Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa
File:                     OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa (raw, json)
Hash identifier:          yH7zsvMnRup11+4hKAJK+PqCGME/y9girrBAoG1U1MU=
Subject key identifier:   39:2D:58:F2:8A:1F:61:E3:3E:74:16:A5:92:2E:51:8F:77:4A:8D:B4
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018AC0B451CF00E0A8134FAFB0B53B3E718D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa
Signing time:             Sat 23 Sep 2023 06:22:37 +0000
ROA not before:           Sat 23 Sep 2023 06:22:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        45.141.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:c0:b4:51:cf:00:e0:a8:13:4f:af:b0:b5:3b:3e:71:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Sep 23 06:22:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=392d58f28a1f61e33e7416a5922e518f774a8db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:f2:9e:ba:1c:6c:e1:b5:a9:be:90:56:90:
                    51:d9:cf:34:1b:f5:ef:e9:49:90:1c:b8:38:7b:52:
                    f3:2c:c8:dc:21:68:9b:bd:1e:46:d5:3a:19:2f:d9:
                    68:7f:6d:c1:03:6f:bb:c0:db:67:47:c3:e4:b0:29:
                    91:9e:fa:0e:9d:eb:03:c1:fc:8f:c5:15:dd:24:f1:
                    0b:8e:3a:db:d6:bc:72:b9:c7:1a:79:7b:8c:b8:3f:
                    bb:0f:6d:bb:66:0d:df:3f:dc:c3:d5:a9:0b:88:3c:
                    68:5b:fe:4d:0f:7e:6f:51:c0:61:b2:1f:c6:60:05:
                    5c:eb:12:bf:31:e7:a1:f4:9f:17:3b:8d:31:39:09:
                    c4:15:d4:72:3b:c0:e2:f3:24:8e:88:42:85:60:b8:
                    95:62:60:9d:bf:7c:b4:37:54:77:2d:ce:4d:b7:3e:
                    9e:c1:ea:ab:88:96:ed:33:4d:32:88:fe:52:22:3c:
                    3c:9c:f8:24:8f:86:d3:19:ff:d4:fa:82:c4:44:c6:
                    20:9a:c6:42:37:c7:7e:81:86:f7:90:39:2f:8e:54:
                    a1:11:6a:2f:13:d9:33:ad:0b:f4:b5:28:d8:1c:bb:
                    64:71:9d:92:1f:f0:3a:ec:34:a1:3c:ef:2d:57:3e:
                    27:b3:8f:a3:1e:1d:5b:73:1e:4f:d1:09:17:a6:ff:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2D:58:F2:8A:1F:61:E3:3E:74:16:A5:92:2E:51:8F:77:4A:8D:B4
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:3e:d8:e4:69:8b:c3:e6:a8:37:ed:d3:c1:d4:c7:d3:9e:
         3a:3a:2e:7c:23:b3:08:e1:c7:44:12:c6:a6:63:86:2b:bc:7b:
         cd:4e:b1:62:88:c4:37:c4:a7:b7:24:17:84:ff:c5:1d:7f:4a:
         52:39:8f:32:23:45:22:0b:6f:72:bd:1e:eb:6c:be:a7:ba:ed:
         3b:1b:44:fc:8f:e0:d9:1f:b9:c4:f0:72:5b:35:bd:61:b9:f1:
         47:22:c9:99:8a:77:a4:87:bc:83:fd:fb:6f:8f:f6:80:d2:45:
         f1:53:1e:46:bc:be:2d:1d:c0:7e:04:5d:49:23:9b:4f:6f:c7:
         ef:2f:ae:2f:c2:49:d1:c2:03:ad:f5:12:bd:40:f4:5f:55:4f:
         3f:b3:d5:12:4e:a7:20:f7:ff:39:39:8d:d8:e8:f1:d3:3b:ec:
         4c:09:8f:0e:18:8c:a9:0c:94:5a:68:d4:5b:1a:1d:a9:08:8b:
         92:d7:55:e5:3c:85:c8:2d:74:32:d9:b6:4d:40:0f:bc:bf:1f:
         a9:1f:22:59:8a:bd:67:f3:95:2d:d4:bc:f2:4d:bf:6b:c4:a8:
         f5:48:dd:23:7d:fe:d9:3e:d5:71:bb:71:17:8c:e2:4e:a7:1f:
         f8:e7:40:29:0a:08:51:51:ce:c3:e6:56:4a:7a:40:c1:0a:89:
         c1:81:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----