Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa
File:                     zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa (raw, json)
Hash identifier:          5Kf7LuagcfDSzqRfX2jdRbgGLK9E6IPxVe0K5X/DxQY=
Subject key identifier:   CD:C0:57:22:7F:03:12:C7:7C:A8:20:A2:07:A3:6C:18:41:14:40:FD
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       01857082BAE78F526BF843A9E6EE63FB3E19
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa
Signing time:             Mon 02 Jan 2023 03:24:53 +0000
ROA not before:           Mon 02 Jan 2023 03:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202945
IP address blocks:        45.154.60.0/24 maxlen: 24
                          2a0f:b100:2::/48 maxlen: 48
                          2a0f:b100:5::/48 maxlen: 48
                          2a0f:b100::/44 maxlen: 44
                          2a0f:b100:4::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:ba:e7:8f:52:6b:f8:43:a9:e6:ee:63:fb:3e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jan  2 03:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cdc057227f0312c77ca820a207a36c18411440fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:07:7c:00:ed:2d:a7:be:d7:cc:16:56:e0:
                    3f:70:32:bf:fb:a6:63:14:3e:87:98:48:19:66:46:
                    b2:45:ec:48:13:a9:49:e6:10:c6:de:28:c3:25:bb:
                    1d:a6:be:58:b9:bf:fd:10:ab:02:1a:9f:ec:1b:82:
                    eb:e5:d2:88:df:12:9d:37:8e:b2:79:f7:ac:82:31:
                    36:88:d4:ca:2e:00:db:fb:4a:21:2e:64:a7:4b:2a:
                    44:81:2b:e1:cf:bd:e1:5d:74:3e:9d:a6:ee:ff:b6:
                    c5:a2:c8:76:56:4d:f2:42:65:f8:45:bd:fe:c4:eb:
                    cc:08:a1:62:4c:32:0f:cf:b4:39:f5:e1:35:86:c7:
                    e1:2d:0f:76:df:eb:dd:10:a6:29:cd:b8:c7:f2:50:
                    07:4f:58:a3:a2:a7:ec:1d:3c:e1:a7:e4:1b:22:59:
                    8f:b8:ae:72:68:77:a1:d7:a4:b9:bd:14:41:dd:5f:
                    3a:4c:2b:89:3a:5c:92:0b:ef:1a:08:ad:68:85:3c:
                    e9:39:78:63:30:a3:1c:de:6a:92:06:09:13:4d:53:
                    a9:ed:84:72:45:d9:b2:86:0c:f0:b5:91:78:d7:0a:
                    74:16:13:4c:b3:31:03:62:58:a7:90:36:f9:b0:f9:
                    19:01:37:27:ec:02:8d:f5:ec:66:71:8a:0b:a6:7e:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C0:57:22:7F:03:12:C7:7C:A8:20:A2:07:A3:6C:18:41:14:40:FD
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.60.0/24
                IPv6:
                  2a0f:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:28:e9:a4:2e:7c:1c:fa:f2:c6:b7:a6:d5:32:d2:4b:51:
         6b:3b:98:3a:ec:2d:84:8b:c5:e8:2c:50:36:cb:95:c2:e7:a6:
         0b:1d:65:51:b0:89:1c:3e:fa:c7:7e:60:18:e8:9e:4d:1e:8c:
         57:40:7b:46:3f:02:c9:1c:36:c0:43:22:a4:b4:35:f7:20:b0:
         c4:91:d7:e8:93:f7:85:bd:58:3d:fd:85:2d:5a:f4:82:71:02:
         17:e6:c4:28:81:10:fb:e6:98:ab:70:ad:50:00:09:ea:5f:d8:
         10:c1:69:d0:e6:80:0c:8e:55:a6:38:64:f4:a5:9f:5a:d4:3d:
         0e:11:f6:28:5f:8c:21:49:c3:7b:8c:28:ab:17:c9:50:df:37:
         f6:b4:c4:2a:56:f4:a9:45:c6:68:af:88:2e:26:70:fa:20:91:
         3f:7c:64:5f:45:10:76:02:fc:66:19:66:db:a5:27:01:84:cd:
         90:93:f0:8d:46:1d:98:71:39:cf:3d:4f:6e:8c:4a:5b:60:3c:
         d4:8c:12:0c:d3:d9:6d:b4:a5:b1:3d:e4:a9:8d:7e:a0:6c:f3:
         f5:51:8a:db:16:4a:33:8d:8f:b6:44:3d:0c:2b:9e:56:92:9d:
         7b:00:28:ec:a3:a5:40:c5:7a:e4:2c:49:c3:11:d5:57:56:30:
         4d:8b:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----