Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa
File:                     1jIfi7mt5aFBRjedJHIFJc15Xv4.roa (raw, json)
Hash identifier:          Lja8ZZBxwoKQ/fpHeis/0a9zWfAQvSg0OTnWs7vjv0k=
Subject key identifier:   D6:32:1F:8B:B9:AD:E5:A1:41:46:37:9D:24:72:05:25:CD:79:5E:FE
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       018703D7811CFB98746F2BE3E1100E6A8FCB
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa
Signing time:             Tue 21 Mar 2023 11:04:27 +0000
ROA not before:           Tue 21 Mar 2023 11:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.146.202.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:03:d7:81:1c:fb:98:74:6f:2b:e3:e1:10:0e:6a:8f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Mar 21 11:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6321f8bb9ade5a14146379d24720525cd795efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:a6:92:df:f0:bd:46:e6:9a:e5:60:d5:37:
                    0d:73:fb:6d:a5:a9:85:e3:64:ab:55:f7:8a:54:c0:
                    c2:ca:91:c0:0f:5e:52:e1:ce:d7:84:75:ff:a9:5b:
                    af:b7:ab:c9:a5:d8:2d:62:66:9c:3d:46:7a:7e:8c:
                    c8:16:65:93:d4:3e:6d:ab:dc:35:9b:6b:77:ad:ad:
                    1a:56:f1:d4:c8:2b:00:1d:cb:e2:3e:aa:23:c2:eb:
                    94:9d:65:b9:62:d1:51:cc:48:e4:83:56:c3:58:22:
                    38:5c:bc:d6:10:65:08:dd:69:e0:cd:ca:12:55:2b:
                    94:b8:08:dc:c3:6d:e4:a5:a9:58:8e:9b:53:9a:fd:
                    9f:5e:61:7d:f8:fc:79:8c:75:ea:d7:8b:13:16:57:
                    09:2a:08:65:46:45:49:02:2d:22:f8:4a:a7:9c:f5:
                    42:4c:5f:95:d0:cc:3c:da:88:a3:50:9b:4b:61:fa:
                    f0:d0:04:77:34:6e:c4:cd:3b:a3:89:cf:dc:27:83:
                    84:4a:ce:6e:b2:fe:68:df:49:b3:67:2a:c3:ef:8a:
                    0f:47:ea:bf:8d:ba:70:e0:9c:65:4f:d7:2e:b8:e0:
                    ae:3b:be:21:38:14:ac:95:f5:2d:c1:51:aa:3d:45:
                    ed:46:91:39:59:e0:02:49:43:67:09:c7:e4:a7:63:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:1F:8B:B9:AD:E5:A1:41:46:37:9D:24:72:05:25:CD:79:5E:FE
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/1jIfi7mt5aFBRjedJHIFJc15Xv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:4c:f7:dc:83:d3:6a:d7:34:6d:f2:e8:e9:7a:86:b7:b7:
         08:fd:f2:49:57:a8:45:c4:36:88:b7:5e:4f:8c:fa:44:a9:72:
         48:5a:8b:c1:b0:40:a0:68:18:5d:4e:05:3e:9c:c8:b9:18:b3:
         78:7f:da:12:07:7f:a7:a2:c1:89:e0:3a:00:cd:b4:f1:0b:a7:
         b5:77:1e:96:42:86:39:67:64:45:59:85:64:2e:09:40:b3:cd:
         59:a8:35:85:24:c1:9e:4e:63:05:c0:80:6e:f2:be:2b:2c:e0:
         b7:d4:2d:0b:4e:28:d3:8d:70:a8:54:fb:df:61:d2:35:a1:ae:
         25:a8:72:8a:24:be:d0:1f:c8:e2:b5:7d:a6:95:be:91:37:db:
         87:4a:00:5c:9f:bd:29:35:fd:ef:dc:8f:b1:97:44:2f:31:2a:
         f9:f7:09:ba:71:26:9e:b0:31:87:b9:b0:1e:4e:78:b6:cc:ee:
         fd:e0:6d:f6:cc:8e:8f:2d:cd:51:0a:63:65:b9:7b:5a:c2:d4:
         ac:dd:0d:12:0a:1c:60:07:3b:b6:d4:34:ac:b3:3b:2b:d7:eb:
         3b:14:08:e0:7d:ff:0f:cc:6d:fe:d2:75:96:77:1b:d2:be:dd:
         e3:78:9f:6c:c5:45:60:2c:dd:f3:68:2d:e7:ad:c6:2b:2b:17:
         81:61:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----