Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa
File:                     mwpyBu2qynGcXm_BwUQNgbCvEP0.roa (raw, json)
Hash identifier:          wfyU2goxth7kx5hVZ79ALeDcGC0VS7HGTD31sc77X5k=
Subject key identifier:   9B:0A:72:06:ED:AA:CA:71:9C:5E:6F:C1:C1:44:0D:81:B0:AF:10:FD
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       01856F823D10ECB137104BF8ADBAC0A4349E
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa
Signing time:             Sun 01 Jan 2023 22:44:44 +0000
ROA not before:           Sun 01 Jan 2023 22:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35085
IP address blocks:        45.12.184.0/24 maxlen: 24
                          2a0e:b700::/32 maxlen: 48
                          2a0e:b702::/32 maxlen: 48
                          2a0e:b701::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:3d:10:ec:b1:37:10:4b:f8:ad:ba:c0:a4:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jan  1 22:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b0a7206edaaca719c5e6fc1c1440d81b0af10fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:ff:97:3a:3a:97:64:4c:f0:13:d8:9f:df:
                    52:70:bc:ec:67:23:b4:4c:04:e5:64:25:a9:36:78:
                    95:70:7f:aa:56:51:32:e2:7d:d9:56:f5:02:01:a1:
                    ed:cb:1e:cd:df:bb:da:80:c6:76:56:23:35:aa:89:
                    30:33:50:d3:80:6c:3b:ad:e4:5d:7d:70:60:14:8e:
                    9c:2c:fa:13:40:a0:82:8a:3a:ed:b6:61:33:0f:9e:
                    cd:96:49:ca:14:81:9c:f0:8d:7c:af:f6:2e:0d:d3:
                    e7:81:4c:3f:ab:0e:76:7a:fd:b2:51:ad:a5:04:f6:
                    ae:93:f7:0a:7c:d5:ed:21:5d:0b:a9:00:b1:39:f0:
                    38:5b:b0:dc:e5:44:73:8e:c0:2b:01:47:cf:0e:1a:
                    37:43:f9:0c:ae:32:d8:06:4d:4d:20:84:f8:2b:9f:
                    8d:c1:b2:6f:1d:a0:f9:8c:fc:6f:8a:aa:9d:26:6a:
                    8b:08:1d:33:80:b0:33:5d:2f:71:ea:ec:d2:e8:d7:
                    1f:14:3d:f1:66:2d:6b:80:b2:e6:63:f7:35:a8:8b:
                    41:55:c1:8c:d3:47:82:65:59:54:80:ef:fc:6e:5f:
                    ef:0a:ab:7d:25:7d:1d:fc:e6:01:b4:1c:ba:a5:48:
                    61:e4:8e:7e:70:a8:23:fa:b7:9e:53:ad:6b:62:b4:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:72:06:ED:AA:CA:71:9C:5E:6F:C1:C1:44:0D:81:B0:AF:10:FD
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.184.0/24
                IPv6:
                  2a0e:b700::-2a0e:b702:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:25:7a:1b:42:93:74:21:87:8b:da:cf:11:fe:e7:e6:44:
         2e:58:6e:28:74:dd:ea:bb:89:94:34:62:80:b3:4c:97:1e:a1:
         99:09:ff:99:3f:fb:83:b1:29:cb:98:97:77:96:b1:57:38:5c:
         c7:f7:d5:7f:7f:cf:98:f4:bb:cb:57:64:2d:7c:9b:bc:db:11:
         95:a4:9c:1a:d3:84:99:51:fa:33:b2:09:25:86:43:e9:70:25:
         85:52:99:2a:c0:98:4d:1e:63:4f:4f:f8:73:ee:22:b5:85:0f:
         02:5b:61:93:00:67:bf:1b:5c:9e:62:4e:24:41:05:c7:c0:da:
         7e:43:19:ff:aa:da:46:d8:82:4c:99:e4:3a:cb:f7:7c:90:40:
         31:42:e5:30:83:13:6f:de:e7:91:f1:63:6d:bf:87:1b:b7:f1:
         d2:0e:01:7c:29:c7:06:d0:89:f2:aa:1f:86:b7:4e:4b:92:c4:
         da:a3:8e:34:2c:0d:1f:f6:76:a5:6c:37:e8:a9:78:33:01:1f:
         d6:f6:64:0a:c2:86:8f:23:8c:65:8b:73:9c:b8:83:87:6d:a9:
         e7:31:4b:34:77:5e:bc:22:f4:34:b0:65:60:e6:56:b3:17:f6:
         72:9b:41:11:33:04:10:0a:7c:93:e6:b6:8d:78:d8:46:8e:c0:
         ad:7c:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----