Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kw2QVOyH3Z8W2i2uOJdD3tc30Zs.roa
File:                     kw2QVOyH3Z8W2i2uOJdD3tc30Zs.roa (raw, json)
Hash identifier:          +Y+oLmL3+PmDbXoVDk7vPtsziUy6WelbiUEd60GyVRM=
Subject key identifier:   93:0D:90:54:EC:87:DD:9F:16:DA:2D:AE:38:97:43:DE:D7:37:D1:9B
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       018572D5CFFD4B0E485FA7A6E3E1EAD36E48
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kw2QVOyH3Z8W2i2uOJdD3tc30Zs.roa
Signing time:             Mon 02 Jan 2023 14:14:53 +0000
ROA not before:           Mon 02 Jan 2023 14:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210837
IP address blocks:        45.151.234.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:d5:cf:fd:4b:0e:48:5f:a7:a6:e3:e1:ea:d3:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jan  2 14:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=930d9054ec87dd9f16da2dae389743ded737d19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:bb:62:8c:26:29:b0:7b:ad:cf:68:dd:12:
                    81:5a:5c:b8:22:27:ac:61:dc:2d:2a:1a:ef:aa:61:
                    0e:5d:4a:71:10:09:72:3e:69:d2:cf:4d:84:c5:0f:
                    01:e0:71:3f:f7:b8:89:28:11:5c:2d:89:21:b7:ae:
                    17:94:84:c7:5a:72:d3:7f:1e:4c:33:7f:a0:f6:f2:
                    a2:f8:5c:7b:78:9c:6a:4b:f0:87:c9:94:33:14:7c:
                    a9:9d:a5:49:9b:2a:0f:1d:02:7a:99:7a:e5:0f:94:
                    a7:26:de:6c:77:49:64:80:17:16:33:2f:5e:18:b7:
                    0e:d4:3a:5a:92:0b:99:03:ed:9f:d3:9b:b7:19:1e:
                    8b:0f:29:a9:aa:b9:0b:dc:29:68:cf:99:bf:ff:94:
                    f4:9a:f6:51:49:c7:9b:24:09:70:1a:3b:38:82:1b:
                    65:ca:a5:90:ec:42:2b:53:b9:96:99:d8:96:69:27:
                    eb:e0:2d:5c:14:31:e3:3f:5e:97:ca:78:55:5f:69:
                    2f:84:f0:26:09:78:9f:1e:4f:1e:28:92:bf:95:12:
                    8c:b8:68:1c:9b:ea:5b:a1:4e:a4:02:52:00:a5:b1:
                    73:66:09:7d:fe:b5:d1:03:17:ea:c1:7a:08:de:43:
                    c1:e9:56:4b:a3:03:25:08:24:14:27:87:fd:84:2c:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:90:54:EC:87:DD:9F:16:DA:2D:AE:38:97:43:DE:D7:37:D1:9B
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/kw2QVOyH3Z8W2i2uOJdD3tc30Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:92:21:58:2c:82:4a:f5:e4:a3:f2:7d:3d:e3:ed:ad:41:6c:
         bb:81:04:b0:1e:5f:7e:01:ee:a8:e7:4b:ba:03:b8:95:25:46:
         97:99:62:46:ba:ff:dc:0a:bc:9c:23:d3:1a:42:a0:a9:89:14:
         82:4b:ca:dc:c3:12:b0:5e:40:82:50:dd:3b:d3:b4:b7:86:47:
         12:e4:96:10:a8:23:88:a7:79:2b:c7:6a:73:7b:b0:54:7f:c2:
         3f:d8:6a:5e:ea:a6:5a:ff:e3:d4:6c:94:22:88:62:f0:73:d1:
         f4:c4:cb:ed:06:aa:ef:54:09:96:f4:a0:27:39:56:1f:f7:54:
         8c:74:15:e0:7b:cd:85:30:d1:37:f7:be:ad:83:c1:8d:2f:80:
         a1:c9:cc:17:ee:8d:37:bf:7d:80:7c:f7:5f:d0:b0:a7:7a:38:
         ba:54:ed:ff:a2:38:e0:38:58:bb:20:99:16:5f:68:19:43:f0:
         45:e6:6f:fc:16:f7:44:15:b5:1a:d2:de:6a:53:50:2f:a8:b0:
         eb:25:1a:c2:f5:01:c2:94:50:bf:2e:4d:3f:b8:4f:6a:50:a5:
         9c:2c:c9:68:da:8d:89:42:7a:3b:6c:3f:b7:94:19:32:8f:e5:
         e9:82:e0:79:56:07:a5:11:47:e8:47:bf:c4:b3:23:a3:0b:fc:
         e0:d4:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----