Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/bJvSUfcs_ua2o9ECkET2rWvaNKg.roa
File:                     bJvSUfcs_ua2o9ECkET2rWvaNKg.roa (raw, json)
Hash identifier:          +F8pZMCRSh6GXn1djjxwwAtFe2KhAA3bnsi+pmsQKFQ=
Subject key identifier:   6C:9B:D2:51:F7:2C:FE:E6:B6:A3:D1:02:90:44:F6:AD:6B:DA:34:A8
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       018613760F6C6666B48DFBFAC2014B716539
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/bJvSUfcs_ua2o9ECkET2rWvaNKg.roa
Signing time:             Thu 02 Feb 2023 18:49:09 +0000
ROA not before:           Thu 02 Feb 2023 18:49:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8452
IP address blocks:        45.85.188.0/24 maxlen: 24
                          2a0e:4200::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:13:76:0f:6c:66:66:b4:8d:fb:fa:c2:01:4b:71:65:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Feb  2 18:49:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c9bd251f72cfee6b6a3d1029044f6ad6bda34a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:d8:d7:02:af:bc:b3:5e:59:37:27:cf:5e:
                    02:fe:79:95:81:be:df:47:96:87:71:25:88:63:fc:
                    70:77:fe:58:fb:cd:0c:39:b9:42:4d:eb:35:44:4c:
                    fc:56:15:95:cb:ca:f0:46:2f:b1:76:ce:b2:f7:73:
                    63:bf:e9:05:b0:60:f9:dd:61:60:d9:88:75:2a:7c:
                    a5:87:7e:56:8f:65:86:e8:2d:f7:a7:36:d9:f5:3c:
                    d1:e2:8d:05:01:13:fc:c6:0c:8f:f1:b2:07:f5:37:
                    06:fb:fb:24:03:82:5c:e5:5d:fe:05:a2:3e:fa:7f:
                    48:27:cf:1a:bf:23:77:58:d7:c1:42:3d:ab:c6:26:
                    57:e0:97:79:97:4f:ca:2c:37:0a:b2:1b:ed:6f:f2:
                    30:c2:48:45:ed:09:17:ac:2b:ee:3b:d2:a0:88:6f:
                    55:b5:49:73:e6:3c:c8:19:7f:c2:42:34:0e:b7:61:
                    43:d3:a8:d8:99:1f:ba:0d:ab:63:63:93:5a:c3:b3:
                    79:1b:02:5c:22:97:6f:7b:1b:3d:4e:87:5e:66:4e:
                    3c:4b:57:62:38:53:f2:51:11:c2:a9:fa:c0:a6:f7:
                    09:da:77:a4:19:79:6b:8d:2c:26:4c:49:36:ef:a7:
                    76:47:3f:32:7d:85:f6:11:e0:b9:db:cc:32:f1:54:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9B:D2:51:F7:2C:FE:E6:B6:A3:D1:02:90:44:F6:AD:6B:DA:34:A8
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/bJvSUfcs_ua2o9ECkET2rWvaNKg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.188.0/24
                IPv6:
                  2a0e:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:39:f9:50:fe:96:7a:c3:ae:90:3f:d8:4e:5b:09:11:d8:
         65:e9:bb:ee:e6:c1:ff:29:bf:7f:bf:cf:1c:33:f7:9b:99:d6:
         3c:dc:f2:d9:8b:b3:fd:83:f0:b3:5f:be:50:35:b0:e6:c0:77:
         59:eb:ba:6c:81:bc:82:f5:7b:08:ff:12:cc:f5:66:34:06:13:
         6f:48:80:9a:96:d1:6f:91:13:3a:b5:cf:4e:76:53:6f:2f:13:
         3e:20:c7:fb:16:6b:91:80:44:31:b7:5b:74:e4:6b:5e:78:b1:
         0c:fb:03:59:7d:c4:d2:08:95:5a:a2:04:d7:64:c4:c8:38:6c:
         63:7e:6a:26:d3:25:25:a8:63:d5:e3:23:ac:27:e8:98:16:a8:
         04:88:ca:53:1c:1d:f3:29:39:49:6f:0d:1f:c7:5f:60:70:59:
         04:f2:eb:05:f4:8f:75:7e:a0:e8:70:54:e0:87:cc:b5:aa:48:
         f1:2a:45:06:1c:33:a1:9a:9e:eb:14:63:35:0f:9f:16:e6:33:
         98:7d:e6:58:b3:a6:3b:bb:e6:4b:74:9d:98:d0:c5:6a:4c:b7:
         ce:78:dc:99:0b:1e:68:15:8c:79:a0:59:1f:12:10:ae:ad:b1:
         8f:5d:d8:a4:a6:22:71:87:35:36:ea:86:b0:a6:ad:d3:5c:a5:
         d5:4b:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----