Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/fXGMOChTN810kkF3LFu0EKIT7Ng.roa
File:                     fXGMOChTN810kkF3LFu0EKIT7Ng.roa (raw, json)
Hash identifier:          sGasNmknJ7jRDLM7/mmE3gPwU+gz+qsByJj1kbbl3uI=
Subject key identifier:   7D:71:8C:38:28:53:37:CD:74:92:41:77:2C:5B:B4:10:A2:13:EC:D8
Certificate issuer:       /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial:       0185D21243CA072C3BDE4636F06300928CCB
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/fXGMOChTN810kkF3LFu0EKIT7Ng.roa
Signing time:             Sat 21 Jan 2023 02:04:50 +0000
ROA not before:           Sat 21 Jan 2023 02:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212027
IP address blocks:        45.143.196.0/22 maxlen: 22
                          2a10:e780::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d2:12:43:ca:07:2c:3b:de:46:36:f0:63:00:92:8c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
        Validity
            Not Before: Jan 21 02:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d718c38285337cd749241772c5bb410a213ecd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:c1:ca:58:e2:61:45:8b:60:27:fa:2e:db:
                    c2:43:39:a2:72:ee:48:12:8a:17:47:91:6d:ba:4f:
                    da:bc:06:f9:ce:2f:92:a2:a9:ac:3b:df:d7:f7:5f:
                    e9:96:5b:91:ec:65:03:17:4f:99:09:14:e0:f1:b6:
                    0c:cf:b0:08:b4:47:93:2c:ad:3f:4e:55:40:b1:90:
                    d0:37:7f:34:72:db:c7:03:11:c5:73:08:34:bb:a7:
                    1b:9f:d1:a2:f8:45:03:a2:6a:a1:0b:7e:d5:69:6f:
                    f6:ea:99:b9:a7:c1:97:fc:fd:8a:bf:d2:4f:da:ca:
                    6e:1c:2b:1d:35:b3:c0:3f:16:f0:6a:fa:d2:c3:a7:
                    b8:4e:be:c8:e1:57:93:ad:61:6a:f8:fe:b8:71:8f:
                    0e:93:99:b6:92:11:5c:ef:f6:42:d1:94:48:46:d0:
                    f1:b5:2b:81:d9:98:eb:3f:b9:cc:3c:6b:aa:39:89:
                    1b:85:a3:66:86:26:54:96:be:1c:02:07:8c:43:71:
                    d1:a5:2e:5e:5d:46:3e:0b:06:6a:5f:2a:65:f9:9a:
                    9b:32:04:0a:65:63:6b:9b:6b:30:98:d8:25:d5:9e:
                    10:c3:d7:e9:1c:53:83:97:97:51:8c:19:1d:31:4a:
                    19:05:2c:dd:11:0a:42:37:be:16:4f:96:a8:11:23:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:8C:38:28:53:37:CD:74:92:41:77:2C:5B:B4:10:A2:13:EC:D8
            X509v3 Authority Key Identifier:
                keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/fXGMOChTN810kkF3LFu0EKIT7Ng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.196.0/22
                IPv6:
                  2a10:e780::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:24:d7:be:92:e1:19:10:56:1a:05:26:83:34:00:47:f0:
         6e:69:a0:6f:24:89:88:56:d1:06:b4:f8:68:1b:5f:46:07:da:
         4a:39:9b:c6:af:e3:23:13:1e:7c:ea:0d:ed:e4:93:4f:9b:12:
         b4:e5:6e:0b:6a:4f:41:17:3d:ee:c2:10:41:d7:b1:4e:32:42:
         9a:0a:56:0d:26:b0:8b:60:05:43:b6:c8:12:ce:36:54:ff:1b:
         93:17:4d:2d:e6:85:c7:e7:32:80:19:1c:39:a0:2c:d1:ac:ff:
         c2:9a:ed:00:a4:ab:19:29:00:de:0b:bf:9b:39:d7:41:90:b4:
         d9:78:c5:08:3d:e8:e1:04:ce:c7:f5:47:c6:7c:02:b9:56:06:
         ad:da:b4:40:ca:0d:66:f0:97:bb:cb:53:6c:67:81:61:2e:e6:
         93:00:d2:58:13:9e:27:3d:57:de:6e:52:64:b9:40:32:f3:7d:
         fd:34:3b:23:34:2a:15:42:f3:d4:54:a6:98:83:78:bb:c6:d6:
         64:0e:79:99:24:d5:ff:c2:b6:f6:7a:8c:41:b0:c6:9c:7a:96:
         27:64:27:8e:05:05:f6:15:cc:3c:3d:a4:29:6f:03:80:91:27:
         92:50:24:f2:ca:1a:17:c4:db:29:25:64:49:8f:60:90:e9:0a:
         f9:5a:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----