:7b:73:fb:38:10:1e:a6:9c:d9:b2:eb:1f:a4:70:06:66:
         94:7a:4a:63:8d:94:62:9a:b6:b0:76:0d:f9:96:ab:5e:03:ef:
         d2:1a:87:56:9d:d6:f6:e0:8a:c3:22:cd:32:5c:5e:be:da:27:
         7d:8f:13:c8:80:6c:95:9e:c2:27:d9:9e:c5:df:72:98:11:b7:
         20:aa:fd:f4:da:9e:73:52:4b:79:6e:56:ba:23:4a:1f:c6:f0:
         13:f7:65:92:d4:17:fd:09:eb:32:11:3f:5c:68:37:ae:f3:b9:
         88:9c:e6:dc:69:0b:25:5e:a5:9b:c1:d0:45:0f:cc:ef:e2:05:
         66:03:ef:3d:e5:2b:b5:d4:60:f7:2f:b7:bd:03:ee:d0:3c:39:
         fe:2e:8e:fd:a8:ff:d6:39:4f:f4:b7:d5:14:e0:3b:d7:28:c5:
         9e:a5:ed:ab:95:4a:d2:3d:f4:11:73:d3:6c:9d:be:36:a7:96:
         7a:81:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----