Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/WPeGdFba1C-vqqwKqC8NlGppwss.roa
File:                     WPeGdFba1C-vqqwKqC8NlGppwss.roa (raw, json)
Hash identifier:          +cqivo5Z08XLNCHteLROwqRfmQaepA/0KXQyKPZfXS0=
Subject key identifier:   58:F7:86:74:56:DA:D4:2F:AF:AA:AC:0A:A8:2F:0D:94:6A:69:C2:CB
Certificate issuer:       /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial:       01856DD3E90B146AFE9C79E4041D2C13A968
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/WPeGdFba1C-vqqwKqC8NlGppwss.roa
Signing time:             Sun 01 Jan 2023 14:54:42 +0000
ROA not before:           Sun 01 Jan 2023 14:54:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51968
IP address blocks:        46.23.128.0/20 maxlen: 20
                          46.23.136.0/24 maxlen: 24
                          2a10:2880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d3:e9:0b:14:6a:fe:9c:79:e4:04:1d:2c:13:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
        Validity
            Not Before: Jan  1 14:54:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=58f7867456dad42fafaaac0aa82f0d946a69c2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:16:f6:c7:8b:74:cf:b9:f9:63:b9:45:6d:
                    95:8a:1c:08:13:fb:2a:10:de:e2:a4:74:ca:3c:2e:
                    b7:57:34:d0:d0:87:53:29:ba:cd:4f:f8:ed:17:c9:
                    be:1a:4d:f6:22:69:0d:d4:46:53:9b:c0:bb:fa:27:
                    19:fd:78:41:d5:7f:b5:fd:3e:00:93:0a:4a:62:de:
                    3c:1a:c4:4e:bf:fa:82:0a:f2:67:d9:ca:a8:56:58:
                    92:57:0c:a1:de:95:00:d4:6c:3d:b2:29:25:8f:b1:
                    dd:9e:49:27:f0:2a:5b:58:c7:34:00:1f:14:c1:ea:
                    0d:92:5a:d6:63:d7:52:fe:81:c9:73:de:cd:11:f1:
                    1d:e9:a9:70:74:39:da:21:33:5f:c9:b5:dc:c9:58:
                    d9:79:79:fc:15:f6:e3:9d:54:22:09:31:be:29:5c:
                    68:4b:a5:ca:6e:3a:95:6d:6d:7b:de:e3:49:98:c8:
                    dd:c1:53:41:90:20:f9:5e:f6:f9:5f:47:41:83:2a:
                    dc:a1:c2:fc:a9:aa:5c:11:40:af:56:c8:6c:df:2e:
                    98:e9:c5:30:9d:19:e8:8d:81:51:db:75:de:75:53:
                    48:a8:2c:31:3a:95:8b:ac:58:ce:8c:c8:7a:ea:d7:
                    74:55:d9:69:58:1f:c6:82:f1:31:a6:17:ea:1f:6c:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:86:74:56:DA:D4:2F:AF:AA:AC:0A:A8:2F:0D:94:6A:69:C2:CB
            X509v3 Authority Key Identifier:
                keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/WPeGdFba1C-vqqwKqC8NlGppwss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.23.128.0/20
                IPv6:
                  2a10:2880::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:25:cb:c6:30:9f:da:55:68:9a:f5:00:b6:d8:11:c4:38:
         f1:ec:4f:fc:c2:00:c9:96:f1:28:22:03:4f:16:24:16:6b:f8:
         27:02:54:8d:1b:0f:7f:b7:b9:b3:ae:89:d3:ab:dc:0e:29:34:
         d0:c0:e7:4e:1a:0c:40:fa:d8:ec:5d:ee:1b:a7:30:a2:4f:70:
         14:76:99:58:77:5d:58:79:26:dd:69:7d:ee:0d:81:20:9d:65:
         4b:c0:01:ff:9b:d7:73:a3:df:9d:91:8b:13:2a:e0:2c:14:54:
         13:a3:45:b0:e0:dc:40:75:26:61:0c:5d:3b:aa:7e:ba:8e:3b:
         9b:29:d7:c2:0f:5f:02:6c:3a:44:31:ac:9b:2c:9a:39:54:4a:
         74:b2:bc:a8:fe:fa:59:fe:5b:d7:9b:4c:68:d8:80:74:a8:8a:
         03:80:67:7d:9a:98:65:dc:eb:d8:c6:42:7d:db:dc:4f:86:3a:
         66:06:79:36:1b:f9:44:9a:c4:da:f7:23:62:e1:60:7b:86:28:
         34:f1:27:2d:9d:5a:16:75:a7:18:84:09:c1:6d:a5:f3:08:8f:
         b3:7f:f0:1a:87:47:53:24:35:c3:0e:b7:23:b6:bd:58:13:7b:
         eb:7a:9d:aa:61:4e:63:5b:ee:0b:77:16:2b:01:96:5e:31:bc:
         fc:9a:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----