Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/We6XQG33ExbGSlThDQvXzp6xvSY.roa
File:                     We6XQG33ExbGSlThDQvXzp6xvSY.roa (raw, json)
Hash identifier:          bO61NaJAAqcBlbQA1wbY8Vw35VB3IQK6BgguYTj5jl0=
Subject key identifier:   59:EE:97:40:6D:F7:13:16:C6:4A:54:E1:0D:0B:D7:CE:9E:B1:BD:26
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       01865390F1D8F78DD6F86E1071C462F83D5E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/We6XQG33ExbGSlThDQvXzp6xvSY.roa
Signing time:             Wed 15 Feb 2023 05:34:13 +0000
ROA not before:           Wed 15 Feb 2023 05:34:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        46.249.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:53:90:f1:d8:f7:8d:d6:f8:6e:10:71:c4:62:f8:3d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Feb 15 05:34:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=59ee97406df71316c64a54e10d0bd7ce9eb1bd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:ab:87:52:d9:da:a2:26:0d:eb:07:b2:ad:
                    fa:69:d7:c6:81:d5:6d:9a:44:8f:ce:45:42:b4:09:
                    80:42:72:94:c7:10:eb:bb:4d:02:1a:82:50:9d:a0:
                    db:d8:26:eb:64:16:fc:1d:ab:1d:57:a0:47:49:aa:
                    cc:2a:a8:26:df:09:8f:59:f0:9a:8f:24:a4:48:54:
                    77:be:70:3f:21:48:1f:44:ef:16:5d:3f:43:52:63:
                    9e:dd:a1:5b:41:c5:a8:39:01:2d:e8:0f:ed:85:76:
                    f2:20:d5:f1:dc:7b:52:34:87:f6:eb:0f:7d:e5:e2:
                    64:96:c4:b6:21:27:cb:45:fd:08:e6:34:0a:cb:9b:
                    71:8a:1a:db:ed:ea:ad:60:d9:cb:bc:34:c2:59:01:
                    f1:4a:f5:d9:58:48:b8:e3:e3:1d:1d:dd:9e:0e:0e:
                    d7:d5:cc:68:0b:91:d5:05:86:bc:12:f1:65:a4:39:
                    4f:a4:48:45:5e:c3:96:a3:44:fd:c3:90:7c:4e:af:
                    9e:3b:ec:0d:3a:7b:a4:5d:ee:b0:dc:26:99:4c:6d:
                    83:9d:57:8e:5a:1e:3d:05:76:68:5c:36:94:6c:d3:
                    ee:f0:35:a1:55:00:56:62:fa:b6:f5:6e:46:0c:96:
                    12:d3:b2:44:da:5b:05:7c:98:05:19:97:99:b5:64:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EE:97:40:6D:F7:13:16:C6:4A:54:E1:0D:0B:D7:CE:9E:B1:BD:26
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/We6XQG33ExbGSlThDQvXzp6xvSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:2f:83:5f:cb:50:b8:92:c5:6a:b8:c2:a9:11:8d:6c:bd:df:
         9b:fa:06:97:fe:9c:45:f4:86:22:b2:22:e2:7e:7e:ed:8d:92:
         00:b7:c8:00:c8:6a:a4:f1:ba:02:b6:4f:ed:71:6d:1d:2b:56:
         1b:b1:42:64:09:16:97:4f:be:a8:b6:30:d4:a1:e7:51:d6:94:
         84:6c:3d:5f:f0:ad:59:4d:7a:41:d5:aa:9c:c2:5c:c6:cc:cc:
         2c:a3:16:ae:0f:5d:df:6f:a8:96:da:cf:08:80:47:67:2f:7b:
         37:20:be:4c:02:de:e9:25:fc:fb:66:dd:40:19:8d:ca:da:d9:
         9e:24:9d:a0:6e:29:4d:59:c3:6d:e6:d4:f8:b1:7e:29:3a:55:
         ed:a6:91:ce:6e:ab:56:06:7a:d8:3f:a5:38:70:04:f0:0e:49:
         a3:47:b3:39:ed:cd:fc:03:e3:13:37:54:63:a4:22:cb:c3:e5:
         dc:28:e9:36:98:f5:03:ff:99:d5:4b:b7:7f:35:3d:76:cc:3c:
         a9:52:33:0e:42:f6:2f:5b:fe:1b:d1:0c:64:83:e0:d1:70:41:
         ff:9c:d6:80:26:2b:63:e3:2c:a2:56:e5:86:96:39:3d:d0:75:
         07:0b:c6:47:57:bc:55:ed:55:48:e0:b3:54:32:5f:1f:66:be:
         02:7b:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----