Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/V1EVMUjrk5qmKcqwt4OkvGI3iZ8.roa
File:                     V1EVMUjrk5qmKcqwt4OkvGI3iZ8.roa (raw, json)
Hash identifier:          xy1KDhwR6kXhtJR+1KO5LH5fZfWcTvBE1tbZrZrm8Vg=
Subject key identifier:   57:51:15:31:48:EB:93:9A:A6:29:CA:B0:B7:83:A4:BC:62:37:89:9F
Certificate issuer:       /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial:       01856DA64D821B7C4D14C7FE453FCFD30A9C
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/V1EVMUjrk5qmKcqwt4OkvGI3iZ8.roa
Signing time:             Sun 01 Jan 2023 14:04:53 +0000
ROA not before:           Sun 01 Jan 2023 14:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51269
IP address blocks:        45.157.60.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:4d:82:1b:7c:4d:14:c7:fe:45:3f:cf:d3:0a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
        Validity
            Not Before: Jan  1 14:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5751153148eb939aa629cab0b783a4bc6237899f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:42:b1:ab:b0:a6:d7:04:87:56:0a:11:16:
                    aa:61:69:e3:f1:a1:c0:b8:8e:46:21:18:d5:4e:7c:
                    e5:20:44:26:fb:72:b8:ab:eb:5d:d9:0c:63:d8:77:
                    83:fc:4e:33:4f:c6:e6:88:df:fd:4f:1e:12:e0:7f:
                    5d:3c:e1:41:eb:23:65:f3:6e:e6:cd:c6:d3:46:99:
                    fc:dd:89:42:5b:17:51:12:bc:a2:2c:f1:f9:48:0d:
                    6b:66:f4:13:5f:47:cb:e0:6c:17:63:3c:f5:56:8c:
                    ee:13:c8:1c:db:bd:83:fb:1a:d8:35:b3:6d:e0:9a:
                    fc:03:a1:f7:dc:19:d3:31:ce:9e:e2:43:d8:bb:65:
                    30:9c:66:c9:45:50:ce:78:b8:40:83:da:81:a1:a6:
                    28:21:53:b5:aa:a9:3b:16:4d:5c:c1:5a:39:de:56:
                    52:11:4f:9d:3f:a0:2c:25:54:82:71:c8:82:27:f3:
                    e8:6d:58:f0:d8:a1:95:d1:22:27:c6:4c:14:88:02:
                    be:b0:a3:7c:db:13:02:f3:32:cd:0d:d8:e8:5a:6b:
                    bd:cd:2f:2e:42:42:51:a4:75:30:91:6f:b7:70:9e:
                    ce:bd:3d:39:cd:26:09:58:5f:1e:f0:53:23:03:2d:
                    96:17:47:f3:42:22:cf:7a:92:ba:59:a0:e0:d1:7e:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:15:31:48:EB:93:9A:A6:29:CA:B0:B7:83:A4:BC:62:37:89:9F
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/V1EVMUjrk5qmKcqwt4OkvGI3iZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:2a:3c:fa:ca:b3:70:30:3e:8b:8e:ce:ef:18:f5:cc:dd:
         c8:e9:0d:02:53:34:aa:8d:c4:91:16:6c:c7:65:ab:b3:47:d8:
         70:92:f7:fc:6e:bb:4a:3b:8b:25:03:ea:45:20:73:5a:a7:e2:
         90:b0:0a:2b:92:81:aa:96:70:19:69:e2:4f:c7:e1:4e:54:5f:
         d6:fc:68:79:be:d6:fa:e4:6b:c6:a2:c6:2e:e7:32:97:24:a5:
         39:71:8a:39:92:b1:af:db:65:25:e1:e9:d9:2c:82:04:e7:5f:
         ef:fe:8a:1e:ef:e1:f1:39:92:7b:82:f4:52:9f:ee:be:67:84:
         ec:b6:2e:59:f8:18:f6:6c:ad:7a:1a:de:dd:00:00:61:cd:41:
         be:46:a2:29:96:8a:4b:da:7e:31:fc:08:82:29:83:1a:1c:59:
         a0:5e:84:66:9b:0f:7e:3d:a6:cc:1a:56:b1:1f:2d:44:d2:05:
         6d:e2:0c:14:49:cb:44:3e:90:b6:ef:c1:11:b9:4c:74:7b:64:
         8c:22:b2:73:8f:7a:00:b2:07:5e:b8:de:de:92:1b:09:f3:b1:
         f9:61:b2:c1:05:8e:6a:61:fb:7d:75:09:74:96:11:88:82:2d:
         48:92:6e:95:78:18:a9:72:59:3a:2a:fc:4b:bf:43:e9:77:d7:
         e7:f4:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----