Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rnsP6UpYhhF3QkqyxDyvcC9goLU.roa
File:                     rnsP6UpYhhF3QkqyxDyvcC9goLU.roa (raw, json)
Hash identifier:          TB485bo7C4ydDdBLxQ6qD0ooVw/4k/UxvSRFxMuS+MM=
Subject key identifier:   AE:7B:0F:E9:4A:58:86:11:77:42:4A:B2:C4:3C:AF:70:2F:60:A0:B5
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F7997B978F08ACBC1A7565632851CE3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rnsP6UpYhhF3QkqyxDyvcC9goLU.roa
Signing time:             Sun 01 Jan 2023 22:35:17 +0000
ROA not before:           Sun 01 Jan 2023 22:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211112
IP address blocks:        45.139.163.0/24 maxlen: 24
                          2a07:e344::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:97:b9:78:f0:8a:cb:c1:a7:56:56:32:85:1c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ae7b0fe94a58861177424ab2c43caf702f60a0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e9:a4:58:97:f6:07:84:c1:34:4c:af:20:82:
                    fe:b3:57:2e:b6:bd:52:d3:fe:47:1c:57:c9:0c:af:
                    a0:29:2b:f6:05:c5:33:0d:99:b4:d4:d1:99:6b:8a:
                    81:05:97:8c:0a:9b:89:82:db:50:c4:f5:10:bb:b4:
                    a1:30:2b:a3:08:b9:be:23:7d:17:6e:e0:19:4b:a3:
                    ad:05:b3:f3:5c:32:74:5d:ce:e3:fa:6c:62:a6:d9:
                    da:f2:e3:6e:7b:96:a0:10:3e:3a:09:1c:26:81:f5:
                    cd:f0:68:c6:ee:29:bb:02:26:30:7b:ca:55:f8:e2:
                    f3:82:fa:0f:51:53:34:64:6c:ac:33:a2:da:bf:ab:
                    5c:2b:08:c5:61:53:90:3f:f7:87:78:44:29:46:24:
                    ad:f5:7e:c2:7d:c2:a5:ac:53:7f:81:e1:d4:c4:11:
                    87:6e:d5:de:69:43:0f:be:dc:0f:4c:17:4f:b9:16:
                    12:6f:d0:b6:c9:bb:1a:ca:4a:04:bc:b8:b4:50:99:
                    82:12:9f:dd:f0:00:ea:d8:8a:7f:14:2c:25:5e:32:
                    c6:47:58:f8:6b:05:2b:34:20:c4:93:8b:4d:db:f0:
                    0a:1c:8a:a6:f6:e4:82:6b:0f:1d:00:e6:86:3f:a1:
                    e6:9f:fb:ee:81:ac:3b:66:73:a4:65:69:43:36:f1:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:0F:E9:4A:58:86:11:77:42:4A:B2:C4:3C:AF:70:2F:60:A0:B5
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/rnsP6UpYhhF3QkqyxDyvcC9goLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.163.0/24
                IPv6:
                  2a07:e344::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:31:d4:e9:2a:17:76:47:aa:47:a3:11:4a:c4:d4:2c:80:
         74:e4:6c:42:bc:8c:09:dd:b1:e5:08:ab:ce:2d:fe:3d:0b:66:
         9b:98:dd:6d:ea:78:ab:39:e7:b6:83:de:92:3b:10:66:4e:bc:
         7a:c7:e4:5c:0e:31:32:d8:b3:6a:1a:06:ca:18:32:8a:33:29:
         d5:9a:78:34:c8:72:7f:99:b0:98:4f:53:98:a2:92:9a:ff:cf:
         6a:07:34:4b:f5:47:0a:ca:94:57:95:e1:c6:69:f8:b6:24:d6:
         e4:2a:d3:d0:ee:d6:aa:2e:eb:3a:96:a4:bf:53:3c:1c:30:8e:
         0c:9b:82:24:0d:70:6c:22:de:55:01:3b:14:43:84:24:71:a0:
         28:80:e7:f8:b1:68:55:8a:c2:f6:36:19:d9:03:ca:55:e1:49:
         31:a1:45:6c:aa:c9:1f:2d:cd:02:06:db:4c:71:22:f3:b0:41:
         49:d8:da:79:5b:49:21:1a:b5:22:0f:e4:42:59:e0:a9:3a:19:
         cc:c7:d3:d3:62:6e:dc:c3:f3:25:3e:f5:f1:74:26:c3:7a:6e:
         b4:f3:1e:9e:ff:26:e7:84:d0:9d:83:fb:fa:fd:08:2f:9f:73:
         36:a7:e6:e0:c3:50:db:9a:28:27:7f:d6:d9:ea:e1:ac:0f:22:
         91:5c:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----