Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa
File:                     FS48l_kp-MUUF3BG_xj3kXvu9uA.roa (raw, json)
Hash identifier:          GPi6zLupxHR6kLsB4xmsFaMrLTPb4hVK/QiTIyP50sU=
Subject key identifier:   15:2E:3C:97:F9:29:F8:C5:14:17:70:46:FF:18:F7:91:7B:EE:F6:E0
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       018B38DBBBD719FA228565412E8D564A4CC5
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa
Signing time:             Mon 16 Oct 2023 14:20:06 +0000
ROA not before:           Mon 16 Oct 2023 14:20:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        45.150.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:38:db:bb:d7:19:fa:22:85:65:41:2e:8d:56:4a:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Oct 16 14:20:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=152e3c97f929f8c514177046ff18f7917beef6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:d9:af:a0:7a:ef:ef:8b:c5:28:b2:56:94:
                    6d:f3:76:bd:eb:39:30:77:f9:5d:a5:93:d4:66:75:
                    f7:a8:96:2f:2e:d1:ba:52:5f:df:fa:38:95:6f:3c:
                    f5:3b:3d:ec:64:cc:f4:f6:42:d0:42:44:77:c2:b8:
                    ab:4b:b2:be:f7:8e:12:e9:f3:b3:4b:1e:31:8f:d3:
                    28:d7:d7:04:c2:4d:e2:59:ca:c2:02:c3:cb:8e:09:
                    6e:52:06:00:63:4a:05:38:54:66:1b:81:8b:0a:ac:
                    da:15:43:12:f5:d4:aa:3b:d9:63:ee:a0:22:8f:32:
                    01:2e:72:21:ca:19:e9:d3:20:28:31:65:98:2f:dd:
                    87:d0:c1:cb:c1:ec:4a:00:a9:97:d3:db:0f:e5:f6:
                    bc:21:a8:fc:bc:b9:e7:7f:57:48:1f:28:5d:6b:0d:
                    49:60:3a:a1:c8:02:df:53:c7:c7:7d:61:c7:b4:35:
                    65:d6:4b:bc:8d:c0:7b:8a:ec:aa:0c:e1:f8:3e:dd:
                    c9:95:4e:9e:9c:00:07:be:03:e2:f8:d6:c4:34:f4:
                    04:7e:3d:ad:29:d8:48:18:63:a0:ba:ba:c2:78:eb:
                    cd:c3:38:72:cb:93:aa:49:f3:2a:c5:e6:c9:61:2e:
                    38:e3:45:f8:bb:04:67:16:84:60:ee:b0:46:f7:63:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:3C:97:F9:29:F8:C5:14:17:70:46:FF:18:F7:91:7B:EE:F6:E0
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:84:e6:58:3e:c3:ed:41:de:5a:f9:30:69:78:b6:4c:7f:
         be:3d:63:f2:a4:46:c2:d0:c6:8e:ca:a1:4d:02:bd:e2:2e:98:
         9f:21:92:70:be:88:fb:01:de:a8:d8:5d:a3:c7:b1:34:d3:76:
         dc:89:2f:5e:70:45:08:8d:0c:3e:da:d3:a9:2a:06:79:e6:b0:
         7c:3f:12:d0:10:54:01:81:b2:23:71:ec:fe:4b:31:13:7a:af:
         c7:25:4d:ca:1f:c6:e2:ad:f2:53:01:7c:9f:00:0f:e1:38:ff:
         5d:37:69:b4:b2:4d:bd:0d:4a:3b:8f:34:fb:e3:93:03:bc:d5:
         51:5e:81:ec:1d:14:cc:fb:6a:20:bc:0f:94:77:d7:a7:b8:9b:
         ad:e6:74:97:9e:5d:eb:a8:e2:86:8c:d7:df:5d:9b:f8:55:a5:
         17:ca:64:f6:87:3e:56:61:a1:1d:52:1d:b8:0e:39:a6:f4:52:
         36:4d:01:f5:a7:bc:95:11:f8:76:5c:c0:23:2a:08:34:31:78:
         45:48:5b:8d:fc:81:6f:8b:55:64:cd:a5:73:e6:29:b1:07:21:
         e8:00:b6:40:5b:23:0e:3a:2f:c7:6b:35:ea:f8:f6:3a:d9:13:
         0a:24:c5:1c:35:26:a7:fc:08:5f:50:2f:69:07:ee:b7:a2:9b:
         9e:95:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----