Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58zAL3mZXvFP53dOJ_rqzh8QMGM.roa
File:                     58zAL3mZXvFP53dOJ_rqzh8QMGM.roa (raw, json)
Hash identifier:          ew9vSKQ/X2HfTMdThXXX7mL5wa6VOiRrY7yvXq2x6eQ=
Subject key identifier:   E7:CC:C0:2F:79:99:5E:F1:4F:E7:77:4E:27:FA:EA:CE:1F:10:30:63
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018672133AB548E259C953CE409F365FBB03
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58zAL3mZXvFP53dOJ_rqzh8QMGM.roa
Signing time:             Tue 21 Feb 2023 03:45:08 +0000
ROA not before:           Tue 21 Feb 2023 03:45:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150710
IP address blocks:        45.146.242.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:72:13:3a:b5:48:e2:59:c9:53:ce:40:9f:36:5f:bb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb 21 03:45:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7ccc02f79995ef14fe7774e27faeace1f103063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:da:28:0d:2f:58:74:bd:f4:3c:55:bb:7b:
                    f7:26:73:ec:2a:6e:f7:38:55:e2:40:e7:8f:91:bd:
                    e4:58:68:26:d9:8c:dd:d6:fe:ee:31:ab:f0:b0:c2:
                    f1:09:50:0a:a5:ff:f4:46:22:bf:91:8a:e3:ff:41:
                    00:38:91:68:04:ea:aa:8f:77:01:87:5f:88:3b:47:
                    be:09:a9:1c:b5:b6:23:e0:d2:e9:15:ba:1a:8b:6c:
                    3f:41:99:1f:f7:49:f6:77:f1:f0:be:23:3b:b1:e3:
                    8e:4c:ca:21:7f:19:b6:73:d2:1c:96:d1:e5:28:58:
                    62:83:0e:d7:fa:61:ce:34:31:cc:72:5f:2d:87:35:
                    a5:ce:04:22:e8:b6:88:22:0d:06:a8:3e:cf:b9:8d:
                    a6:b8:15:0a:d9:59:e9:d4:6c:16:9d:95:2c:47:c5:
                    de:72:55:e3:9d:65:f3:a6:ff:51:61:2d:93:97:fa:
                    d6:1c:5d:3b:0c:8f:cf:ed:6e:0d:ba:33:9d:cc:5b:
                    5e:5a:7d:33:28:19:c4:f3:53:b9:ba:69:16:27:ce:
                    c4:88:93:8e:3d:26:0d:df:0a:ef:b2:05:ae:28:cf:
                    32:3b:f2:58:37:35:4d:e5:f0:a8:4b:f5:a2:8a:fd:
                    e6:37:95:88:59:98:e7:f6:14:49:4b:9a:e2:25:69:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:C0:2F:79:99:5E:F1:4F:E7:77:4E:27:FA:EA:CE:1F:10:30:63
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/58zAL3mZXvFP53dOJ_rqzh8QMGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:12:1e:51:bd:0b:ba:cf:ec:df:ca:5f:5d:13:9d:ce:b0:44:
         7e:15:d1:33:33:13:b4:e8:6f:7e:50:a2:79:24:87:ee:9d:8e:
         c0:6b:7d:c6:6b:fd:bf:e3:c3:09:d0:40:cc:70:34:c3:ef:6d:
         f9:3f:fb:f4:15:bc:18:b6:8a:8e:6b:0a:8e:40:1e:90:78:c5:
         0a:60:ee:f1:fd:78:9f:5c:3a:28:54:2c:0d:1e:f5:9a:eb:fb:
         c7:d3:23:10:ac:63:c6:4a:c3:db:67:64:9b:4a:00:53:d6:5f:
         58:92:10:1d:05:ec:5c:08:8f:29:88:4e:b3:bf:c0:e4:0a:f5:
         c6:5d:bf:84:8c:fc:ca:7b:df:78:e1:9b:ff:59:58:ac:04:7d:
         41:c8:7b:48:e5:cc:57:e9:27:be:c3:fe:7c:21:a1:47:3d:44:
         9f:35:71:55:42:8a:9c:0f:b3:14:bf:c0:92:ff:a5:ed:52:9b:
         5e:6e:5e:f0:14:f5:eb:d7:c5:17:f4:22:4e:2b:cb:c7:24:f5:
         c5:16:57:32:d9:37:1a:2e:e7:be:70:16:53:d8:53:c8:d5:25:
         2d:05:c2:6c:d3:61:38:96:b7:e5:ac:7a:de:76:67:e3:28:86:
         92:86:9f:53:f7:d4:80:74:a0:8b:74:f4:4a:82:a4:75:a1:53:
         cc:f4:d9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----