Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa
File:                     51-CqYFnY9JGebppKGrcNdGCMXQ.roa (raw, json)
Hash identifier:          ApAjPTeBXc9mR80JWjHOYMTACe+evMUhj3UsQ3nhOJI=
Subject key identifier:   E7:5F:82:A9:81:67:63:D2:46:79:BA:69:28:6A:DC:35:D1:82:31:74
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       018B2A09A04AB7FAD4E8575A63DC95BC878D
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa
Signing time:             Fri 13 Oct 2023 17:15:55 +0000
ROA not before:           Fri 13 Oct 2023 17:15:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202945
IP address blocks:        45.154.60.0/24 maxlen: 24
                          2a0f:b100:2::/48 maxlen: 48
                          2a0f:b100::/44 maxlen: 44
                          2a0f:b100:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:2a:09:a0:4a:b7:fa:d4:e8:57:5a:63:dc:95:bc:87:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Oct 13 17:15:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e75f82a9816763d24679ba69286adc35d1823174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:d2:fb:9a:d4:97:00:b9:82:8f:c3:7d:d4:
                    f1:cd:74:cf:90:91:51:4f:d9:28:2a:4d:5f:ae:62:
                    f7:39:99:08:8c:62:d1:f8:c8:61:76:0b:af:64:2d:
                    6b:9e:3b:bb:6d:8d:43:c8:a4:8a:da:e4:91:18:5a:
                    29:a3:0e:9a:7f:c8:3c:51:33:db:eb:a0:29:96:7c:
                    20:91:4d:aa:9a:bc:9a:ba:f0:4e:b2:40:f8:e6:87:
                    71:1d:2f:f7:1a:4e:40:a4:04:cf:67:b4:1f:fb:12:
                    c1:be:5b:ab:c4:1a:5a:96:90:24:43:7e:c7:81:29:
                    fb:1d:4b:c9:6a:02:3a:42:4a:d0:39:2d:7e:61:66:
                    bb:ad:b9:7d:07:9c:48:de:d0:af:67:07:a1:19:47:
                    ae:e1:61:e6:3d:0d:50:50:7a:4e:72:66:36:66:72:
                    b2:4b:ad:29:e1:61:fa:71:95:7b:63:9a:16:e7:ce:
                    42:0b:66:61:9b:62:e4:f1:cf:43:90:b9:86:d9:76:
                    5f:58:f7:60:2e:24:4f:25:68:16:fd:19:49:76:cf:
                    39:ae:07:fa:38:2f:34:3c:94:2b:e5:59:fd:d2:69:
                    db:27:77:66:7f:b5:10:b8:b2:5b:cc:57:d7:17:d5:
                    b5:19:00:1e:cc:05:f1:40:5d:6e:76:dd:3b:27:cc:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:82:A9:81:67:63:D2:46:79:BA:69:28:6A:DC:35:D1:82:31:74
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/51-CqYFnY9JGebppKGrcNdGCMXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.60.0/24
                IPv6:
                  2a0f:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:fb:e3:1f:64:6e:a5:3e:24:83:82:15:dd:84:71:d3:82:
         7b:58:01:61:29:64:a9:e9:f4:91:67:4a:cd:d9:87:f6:7e:a9:
         6a:03:cb:78:04:e3:44:7a:df:27:0b:6f:0d:a8:6e:34:cc:50:
         9c:0d:41:67:d6:1d:d1:44:58:51:21:97:45:72:ab:c4:31:b7:
         de:c6:0e:d5:23:16:c6:7c:2a:03:fb:0d:a5:22:38:60:e7:f0:
         0b:dc:f9:fd:a8:65:ea:7a:6b:09:b1:11:64:09:7b:da:30:c1:
         e4:f7:4e:95:ee:e7:18:f8:58:73:5c:c3:0d:a6:e5:9d:ac:d2:
         fd:56:fe:ac:96:be:ff:a9:96:5d:45:a8:61:0e:ce:66:c7:78:
         0f:3a:34:6b:b7:60:91:95:6f:24:22:38:ad:40:c2:de:7d:26:
         cd:2e:f6:01:2c:86:37:21:d3:77:15:fb:7e:7f:34:14:2f:28:
         70:aa:e7:43:a7:7e:db:a6:db:6c:e2:22:7d:04:95:51:57:df:
         8c:bf:8f:d7:ed:5e:58:1c:72:a4:b3:0e:02:35:0b:17:4e:b3:
         4c:a7:17:0b:34:52:5d:b8:79:14:08:79:c7:04:8c:e2:4c:96:
         3b:2e:dc:3b:42:39:27:b9:ab:81:a8:29:0e:55:8a:d5:b7:78:
         f7:13:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----