Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5WwkgezuyMynx4XkxdUSPIDtzG8.roa
File:                     5WwkgezuyMynx4XkxdUSPIDtzG8.roa (raw, json)
Hash identifier:          z1r4ybQ24uHa+XKYX/fU80Mf1v1ruKdmyrFnd0ARXQQ=
Subject key identifier:   E5:6C:24:81:EC:EE:C8:CC:A7:C7:85:E4:C5:D5:12:3C:80:ED:CC:6F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F79832F5BFEAAD4ACFC348D27457FB0
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5WwkgezuyMynx4XkxdUSPIDtzG8.roa
Signing time:             Sun 01 Jan 2023 22:35:12 +0000
ROA not before:           Sun 01 Jan 2023 22:35:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        45.139.163.0/24 maxlen: 24
                          2a07:e344::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:83:2f:5b:fe:aa:d4:ac:fc:34:8d:27:45:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e56c2481eceec8cca7c785e4c5d5123c80edcc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:1c:fb:69:d7:d4:1e:1d:d7:70:3b:24:36:
                    21:dc:77:10:8e:71:dc:b9:c9:fc:1d:4c:6e:98:7c:
                    ea:c9:56:e3:c0:ea:52:45:72:46:6c:61:bf:1c:ff:
                    4e:d7:aa:2b:5d:ed:f1:b5:95:ba:3e:40:31:ad:59:
                    b6:a5:e3:f4:67:ee:34:ad:c1:01:5c:e2:2c:cd:db:
                    d8:bf:9a:a6:84:db:2c:45:65:8a:fb:9f:bf:34:c8:
                    f7:b4:6a:88:99:89:38:e2:13:d8:12:66:1c:f9:66:
                    5e:12:e6:3b:95:37:e6:ab:03:29:c3:d3:7b:3a:2c:
                    27:57:9d:1f:05:7f:6c:6a:0c:44:f0:74:3b:4a:5f:
                    91:2f:3a:0b:dd:00:21:ba:15:24:8c:e0:fd:8f:45:
                    8f:0e:54:1c:4f:92:99:6c:e6:78:da:58:bb:67:4f:
                    37:e4:93:7b:67:6b:dc:3a:f4:ac:2d:4e:b7:54:e2:
                    6d:70:d9:37:f8:fc:11:c1:a4:58:6f:16:aa:ff:4a:
                    2b:59:e4:76:1c:19:3a:c2:2d:6c:51:c7:bf:0d:91:
                    34:de:62:a1:31:9a:a8:cf:a9:c4:04:f6:0d:8e:17:
                    8b:83:72:99:e4:84:ef:c1:61:99:9d:ad:e2:53:9a:
                    eb:ae:99:5b:81:f6:f7:4c:ae:61:cd:90:86:28:bc:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6C:24:81:EC:EE:C8:CC:A7:C7:85:E4:C5:D5:12:3C:80:ED:CC:6F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5WwkgezuyMynx4XkxdUSPIDtzG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.163.0/24
                IPv6:
                  2a07:e344::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:50:50:67:9d:87:0a:98:16:8d:ab:2f:d2:5c:c1:ed:1b:
         d8:2d:8f:0a:c1:b8:a4:6a:49:04:28:1e:a6:22:c8:5d:cd:f6:
         cd:b4:7a:b5:97:d6:b6:7f:ee:e8:03:9b:19:5d:98:6e:db:94:
         5e:5c:71:af:c6:4a:04:04:96:20:f7:67:0a:97:ce:61:59:16:
         d3:c1:c5:be:86:b8:f7:32:93:b3:b9:5c:ee:ea:2f:66:23:8c:
         3f:84:10:95:78:83:bd:3d:8b:b6:3f:6f:a3:74:eb:90:ee:93:
         6b:ed:a5:18:8f:5a:ae:89:36:4c:7f:4a:6a:9d:d6:ac:ea:52:
         d8:d0:14:d1:b4:4e:bb:ef:cd:43:a0:15:a6:8b:58:ec:16:22:
         44:da:17:ac:d8:73:4c:d5:13:f4:a9:eb:3b:b3:89:5f:49:cc:
         5f:fc:51:4a:64:af:a0:c1:05:b9:1d:e2:a2:a9:4e:34:31:39:
         a1:35:01:a0:9d:15:64:33:6e:d7:f0:f8:01:fc:ea:e1:4b:a5:
         08:76:d6:81:ed:3f:2c:cd:f6:f9:22:fe:8b:b5:e2:9f:1f:a7:
         7c:8d:24:8e:1b:7d:25:0b:41:d4:e4:5e:23:04:1f:e1:49:03:
         aa:ca:9e:a4:d2:55:1d:d7:29:4e:35:1e:bf:5a:93:6a:0f:ba:
         fe:cf:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----