Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa
File:                     15GDVdn5QzPIMbOCJJkEx9sdI34.roa (raw, json)
Hash identifier:          CoN9DnK/u6LUPHN/pMR/4EC8MBe5NFxe3UglwGXbu04=
Subject key identifier:   D7:91:83:55:D9:F9:43:33:C8:31:B3:82:24:99:04:C7:DB:1D:23:7E
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       0187C32346747F26318DAAC55F8F9A9196AF
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa
Signing time:             Thu 27 Apr 2023 14:34:41 +0000
ROA not before:           Thu 27 Apr 2023 14:34:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        45.145.154.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c3:23:46:74:7f:26:31:8d:aa:c5:5f:8f:9a:91:96:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Apr 27 14:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7918355d9f94333c831b382249904c7db1d237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:5a:9d:68:bb:39:a3:e2:67:3a:fe:66:ee:
                    4a:a4:ac:0a:12:58:bf:80:bf:4f:b6:7f:67:59:1b:
                    08:26:05:28:6f:62:12:ba:f0:8a:cf:f7:d3:8d:fd:
                    ef:d4:33:de:58:e6:15:15:cc:dc:da:1f:80:70:00:
                    32:41:bf:12:42:13:c6:b6:61:2d:33:df:3b:64:82:
                    9a:45:b5:c1:b5:12:c0:eb:5c:78:f2:ba:30:41:d4:
                    29:33:fd:5b:70:cb:ce:78:33:b6:bc:2b:b4:46:ca:
                    79:f2:a0:f2:d9:9c:8b:4e:c3:4c:b6:3c:38:91:b2:
                    d2:48:ba:4d:f7:08:05:25:7f:62:02:54:ba:91:5b:
                    8d:35:39:19:11:5a:2d:74:6a:20:9b:2a:d5:98:ba:
                    cb:31:6f:85:25:ae:80:97:c6:0a:e8:4a:c0:f3:02:
                    09:61:e8:18:12:50:c1:ab:46:e8:6d:28:43:26:47:
                    9a:ce:bb:d0:15:38:51:f9:ec:49:1e:43:56:8b:07:
                    67:4c:87:24:fb:29:82:58:c7:2f:04:54:3c:57:29:
                    1e:91:31:7f:72:07:5f:bd:3b:eb:17:e0:cf:60:3d:
                    77:8c:0b:4f:ed:51:82:7c:fa:7b:c3:2e:17:31:03:
                    3d:27:fd:bd:0d:cf:16:06:88:1e:77:33:0d:74:0b:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:83:55:D9:F9:43:33:C8:31:B3:82:24:99:04:C7:DB:1D:23:7E
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:0f:dc:65:ca:13:9e:4f:ef:ed:c5:a3:b0:39:31:91:18:
         5d:63:49:69:46:bd:56:e9:44:16:f4:c6:59:9a:4a:45:a1:4b:
         5f:1f:9b:7b:cf:98:bf:8b:07:6b:37:ee:8d:7a:d7:11:40:24:
         a5:3d:d6:e6:35:8d:8b:6e:1d:11:40:f9:72:70:7f:d6:9b:03:
         cf:61:2b:6d:f8:56:c8:f6:12:13:88:2d:ea:51:33:65:e6:3a:
         dd:d6:93:33:a1:9a:03:54:21:2c:d7:e2:b8:66:6b:98:a6:61:
         72:4e:32:c6:ec:77:ab:d6:bf:09:95:f3:9d:20:93:2c:40:8d:
         44:6c:e2:0b:18:87:92:9d:4b:0b:24:5b:a8:34:ee:1e:b3:5d:
         bc:37:ec:1a:72:53:a7:70:e7:ed:05:69:fd:6c:fd:15:6e:42:
         c1:32:d3:8c:25:a1:42:69:af:a4:58:b0:f8:67:10:48:b7:a5:
         9e:21:4e:31:a2:02:45:6a:c7:cf:2e:77:8e:4c:d8:42:56:78:
         0f:ac:fe:10:85:8a:17:c6:d8:ff:05:33:7b:0e:b4:0f:68:f7:
         1b:76:06:05:80:41:9a:83:77:23:9f:db:16:21:cd:9c:dc:ee:
         1e:5c:fd:03:0b:8d:c4:8e:47:e8:50:48:85:1d:c7:40:1c:65:
         8f:83:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----