Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa
File:                     _6pPLaE9wOBzGjrLG46O8gjOTeo.roa (raw, json)
Hash identifier:          OY/f6ccFTFBgePrPMopYP9HQUY2OyQDmw3tAnRZ/YO4=
Subject key identifier:   FF:AA:4F:2D:A1:3D:C0:E0:73:1A:3A:CB:1B:8E:8E:F2:08:CE:4D:EA
Certificate issuer:       /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial:       0185A655461C5D6D074494E1A5931D31256C
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa
Signing time:             Thu 12 Jan 2023 14:14:44 +0000
ROA not before:           Thu 12 Jan 2023 14:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50939
IP address blocks:        45.134.160.0/22 maxlen: 22
                          2a0f:4480::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a6:55:46:1c:5d:6d:07:44:94:e1:a5:93:1d:31:25:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
        Validity
            Not Before: Jan 12 14:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ffaa4f2da13dc0e0731a3acb1b8e8ef208ce4dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:0c:29:90:a1:a2:8b:5c:55:1b:b7:bc:dc:
                    c9:d3:8d:88:e2:bd:3b:20:90:fb:7c:7f:da:e5:3e:
                    e6:2d:fc:5b:ef:c9:83:02:77:8f:44:20:d5:48:7f:
                    64:bc:7d:77:11:25:21:48:cc:4a:a4:1a:58:25:85:
                    94:d8:b0:bc:a3:2a:3b:e0:fb:8f:cc:ee:47:e0:88:
                    99:b1:e9:6e:68:00:63:ed:a2:1c:7b:8b:3b:99:c0:
                    46:62:66:e2:c9:f9:ab:46:ac:7d:1f:40:e2:7c:80:
                    d2:d9:74:3c:ad:0c:17:cd:2d:28:c5:a3:b4:61:36:
                    b3:03:ba:49:19:d9:a6:52:52:bf:e6:9f:56:e7:d6:
                    8d:67:58:56:2b:64:ac:d9:bb:5d:57:6e:4f:9c:cb:
                    ee:d4:84:e6:d6:11:b0:66:3c:e9:cd:65:36:a4:d7:
                    dc:b6:28:22:a1:a9:9f:83:12:42:b9:a0:06:c7:3f:
                    9c:56:d6:08:5b:fe:c9:37:33:14:e0:55:a9:06:b9:
                    b9:64:8e:e2:66:02:3f:d7:5b:1c:45:f3:22:f4:83:
                    1b:0d:6b:df:ad:66:74:e1:a5:ca:72:74:c3:56:44:
                    90:0b:2b:33:c2:9f:bd:d4:f8:d9:19:2c:0d:54:97:
                    1e:25:0e:77:3a:bd:7b:90:7b:66:f7:fd:e3:0c:4d:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:4F:2D:A1:3D:C0:E0:73:1A:3A:CB:1B:8E:8E:F2:08:CE:4D:EA
            X509v3 Authority Key Identifier:
                keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/_6pPLaE9wOBzGjrLG46O8gjOTeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.160.0/22
                IPv6:
                  2a0f:4480::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:41:4c:dd:58:68:73:b5:f6:6b:cd:5a:a6:87:7f:1c:52:32:
         6b:bd:47:6d:96:df:0b:57:4b:29:6f:db:0a:bd:8e:8f:5c:32:
         35:af:8e:38:bf:af:b4:ee:b4:ef:58:f2:32:6f:df:45:8e:45:
         5f:77:48:ce:68:f8:b9:ee:f8:cd:56:75:7c:71:20:26:83:37:
         01:0d:af:24:ad:9f:46:ec:93:38:ca:2c:03:86:e2:4f:a5:8a:
         f3:fa:e7:cc:7d:55:c5:c9:b4:2c:43:27:fb:6c:e8:8d:27:5b:
         e7:ad:68:85:e0:85:2c:c0:a9:a0:51:10:78:12:7b:a3:af:2a:
         be:0e:c5:c0:97:a4:44:c7:8d:e6:fe:66:d1:bb:70:c6:4c:f4:
         39:fb:5a:08:70:9a:e2:4f:9e:d0:b3:d6:2c:55:62:dc:68:68:
         7e:56:7e:d3:cb:ba:28:ee:d8:9d:b2:d1:17:f7:f6:fa:bd:51:
         51:7c:74:38:d1:a0:ba:33:4c:90:e2:11:84:70:6a:69:d7:69:
         36:bc:a4:c8:90:50:c3:1e:a7:dc:5e:96:9c:83:53:6c:4e:8a:
         0b:41:58:9f:22:49:03:4d:bf:21:c1:04:4e:e5:ab:40:11:af:
         60:57:2e:eb:92:d0:c3:0a:8c:38:0a:4b:1b:0f:19:eb:eb:28:
         31:96:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----