Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa
File:                     w9fTuDtNrY-TjKgtne7y-VxBuMM.roa (raw, json)
Hash identifier:          aZ06DaaiaBpnBAfvV/zY9PxsuXXEKQ8ut7GaYuFY62M=
Subject key identifier:   C3:D7:D3:B8:3B:4D:AD:8F:93:8C:A8:2D:9D:EE:F2:F9:5C:41:B8:C3
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       0186ACD6267E07F186E4E754D0731699B201
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa
Signing time:             Sat 04 Mar 2023 13:36:00 +0000
ROA not before:           Sat 04 Mar 2023 13:36:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211826
IP address blocks:        45.8.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ac:d6:26:7e:07:f1:86:e4:e7:54:d0:73:16:99:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Mar  4 13:36:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3d7d3b83b4dad8f938ca82d9deef2f95c41b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:63:d9:4f:8f:b2:a6:5b:4a:d2:72:fa:2e:
                    59:62:49:e3:cf:b2:0d:12:c7:a9:29:23:38:6c:a2:
                    d1:1a:5d:3d:29:03:1d:89:91:b8:2f:45:a6:8c:17:
                    c2:30:b6:15:ff:1a:29:ca:5f:4b:2c:e9:9b:e7:10:
                    fb:40:5e:db:5b:a8:d3:d7:c3:0b:8a:2c:85:ab:b4:
                    01:a2:bc:b8:3c:6c:85:7e:36:32:d4:54:56:4d:ae:
                    1c:bf:fb:e9:62:f6:45:ca:cf:8b:7f:60:df:c7:51:
                    e6:d4:ec:b5:74:b7:81:74:1b:0d:a7:83:e5:d1:3b:
                    7b:c1:37:26:c9:78:41:72:45:d1:e5:f3:0e:8f:cc:
                    8d:eb:b1:26:64:02:8d:dd:8e:b0:02:98:10:20:23:
                    20:0c:9f:02:2f:f9:61:d5:44:d5:8d:01:5e:35:fd:
                    18:04:88:ec:b3:c7:88:cb:55:9a:1b:6f:b8:20:0c:
                    22:62:d1:7a:03:24:9b:68:4f:a6:c0:e5:5d:59:3a:
                    b0:ca:ea:85:44:9a:72:ca:29:e6:d8:67:df:dc:1a:
                    88:59:5f:31:70:33:46:d7:aa:72:95:4a:d5:40:21:
                    a4:16:68:ad:4c:5f:0a:21:06:8f:05:b4:e8:19:ec:
                    40:f7:64:e5:7a:74:03:2d:25:1e:a0:97:97:f7:55:
                    a8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D7:D3:B8:3B:4D:AD:8F:93:8C:A8:2D:9D:EE:F2:F9:5C:41:B8:C3
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/w9fTuDtNrY-TjKgtne7y-VxBuMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:bf:a3:20:7e:03:f2:78:da:a2:0b:b0:05:76:16:5c:c1:2c:
         44:a5:84:d4:60:b5:b0:39:a9:e5:81:d6:72:37:13:c3:36:8d:
         b4:c7:3f:20:45:59:83:36:7e:6b:06:96:ef:6c:bf:cd:6f:2c:
         45:5b:72:b9:f0:d1:f8:3f:db:e4:9c:47:77:7f:49:dd:f4:66:
         25:f6:99:43:f7:8c:8e:89:67:7f:ba:2a:34:2a:12:62:41:c2:
         e8:d4:1b:34:fc:ed:be:3a:05:03:02:c6:0c:f6:fa:c4:9e:d8:
         5c:a2:0d:cf:da:7d:cb:73:2f:7d:9d:8c:c7:2f:27:d8:78:0b:
         0e:e5:2b:40:01:11:6e:e7:39:a8:6f:12:c1:61:be:fe:ee:48:
         fc:8a:3b:67:e0:72:49:e6:67:4f:0e:3d:1b:88:c7:aa:36:19:
         7f:3c:c8:64:4a:1e:55:f3:9e:aa:a1:a9:75:77:c2:b8:71:8d:
         9d:c2:cd:0c:74:fc:79:1d:c9:4e:5c:47:e3:78:7a:b3:c0:a9:
         b5:4b:10:e9:c5:4e:e0:0a:d4:79:31:eb:28:c1:ae:42:a0:7a:
         a8:5b:40:78:9e:d1:e8:e3:b0:53:da:55:5a:89:19:fa:da:65:
         85:74:0b:9f:f5:48:63:6a:55:1b:36:71:1e:79:c3:2e:03:be:
         dd:28:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----