Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa
File:                     7MxjVxz76TW6tF2_V-JzMkGY8zY.roa (raw, json)
Hash identifier:          70LGj6UTR82bFiaSYjJvrx1qT4l6BBOaDjwTZqSAn/U=
Subject key identifier:   EC:CC:63:57:1C:FB:E9:35:BA:B4:5D:BF:57:E2:73:32:41:98:F3:36
Certificate issuer:       /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial:       018570E76C62D5412DF05D9221583C4BA8C1
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa
Signing time:             Mon 02 Jan 2023 05:14:52 +0000
ROA not before:           Mon 02 Jan 2023 05:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48451
IP address blocks:        94.124.40.0/21 maxlen: 21
                          2a00:f78::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:6c:62:d5:41:2d:f0:5d:92:21:58:3c:4b:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
        Validity
            Not Before: Jan  2 05:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eccc63571cfbe935bab45dbf57e273324198f336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:a3:00:5b:47:b9:2a:8d:29:25:3b:6d:31:
                    d8:a2:ef:f1:88:4b:4e:10:09:40:28:56:a1:b6:2a:
                    cc:68:bd:a5:22:00:f2:a2:98:de:76:b9:f2:2d:6a:
                    e8:95:8b:2a:01:a7:d5:7e:f6:c4:25:ed:9e:f3:7f:
                    b1:30:29:d7:f8:97:a4:8d:5b:10:93:65:c2:9f:d5:
                    08:d3:56:d7:81:45:35:00:2b:45:e9:4c:9f:96:aa:
                    d8:a1:3d:87:2d:47:8c:f5:ee:f5:e8:80:9f:50:c9:
                    34:81:31:39:e7:b3:9f:1a:ad:b4:58:70:55:60:4c:
                    92:21:74:af:b6:4b:33:d2:8b:d7:8d:6c:25:c3:cc:
                    c0:b2:cf:94:c7:7a:24:e2:c7:a7:94:fd:f4:c3:c0:
                    fc:2e:c0:7a:b2:25:b9:db:3c:5d:34:85:75:7a:ea:
                    5a:2a:a7:2f:95:5b:90:06:76:f9:d1:4f:0e:16:7b:
                    77:8c:3d:b2:de:22:b0:3a:c6:27:42:6d:04:9a:5e:
                    3e:f3:05:5a:03:f3:6b:32:04:89:07:03:fa:11:98:
                    c4:77:75:27:07:d1:1d:24:db:3b:69:3e:f9:9b:7a:
                    e8:6e:c2:13:77:96:b7:ea:fe:f6:5a:6f:db:15:41:
                    93:37:85:cd:6a:10:12:2b:7e:4c:45:27:59:be:84:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:63:57:1C:FB:E9:35:BA:B4:5D:BF:57:E2:73:32:41:98:F3:36
            X509v3 Authority Key Identifier:
                keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/7MxjVxz76TW6tF2_V-JzMkGY8zY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.40.0/21
                IPv6:
                  2a00:f78::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:15:75:72:fe:63:8a:5c:59:05:b2:a2:80:bf:86:06:3e:
         a4:04:2e:1b:62:95:31:ef:33:08:a3:f7:89:19:2f:d5:11:ca:
         dc:47:c7:e3:15:6c:ae:3b:e4:44:ea:e3:08:9f:1a:94:4e:1e:
         ca:e4:cf:65:cb:ac:09:1a:4a:55:bb:29:16:2c:22:77:85:10:
         9c:e9:04:b8:39:ab:09:f6:b1:a0:3b:06:0d:f0:e2:b1:30:30:
         f3:95:88:16:4e:5a:c1:27:b0:7c:bf:67:a3:92:68:c2:a5:74:
         f5:3a:93:fd:54:c8:ba:95:7d:43:15:22:61:d3:d5:42:14:79:
         42:1b:40:34:7a:10:bf:98:bc:a0:80:42:7c:8a:7a:bb:a5:78:
         ec:93:4f:e5:a0:42:bd:2f:a6:be:d7:ce:bf:00:83:57:73:78:
         38:c0:dd:d7:7b:19:ed:f3:2c:4f:b1:87:b1:71:04:d6:5a:f2:
         01:2c:1a:d6:d6:91:4a:9b:67:da:64:64:20:6f:81:57:aa:83:
         db:3a:18:bb:6e:ed:ed:e5:91:8a:82:22:13:ae:7b:ae:86:a6:
         6e:24:e9:53:d1:1b:fc:bb:f2:3e:23:69:98:c4:e0:67:6c:14:
         96:71:9a:e7:5e:3b:d0:55:e0:02:66:e8:ad:9a:f9:37:32:f3:
         ae:ed:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----