Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa
File:                     p2be1mJc9rcz1jKSzN-eV2FxCRc.roa (raw, json)
Hash identifier:          Z8XGc7+TjBlR+kx+8559eUshN1AqWHjrEHB/cuqgGSs=
Subject key identifier:   A7:66:DE:D6:62:5C:F6:B7:33:D6:32:92:CC:DF:9E:57:61:71:09:17
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0189D3EE53A2C66B395E4837A8E8E6D53297
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa
Signing time:             Tue 08 Aug 2023 06:55:58 +0000
ROA not before:           Tue 08 Aug 2023 06:55:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205663
IP address blocks:        45.146.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d3:ee:53:a2:c6:6b:39:5e:48:37:a8:e8:e6:d5:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Aug  8 06:55:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a766ded6625cf6b733d63292ccdf9e5761710917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:db:25:72:a5:75:8c:22:fa:d4:39:d7:d4:
                    6d:c9:2e:22:83:ea:14:9b:ce:cf:78:98:61:4b:76:
                    60:94:5a:d8:c9:3e:3e:ff:10:e0:b4:51:e0:de:7b:
                    03:92:9e:d2:ca:67:67:c5:72:8e:cc:50:32:84:34:
                    a1:7c:58:1a:7d:2e:14:22:4a:3e:ca:e3:50:fd:54:
                    88:8d:5e:16:c0:0f:4c:29:6f:31:d4:86:2e:f3:95:
                    23:b1:cc:89:0a:5e:e9:95:75:59:25:75:cb:32:e5:
                    a8:ff:43:8e:07:44:f6:9f:4c:05:ab:d8:e9:8f:fb:
                    1f:69:bd:b7:68:19:a6:0e:f8:d4:dd:c5:03:96:89:
                    b2:5a:80:93:55:43:b5:8b:1b:ae:56:5a:ff:ce:fc:
                    92:2b:54:18:6b:34:18:c0:7f:86:85:f2:a7:b5:fb:
                    f8:c5:5a:b9:e5:85:de:3a:e3:c4:7d:0d:0e:fb:60:
                    9e:9d:26:3c:9f:b3:0a:e5:4b:18:78:32:8f:ce:6b:
                    3a:f4:29:fe:9b:43:fd:ef:28:f3:d6:70:4a:53:de:
                    c2:ab:8d:6e:d4:39:f8:bd:f7:67:33:12:ef:ae:61:
                    0a:68:73:cb:d0:04:f6:ba:a1:41:4a:8b:4b:17:1c:
                    08:ed:6e:6f:d6:14:20:97:5e:0a:3e:88:8f:7f:65:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:66:DE:D6:62:5C:F6:B7:33:D6:32:92:CC:DF:9E:57:61:71:09:17
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/p2be1mJc9rcz1jKSzN-eV2FxCRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:0f:61:24:8f:37:0e:2c:92:88:d9:3b:10:3f:b5:39:02:
         e7:45:0c:77:53:49:b4:93:e7:5d:7c:7c:8b:39:f2:0f:49:c4:
         47:02:a9:f3:de:d8:70:b5:d4:23:d2:3c:df:d5:d5:0b:ef:93:
         db:98:d6:25:d4:a1:f9:2b:95:63:b7:15:f7:65:ea:ca:c0:c3:
         2b:4c:cf:a8:f3:eb:a4:6d:98:cf:06:c1:d2:49:69:53:b5:c0:
         4b:da:cf:97:1a:fb:0a:cd:c2:0c:d5:ba:d3:7a:88:a2:f3:b3:
         ce:5e:fd:77:d0:b9:58:eb:a3:ed:39:fe:42:a6:5c:2a:0d:7d:
         70:e9:38:9b:e5:7e:1a:f8:cb:48:1d:a3:d3:a1:49:85:d7:35:
         ac:9f:04:b6:fc:4c:61:54:b8:04:eb:f1:ce:1f:8a:40:22:4f:
         a2:9c:0d:25:ef:76:25:ac:39:d6:7a:51:ce:93:e9:a5:73:e0:
         48:b0:ce:d7:a3:97:8f:96:65:99:90:8d:28:87:0b:f0:0f:c2:
         0d:9e:97:55:c0:3c:5b:44:41:00:19:b2:78:cf:32:e0:d4:ef:
         83:68:fc:43:47:92:27:31:be:bb:82:41:a1:18:b6:e9:f0:d4:
         30:9f:dc:e7:4f:0f:93:89:8f:d4:a9:a3:69:a8:39:1b:8c:5a:
         56:31:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----