Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1q01_452aVdnye8NgWnCXg9-UNo.roa
File:                     1q01_452aVdnye8NgWnCXg9-UNo.roa (raw, json)
Hash identifier:          Q4PhP6/IsUsi9+ESXDCP8xNBFQoNxGeuwmPZNcQ600E=
Subject key identifier:   D6:AD:35:FF:8E:76:69:57:67:C9:EF:0D:81:69:C2:5E:0F:7E:50:DA
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       0186EF69168C042DF3A4147ACB12D238216D
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1q01_452aVdnye8NgWnCXg9-UNo.roa
Signing time:             Fri 17 Mar 2023 11:51:27 +0000
ROA not before:           Fri 17 Mar 2023 11:51:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.66.94.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ef:69:16:8c:04:2d:f3:a4:14:7a:cb:12:d2:38:21:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar 17 11:51:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6ad35ff8e76695767c9ef0d8169c25e0f7e50da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:20:53:4f:43:c6:91:be:37:98:ae:e9:ba:
                    f5:a4:f0:96:33:5f:53:ab:1b:bd:e3:d3:ae:d0:77:
                    e8:94:38:69:c7:ef:96:cd:91:2f:81:4a:f1:74:4c:
                    4b:13:ab:0f:3f:de:1c:7e:56:5c:e5:55:07:24:4a:
                    21:f1:29:e7:17:e3:1a:44:2f:7a:b2:66:91:07:6e:
                    bf:58:61:43:eb:03:be:9e:13:9e:ad:1a:65:0f:c0:
                    c3:2e:3d:c4:8a:a1:a0:f3:a3:04:68:21:86:61:7c:
                    12:c4:75:ca:49:89:ea:4a:c7:d7:59:62:a1:71:1c:
                    f7:eb:af:99:ff:95:9f:7c:ed:a6:c1:6c:76:83:80:
                    05:85:e0:31:9f:49:4d:b6:a1:32:09:49:21:2c:ae:
                    fb:e9:40:14:95:4d:f2:d6:aa:6a:ed:8f:92:ba:a5:
                    a2:20:03:a6:4d:f6:ab:05:a4:21:19:02:42:f4:5f:
                    69:be:a9:cc:74:81:40:41:42:af:b4:cb:78:f6:d1:
                    e0:e9:e8:2a:e9:e4:63:e8:91:70:58:b7:4a:d6:7a:
                    23:e7:63:d6:fe:05:bd:85:41:69:29:0e:cb:e8:99:
                    30:a7:df:cb:4c:4d:28:54:f1:81:f1:25:87:75:3c:
                    3f:27:5e:7f:4e:2d:a5:51:3f:96:91:7b:50:85:df:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:35:FF:8E:76:69:57:67:C9:EF:0D:81:69:C2:5E:0F:7E:50:DA
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/1q01_452aVdnye8NgWnCXg9-UNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:43:9c:8c:7d:7b:e2:80:5a:76:0e:d6:48:af:78:f4:05:
         4a:56:97:30:74:6d:31:63:c2:d3:ff:4a:77:5c:68:42:f2:38:
         ba:54:c8:11:f3:3c:0c:f7:18:b4:28:36:0f:6b:86:f5:fe:eb:
         eb:a2:9e:ef:f2:ef:a9:cd:ee:48:e9:09:b6:c2:72:fe:f2:d5:
         f2:66:c4:8e:be:1b:78:e3:7b:15:26:7e:cb:81:71:c3:f5:18:
         a4:be:c2:95:b6:8c:fd:cb:45:f5:4a:92:cc:a2:6d:a2:d8:69:
         20:58:3b:c7:f5:89:80:b9:0b:43:8f:79:41:46:20:4c:10:8e:
         ed:25:16:56:84:77:20:25:2d:97:98:66:85:44:cd:d8:46:ad:
         35:15:86:84:2c:66:3c:18:7e:44:79:91:ea:4c:2c:d7:90:e3:
         44:e0:65:a2:33:c8:07:bf:7c:9f:b6:84:91:1a:7a:3e:10:19:
         d4:48:85:d2:d8:1c:ad:7d:11:a1:6d:a2:2b:cd:22:2b:41:92:
         26:81:97:25:fa:8d:c0:be:4d:18:8d:1f:c2:0c:82:3c:62:82:
         a0:2f:2a:9d:1a:63:36:c8:9a:be:08:1a:ab:f0:25:f7:25:5c:
         b6:8c:0f:e9:e4:01:68:ed:19:52:ad:83:8f:96:fd:7f:e5:2e:
         66:d1:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----