Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vxEyYuDHHIUrOFarJqpLQiFw7BI.roa
File:                     vxEyYuDHHIUrOFarJqpLQiFw7BI.roa (raw, json)
Hash identifier:          oFG+7dietEgelYzHViRG4oB7tLTW9sHWnOBapACUPyY=
Subject key identifier:   BF:11:32:62:E0:C7:1C:85:2B:38:56:AB:26:AA:4B:42:21:70:EC:12
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       01867996E4CE35BA8E4CEE868E20E57B6963
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vxEyYuDHHIUrOFarJqpLQiFw7BI.roa
Signing time:             Wed 22 Feb 2023 14:46:17 +0000
ROA not before:           Wed 22 Feb 2023 14:46:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46261
IP address blocks:        45.153.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:79:96:e4:ce:35:ba:8e:4c:ee:86:8e:20:e5:7b:69:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Feb 22 14:46:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bf113262e0c71c852b3856ab26aa4b422170ec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:16:2f:6b:44:ed:95:55:8b:cc:14:19:7c:
                    25:ec:83:3b:b9:e5:8f:51:37:24:9e:fe:34:2d:35:
                    f5:29:f0:0b:9e:76:7c:f0:b7:48:22:91:fa:96:7e:
                    d7:ac:d1:91:cc:81:4c:ea:28:4d:21:43:5a:9c:fe:
                    f4:b2:51:fb:88:9a:49:f1:28:ef:9c:88:ce:60:10:
                    3e:a6:06:cf:a2:b6:f7:d3:8e:9a:1a:9e:b2:10:87:
                    64:71:cd:57:5f:a1:0f:8e:0e:50:6a:9a:2b:50:f4:
                    86:7b:13:b8:b6:84:95:4b:50:20:44:6b:c4:f8:6a:
                    4e:9b:46:ee:76:10:59:b1:a9:81:25:26:c3:3f:42:
                    ea:28:85:68:fc:5c:37:c7:81:98:0c:05:97:0c:94:
                    ff:eb:86:91:74:da:2b:f0:7b:55:78:5d:68:32:f6:
                    58:cf:7d:1b:99:ee:c7:5a:8f:35:82:c4:0b:2f:e7:
                    f8:ef:70:b5:07:12:f0:60:b6:bd:6b:9c:6a:48:87:
                    24:c2:c9:ae:3b:78:73:05:35:46:db:84:fd:31:2a:
                    15:6d:7a:28:03:66:c3:9a:ca:19:a8:35:f3:e9:79:
                    c6:94:95:f5:32:6a:7a:9f:eb:b6:29:5d:7f:84:23:
                    e0:d9:10:a0:86:da:2d:57:e4:b5:08:f1:3d:e8:98:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:11:32:62:E0:C7:1C:85:2B:38:56:AB:26:AA:4B:42:21:70:EC:12
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vxEyYuDHHIUrOFarJqpLQiFw7BI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:a6:85:27:32:97:85:cf:cd:27:03:3a:d5:e5:7b:f5:02:
         53:19:b5:95:7e:9b:36:76:b2:dd:e0:4a:2d:ab:93:11:17:f4:
         4e:89:1d:14:65:e4:7c:25:b2:a3:41:31:e1:86:e6:d7:1f:f0:
         6a:59:a5:ea:79:52:0e:c1:8d:d4:af:f0:82:b2:85:e5:ff:64:
         86:94:f6:3d:ad:06:7c:22:96:a2:88:4e:a7:44:88:78:11:4f:
         fb:4e:b9:45:4c:81:28:1d:15:e4:8b:8d:46:ec:07:2f:8f:fa:
         51:c9:ff:5c:02:36:e4:1d:7d:a2:45:ea:89:33:9a:2f:53:6b:
         68:b2:09:15:14:a8:67:2a:54:d3:0c:93:54:bc:86:ea:04:e7:
         ba:bd:60:a3:b2:0c:e8:95:b4:27:b8:75:28:f0:2b:1a:0c:0b:
         6a:d7:a5:a5:ff:00:4e:61:8d:1c:a5:82:9d:e7:65:5f:e7:36:
         a8:bf:87:ff:b5:8e:55:64:96:47:ff:95:d4:01:ff:f6:e8:4c:
         3e:4b:a1:e2:d8:58:bd:cb:70:3f:9e:9b:b4:8a:98:6f:34:44:
         a9:3b:ca:05:03:c1:b1:0c:e2:ef:82:f0:d9:3f:34:28:0a:8e:
         52:90:54:0c:d7:2a:20:a4:12:d5:4e:70:d7:f2:8d:19:64:e8:
         2d:bc:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----