Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa
File:                     ibrtxqf-Sj2rXXtvccskQMJLBZk.roa (raw, json)
Hash identifier:          ajhlFAhtLOqav8uOH1A099/HTW8FjY7zHIXJRFxRwKw=
Subject key identifier:   89:BA:ED:C6:A7:FE:4A:3D:AB:5D:7B:6F:71:CB:24:40:C2:4B:05:99
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018730E2985FF93614C3A96B2A60C878AB10
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa
Signing time:             Thu 30 Mar 2023 04:59:29 +0000
ROA not before:           Thu 30 Mar 2023 04:59:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        45.83.207.0/24 maxlen: 24
                          2a07:e342::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:30:e2:98:5f:f9:36:14:c3:a9:6b:2a:60:c8:78:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Mar 30 04:59:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89baedc6a7fe4a3dab5d7b6f71cb2440c24b0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:aa:ec:76:df:d6:97:4a:f4:bd:7f:1c:6a:
                    d9:14:f0:4e:dd:2e:8e:27:f5:03:cf:18:5e:2c:1b:
                    41:50:36:eb:88:a2:2a:fc:cb:01:37:d5:7f:40:76:
                    8c:32:e3:d0:aa:04:4b:2d:5b:13:c3:25:1d:b0:71:
                    81:8f:49:9f:cc:d5:9b:17:ed:f0:da:0d:c5:41:52:
                    cb:77:b8:e3:fb:16:88:f5:25:44:b7:22:2b:2c:8c:
                    5f:ea:a8:d9:f2:4c:ff:32:ba:b7:3b:8d:79:ed:63:
                    bb:13:bc:31:af:82:e0:50:c4:44:da:60:28:86:3f:
                    75:80:e4:dc:99:7b:b6:da:b5:5b:a6:78:f0:f3:db:
                    4d:b9:e0:c7:6a:a1:6f:6c:c6:4f:6b:8f:6f:fe:f6:
                    d3:a7:b4:58:06:e9:e5:9f:af:5d:87:fa:ed:07:5d:
                    e4:bb:51:5c:0b:2b:60:56:5e:b2:a8:91:d1:31:d0:
                    e0:16:82:28:40:56:c1:27:01:4d:4f:bc:0d:30:c3:
                    97:c1:77:ea:d1:1f:e2:5b:3f:2b:2b:1a:7b:63:33:
                    a5:85:8b:8c:5f:64:10:32:c4:77:b2:c2:36:c5:19:
                    00:5a:f4:59:3e:7a:70:17:41:fc:96:2b:62:af:7b:
                    dd:79:ff:7e:b3:f0:9b:87:5c:8e:54:1c:ce:00:49:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BA:ED:C6:A7:FE:4A:3D:AB:5D:7B:6F:71:CB:24:40:C2:4B:05:99
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.207.0/24
                IPv6:
                  2a07:e342::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:6f:c2:26:04:c4:98:28:9d:07:9a:d9:f3:cf:aa:f9:f3:
         c1:1a:9d:29:95:23:3d:46:d2:d6:ad:46:47:1e:27:63:b3:3c:
         6d:78:5f:f6:88:27:8f:38:92:52:47:09:28:58:ca:3d:9f:5b:
         eb:93:9a:a1:5e:0d:1e:b9:8d:63:0e:5f:9e:26:44:75:ba:1e:
         1a:4b:d6:0d:f4:3e:9e:d8:c9:0d:a6:36:db:04:92:af:66:ef:
         b3:d0:ec:9c:8e:a3:5d:29:fe:db:dd:c7:f0:85:32:f8:2b:10:
         00:a6:92:49:98:0a:bf:6b:cb:e0:99:bb:cc:53:b5:1a:8c:df:
         51:9a:9b:81:9b:59:b7:0a:e8:6f:cf:5e:71:7e:32:ce:4c:d4:
         bd:60:e9:17:fa:b5:c5:4b:b6:d7:9c:76:3c:c1:7a:5a:c9:37:
         04:0e:28:68:48:12:40:9e:00:09:db:4b:b6:f5:9f:d8:f3:84:
         ec:45:60:b0:8a:58:34:9a:25:93:54:a7:7b:8d:f5:21:63:b5:
         1d:15:90:e6:e1:1b:5f:c7:d8:ab:e9:b0:55:b3:9f:ce:c3:81:
         77:0d:8b:9a:82:d0:5a:de:a1:cf:f2:28:af:b5:ab:35:75:21:
         1e:b8:98:80:fd:63:79:c4:17:f1:f6:de:40:a6:0a:e3:b2:f0:
         c7:d6:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----