Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa
File:                     IiCTYi6Wzz7PZc65FZMbZud3AkA.roa (raw, json)
Hash identifier:          UzVkN9NdkwGbXaHnTRj839T7kpHZTD8UQAR28GWtL5c=
Subject key identifier:   22:20:93:62:2E:96:CF:3E:CF:65:CE:B9:15:93:1B:66:E7:77:02:40
Certificate issuer:       /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial:       01856CB8503BC645D484F1F6B499FE635041
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa
Signing time:             Sun 01 Jan 2023 09:44:56 +0000
ROA not before:           Sun 01 Jan 2023 09:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197637
IP address blocks:        45.67.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:50:3b:c6:45:d4:84:f1:f6:b4:99:fe:63:50:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
        Validity
            Not Before: Jan  1 09:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=222093622e96cf3ecf65ceb915931b66e7770240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:6a:ed:cd:cb:71:8c:64:5e:67:60:78:c6:
                    0a:63:d0:e9:ab:31:4c:5b:53:17:23:56:e6:ae:26:
                    67:bd:05:0d:54:d8:8f:2b:d2:5c:7a:b1:e3:64:db:
                    b7:67:c1:02:56:ec:2a:11:bb:ba:9c:32:44:7b:54:
                    88:44:72:49:c0:98:c9:99:1a:0b:a7:0c:49:87:e1:
                    ee:bd:74:68:5c:01:ca:6c:e5:4a:92:a5:ff:28:7f:
                    5a:59:0c:b7:81:0e:bb:ee:9e:e0:8f:ea:c6:c1:61:
                    cd:70:42:ea:62:2a:2a:f4:2d:89:95:b8:52:5b:f3:
                    f8:27:13:f3:88:9c:67:ac:65:a9:00:05:b8:63:ed:
                    55:7e:bb:1b:b8:0a:53:d0:74:fb:fd:0c:33:b6:1f:
                    a0:80:6b:a4:b4:b8:be:62:12:30:9e:2a:a1:23:7b:
                    72:17:bc:f5:21:75:89:a7:b3:c0:dd:3c:30:00:56:
                    ea:67:dd:c3:20:b8:92:c2:24:1f:9a:91:f2:fa:23:
                    bf:8c:7a:80:7c:a4:ef:f6:cd:30:dc:30:c6:9d:f4:
                    1d:bf:02:b8:ed:1d:ea:72:74:59:67:7a:68:f0:42:
                    b7:75:96:2d:d7:9f:02:65:51:d4:2f:d0:87:96:a8:
                    7c:b0:1f:4f:a3:cc:15:70:fe:a1:22:95:1b:f9:20:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:93:62:2E:96:CF:3E:CF:65:CE:B9:15:93:1B:66:E7:77:02:40
            X509v3 Authority Key Identifier:
                keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/IiCTYi6Wzz7PZc65FZMbZud3AkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:57:98:51:92:37:6e:75:ac:db:4b:76:ed:30:7b:ba:bf:78:
         5d:e7:26:60:c0:a0:83:fd:5c:13:8b:d1:32:40:fe:3b:7b:06:
         b3:90:f5:49:34:79:e2:b8:f6:b9:69:b9:92:92:e6:10:83:4a:
         8b:3f:c0:3c:75:25:fd:b3:63:cf:bc:8d:e3:3f:2a:8d:e7:c0:
         c9:1d:4b:1d:aa:ef:f0:89:7b:dc:09:f5:f0:c7:c4:ec:12:31:
         9d:a8:2f:2b:1c:c0:3b:d1:1e:54:84:be:3e:03:2e:43:4a:42:
         26:44:0c:1e:25:6b:f6:0b:d9:eb:6d:14:0f:40:a6:66:43:8d:
         6c:cf:a3:e4:7f:4c:7c:3b:9b:6d:f8:04:15:93:70:95:18:4c:
         bc:8b:fe:6c:84:a1:65:34:27:24:91:0b:9b:88:92:79:6f:6d:
         5b:18:ab:80:05:03:cb:1f:65:69:14:99:ce:17:8c:c0:2c:29:
         15:ae:4e:fb:7e:a7:04:96:0e:88:98:30:71:24:d6:89:ed:43:
         3c:51:9e:a1:34:b5:ba:f6:ca:3f:dc:00:ab:21:1f:2b:6d:4b:
         1a:cb:3a:15:1b:82:0a:a0:38:07:36:a3:6a:4d:ec:99:4b:29:
         a8:d9:d9:ba:47:78:f7:a3:5a:d2:e3:a7:8e:f0:cb:f1:ec:2e:
         15:ac:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----