Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ydWrjfwfCJ1FQjNFKy-pwK2bmuk.roa
File:                     ydWrjfwfCJ1FQjNFKy-pwK2bmuk.roa (raw, json)
Hash identifier:          /qk6cUQTdXvdL9k9fVQZwHFYK23SuvVbziHgzsnll/M=
Subject key identifier:   C9:D5:AB:8D:FC:1F:08:9D:45:42:33:45:2B:2F:A9:C0:AD:9B:9A:E9
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018B47BD404C6CDB8B9AD13A145D64EE103D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ydWrjfwfCJ1FQjNFKy-pwK2bmuk.roa
Signing time:             Thu 19 Oct 2023 11:41:06 +0000
ROA not before:           Thu 19 Oct 2023 11:41:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        45.8.191.0/24 maxlen: 24
                          2a09:96c0::/29 maxlen: 48
                          2a0b:a0c0::/29 maxlen: 48
                          2a09:ae80::/29 maxlen: 48
                          2a06:e5c0::/29 maxlen: 48
                          2a0d:e000::/29 maxlen: 48
                          2a13:4bc0::/29 maxlen: 48
                          2a09:b440::/48 maxlen: 48
                          2a0a:d040::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:47:bd:40:4c:6c:db:8b:9a:d1:3a:14:5d:64:ee:10:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Oct 19 11:41:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9d5ab8dfc1f089d454233452b2fa9c0ad9b9ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:e7:51:97:5a:45:64:24:ec:cb:dd:b6:6e:
                    11:20:97:2d:29:d2:d3:45:2c:e4:ed:52:9e:62:28:
                    4a:06:2d:80:e4:8e:1f:f8:48:fc:d6:f4:e2:71:e1:
                    51:fb:ca:cb:04:61:6b:8d:69:7e:97:bd:ca:f4:c8:
                    ca:a5:f5:0b:ae:24:0e:54:75:d3:31:ab:2f:ed:a2:
                    4d:33:50:42:3f:d0:d1:3d:f5:fd:13:0f:6c:72:2c:
                    2e:c8:b3:1a:d8:ca:30:55:c9:ac:50:52:87:24:a8:
                    e3:fe:a0:68:8f:26:c9:6e:99:52:d4:fe:60:a0:f1:
                    1b:59:dc:4e:b7:11:cc:a1:31:d8:1b:20:da:9b:c7:
                    3e:84:8e:63:74:95:e8:f7:3b:6c:99:6c:4d:8f:65:
                    3d:87:d3:54:fc:cf:ee:f7:15:cd:0a:bf:f2:b8:63:
                    f5:44:3b:62:8e:1d:5e:d5:88:98:df:f6:ed:52:27:
                    61:db:cc:01:e5:60:a7:a8:3d:22:53:66:9b:bd:5a:
                    44:ab:28:81:1e:c7:bb:f0:da:b4:4f:b7:f0:c5:9f:
                    8f:31:39:d1:69:ad:d8:be:ce:46:d0:05:79:d5:a6:
                    77:80:04:ee:6f:00:81:cf:b7:a8:f4:89:be:50:51:
                    1a:53:0c:5e:ac:b4:25:9e:76:59:72:a4:b4:f0:ac:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:AB:8D:FC:1F:08:9D:45:42:33:45:2B:2F:A9:C0:AD:9B:9A:E9
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ydWrjfwfCJ1FQjNFKy-pwK2bmuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.191.0/24
                IPv6:
                  2a06:e5c0::/29
                  2a09:96c0::/29
                  2a09:ae80::/29
                  2a09:b440::/48
                  2a0a:d040::/29
                  2a0b:a0c0::/29
                  2a0d:e000::/29
                  2a13:4bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:d9:b3:25:ba:62:11:b1:fd:a1:ff:9a:f1:98:0f:7d:80:
         4b:9e:8c:d2:86:9e:90:31:47:11:f7:01:52:7d:3d:74:26:09:
         67:f9:15:51:1c:42:c7:ec:2d:12:47:56:71:8d:d4:40:a9:a5:
         9d:63:ea:8e:51:a6:bc:5c:86:15:f1:b3:97:66:53:60:3d:0b:
         75:89:34:47:16:f2:2c:71:55:12:32:17:f6:df:11:ff:a1:58:
         11:95:ad:e9:51:2e:21:e4:c7:33:80:a4:d0:2e:63:05:5b:c8:
         d6:9f:6c:e5:f5:88:d8:2a:c5:d8:7b:2e:40:a1:2c:26:ce:51:
         73:cd:ca:4d:39:06:a4:3e:62:d8:9c:b9:ce:31:9f:35:69:73:
         b3:96:17:49:9d:6c:33:e8:41:64:31:a9:c9:d2:1d:17:7b:d7:
         41:1b:69:94:20:33:18:d4:5a:36:97:6c:cf:eb:be:10:a6:7a:
         2e:00:c3:2c:c1:13:ff:f2:be:34:eb:49:0d:b9:d6:b7:b3:43:
         69:96:d6:48:78:f2:1e:79:7e:38:9c:59:9c:71:2e:10:ac:d5:
         3e:3f:7a:09:73:42:45:08:c3:9b:ef:92:89:d6:d9:77:48:e1:
         27:54:e6:97:46:89:90:cc:b6:7d:18:d2:4b:05:46:98:73:12:
         3e:3e:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----