Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa
File:                     T1tfXCKefW1voGVgcofuUnGQUMs.roa (raw, json)
Hash identifier:          k3p6grg85/HO8PZkykZeW+sYBFT3ZjFFFa1yAmRpkPk=
Subject key identifier:   4F:5B:5F:5C:22:9E:7D:6D:6F:A0:65:60:72:87:EE:52:71:90:50:CB
Certificate issuer:       /CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
Certificate serial:       01856DD41DAB4E55F1A0BD490D429B416288
Authority key identifier: EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa
Signing time:             Sun 01 Jan 2023 14:54:55 +0000
ROA not before:           Sun 01 Jan 2023 14:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205112
IP address blocks:        45.157.240.0/22 maxlen: 24
                          2a0f:6480::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d4:1d:ab:4e:55:f1:a0:bd:49:0d:42:9b:41:62:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
        Validity
            Not Before: Jan  1 14:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f5b5f5c229e7d6d6fa065607287ee52719050cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:5a:a9:db:86:9d:99:62:12:0f:72:bd:2b:
                    34:84:cf:96:59:cf:aa:15:bc:3f:0a:0d:8d:68:0b:
                    1c:df:b5:f3:a1:23:fa:58:31:69:53:48:de:9c:0b:
                    14:f2:3d:8b:37:d6:68:f5:59:78:19:b7:d3:ae:1e:
                    2c:a1:0f:32:94:e4:92:ed:29:d7:2a:80:97:c3:2e:
                    1f:d3:24:56:e4:d4:68:0d:0f:77:dc:7f:0f:50:2d:
                    2b:78:95:33:af:29:03:59:99:3b:c9:77:0d:b6:c9:
                    c5:28:34:76:39:ac:87:86:24:c6:eb:6a:5a:8e:12:
                    29:64:4f:49:dd:0a:43:1b:a6:04:e8:8f:8e:01:d6:
                    ed:40:52:17:73:f2:99:e4:e0:c4:35:29:30:b0:6d:
                    82:37:3e:79:7f:90:12:fc:e5:98:76:a1:b4:45:83:
                    74:30:09:1f:bf:00:65:26:34:6f:ef:a2:89:49:ab:
                    c9:8d:5a:05:7d:1e:df:8d:0c:4a:27:fe:d3:f1:8e:
                    49:06:f7:ce:2b:7a:60:b5:d9:e8:2d:6f:a5:c1:b5:
                    8e:3d:2b:99:77:f0:2d:19:66:23:35:4c:2c:2a:e1:
                    e5:ad:19:f2:34:70:06:da:eb:37:cc:ce:3f:be:29:
                    fb:6d:00:2f:a9:a5:57:39:50:0c:dd:34:cf:f6:67:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:5F:5C:22:9E:7D:6D:6F:A0:65:60:72:87:EE:52:71:90:50:CB
            X509v3 Authority Key Identifier:
                keyid:EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.240.0/22
                IPv6:
                  2a0f:6480::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:b0:4d:6b:d0:9e:37:50:18:c8:f0:fe:11:f6:2c:7e:de:
         b4:8a:ed:a1:54:40:09:73:05:b3:db:d4:06:af:4c:c2:d4:c8:
         92:4e:bb:78:72:f1:f9:75:85:75:d5:f7:d9:af:bf:8c:3b:f6:
         a4:13:cc:08:2f:e4:36:b3:28:17:99:12:51:ea:99:40:d0:0f:
         73:ce:40:cf:0c:f3:8a:93:21:0b:df:06:75:4b:63:45:67:95:
         a4:56:a8:64:a8:ef:00:cf:5e:3b:3b:21:f8:9a:45:52:47:89:
         de:52:e9:e2:3a:d5:54:75:1f:35:a4:0e:29:b0:9b:f8:f8:f4:
         54:03:9a:6a:46:9d:0c:f9:ec:ae:0b:53:dc:a3:01:b0:68:09:
         46:6b:ed:33:11:0f:86:f4:b7:3b:ce:c9:3c:a1:be:30:fa:6e:
         a3:10:bb:5e:0c:2c:b6:e0:67:1f:e4:00:e1:c1:64:79:03:d1:
         e0:0c:1e:e2:20:06:45:b4:64:91:82:24:87:c2:d3:38:4d:8c:
         39:b7:e9:b3:fd:fd:86:ac:d7:08:07:c0:96:02:f7:e2:85:0b:
         6b:dc:9b:10:7d:c3:2f:f0:81:e7:c5:86:ed:c2:e1:0b:5e:0c:
         95:ec:f3:e8:51:19:39:4b:ec:47:ac:5b:b5:35:d6:a5:7b:6a:
         86:12:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----