Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lUe5avwj_-9Ti1eFil_EMZIlGxw.roa
File:                     lUe5avwj_-9Ti1eFil_EMZIlGxw.roa (raw, json)
Hash identifier:          y8fjXgnIFEN7v5jqCg2WoFheRtpTH6eO7GOS+9WeXts=
Subject key identifier:   95:47:B9:6A:FC:23:FF:EF:53:8B:57:85:8A:5F:C4:31:92:25:1B:1C
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       01876F3B2EBFA3C1CA5E6954F75D9C89F699
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lUe5avwj_-9Ti1eFil_EMZIlGxw.roa
Signing time:             Tue 11 Apr 2023 07:32:42 +0000
ROA not before:           Tue 11 Apr 2023 07:32:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        46.249.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6f:3b:2e:bf:a3:c1:ca:5e:69:54:f7:5d:9c:89:f6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Apr 11 07:32:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9547b96afc23ffef538b57858a5fc43192251b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:dd:b7:0a:1c:ed:31:d3:d9:82:2a:ea:e9:
                    4e:2d:ad:13:e9:8f:d2:ed:65:92:89:3f:b4:21:a3:
                    04:c4:fa:65:67:3d:ce:fb:79:47:10:02:1e:d0:e6:
                    f6:82:5b:c7:b2:48:b0:0c:02:7e:a0:82:10:be:aa:
                    0b:b7:5f:78:65:60:e5:ba:ed:ba:e0:1e:dd:17:4e:
                    52:c2:7e:39:66:5d:d1:3d:e2:12:0d:21:c8:c3:b0:
                    68:42:29:d8:1d:38:23:ed:4d:33:90:ba:a4:b2:73:
                    3c:b1:dc:20:97:0e:03:c4:e4:7c:cc:1d:08:45:a5:
                    d4:d9:1f:0c:32:c8:82:cc:82:6b:f0:f1:30:c3:43:
                    da:c0:b4:f6:f2:4b:a9:e5:7c:5f:31:e9:15:19:99:
                    45:2e:d1:84:3e:41:9e:9a:7c:b1:3c:bc:2b:d9:d9:
                    bd:86:fa:ee:a4:07:dc:ab:91:9d:d7:0e:89:af:8c:
                    aa:22:d2:a4:c7:20:09:5a:b3:cb:06:a0:e0:f4:95:
                    b4:44:97:6b:46:33:32:16:83:21:b7:c8:3a:9d:06:
                    28:63:48:19:e3:bd:68:61:97:f1:ca:1c:ce:6a:2a:
                    28:c7:03:b6:6e:b6:0c:2c:6b:39:38:1e:77:57:3b:
                    00:1b:a3:44:90:f7:34:34:84:6a:b0:bf:42:fb:aa:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:47:B9:6A:FC:23:FF:EF:53:8B:57:85:8A:5F:C4:31:92:25:1B:1C
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/lUe5avwj_-9Ti1eFil_EMZIlGxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:08:32:1c:30:fb:12:93:6e:da:37:68:84:29:a4:b8:f5:
         1f:b2:ef:da:1e:40:67:e0:c4:f2:65:f5:81:5d:8e:74:82:11:
         ae:1a:13:f5:0d:1f:28:bf:36:ea:a3:13:b3:15:1a:99:dc:7f:
         1a:5f:f0:3b:37:04:14:98:6a:bc:fb:a8:44:7e:d4:8c:59:fd:
         02:5f:32:ad:25:52:33:99:e7:60:37:fd:da:c8:f9:70:64:19:
         47:96:1c:c1:e4:b3:4d:dd:90:5f:40:64:c3:d3:86:17:f8:f8:
         18:f5:32:fc:b6:58:c2:ab:45:1b:83:31:60:be:1e:22:29:3b:
         e7:db:84:e2:0b:62:0d:fc:9a:d6:b8:5e:e9:48:6e:35:98:4e:
         ec:1a:e0:74:57:e4:3f:ae:00:9b:d6:e9:38:4c:5d:15:75:23:
         54:fd:88:d6:16:04:11:64:93:76:5f:ff:47:3e:c5:60:d3:e3:
         cd:19:c9:f5:fb:5d:24:f0:a0:94:47:41:c6:f3:a9:15:12:3b:
         33:ac:12:07:ee:71:ec:86:2a:75:5a:18:b8:e4:93:db:7d:b7:
         ff:90:29:08:aa:08:7f:f2:64:46:e4:58:d5:1f:30:43:f6:1d:
         3a:44:e0:36:d6:3e:60:c5:57:7f:45:e9:e8:37:a8:87:65:59:
         c1:a9:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----