Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa
File:                     QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa (raw, json)
Hash identifier:          kOjJgPnmC1z4MHxGcI9F0F8pFoXrDwfxj/0kE2WIryw=
Subject key identifier:   42:D3:CA:54:4D:E7:FF:EA:B9:5F:A8:D2:F2:E3:19:8C:AE:7F:4A:AE
Certificate issuer:       /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial:       0185719561D4EA4A7B68D78F8A16A8E51CC8
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa
Signing time:             Mon 02 Jan 2023 08:24:53 +0000
ROA not before:           Mon 02 Jan 2023 08:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200424
IP address blocks:        45.92.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:61:d4:ea:4a:7b:68:d7:8f:8a:16:a8:e5:1c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
        Validity
            Not Before: Jan  2 08:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42d3ca544de7ffeab95fa8d2f2e3198cae7f4aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:52:e4:75:ea:80:3e:a2:58:43:a6:3d:75:
                    db:53:ca:ca:93:0d:64:10:48:80:42:dc:46:5b:69:
                    68:09:f4:05:14:fa:1b:63:cb:6b:7d:19:4a:b0:3c:
                    72:72:a6:16:a4:ba:40:6e:0e:2b:a3:97:13:a8:51:
                    a3:17:43:0f:62:ce:f5:88:40:8e:d3:27:8f:0d:d1:
                    a6:7a:84:51:76:19:d5:4e:56:56:78:3c:27:f4:25:
                    6f:2e:95:78:e6:57:d1:32:f6:07:4d:cd:86:07:c1:
                    db:d2:2f:cf:b5:77:cd:e7:f3:49:a8:b1:b2:7b:72:
                    11:73:6a:5b:b2:0d:d5:68:77:71:11:45:14:9f:d3:
                    72:ca:c9:48:93:2e:6f:6c:a1:c6:a2:05:ae:7e:59:
                    c8:34:01:01:a4:6c:7c:e9:73:e0:7e:0f:4d:7c:b6:
                    b2:79:d3:2f:03:a7:6f:c6:57:e9:0c:5d:1e:7a:99:
                    20:ab:80:f8:f3:67:59:82:e6:84:4e:c5:5b:5e:d0:
                    74:77:70:a6:34:0a:21:5e:ae:18:9e:9f:48:23:41:
                    a8:28:f9:c0:f7:3b:7a:8b:74:52:2e:f3:b8:29:07:
                    5c:de:a5:e9:34:db:fd:dc:12:50:5c:aa:ae:c5:75:
                    1f:a4:43:51:6e:e9:33:51:1a:7d:6c:81:a8:fb:86:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:CA:54:4D:E7:FF:EA:B9:5F:A8:D2:F2:E3:19:8C:AE:7F:4A:AE
            X509v3 Authority Key Identifier:
                keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/QtPKVE3n_-q5X6jS8uMZjK5_Sq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:8e:ea:0f:39:72:d3:8e:19:f5:74:8e:5f:c8:9c:cf:99:2d:
         72:95:e5:18:34:2a:05:0b:3c:27:50:b3:29:cf:8d:ba:49:5b:
         5a:18:d6:36:0b:38:66:02:01:a3:b5:41:d0:a1:23:94:69:93:
         c8:5b:aa:05:98:1e:7f:ff:54:e8:2e:6a:24:42:43:c0:f4:fc:
         c2:78:4b:53:2a:01:7c:d9:e0:c7:64:b2:2a:d5:bd:98:65:4d:
         2e:66:c0:36:24:6d:cb:f8:9b:ee:be:c6:cb:4a:d8:f3:68:10:
         be:2d:4b:48:3b:4f:bf:e1:9c:8a:df:5e:7e:64:8f:de:85:ac:
         88:5a:f8:2f:fa:3e:25:db:de:f6:07:ae:58:93:f2:7a:e1:04:
         92:96:35:6b:63:ef:a1:ce:de:10:d9:e6:79:b5:1d:33:47:b7:
         eb:af:4f:63:12:1c:1c:e1:b9:f8:b2:39:e1:dc:ef:5d:87:06:
         97:cd:a4:c9:c9:16:ca:4e:84:ac:dc:f8:4c:f5:d7:56:9a:c9:
         6b:e2:c0:ff:d4:14:74:41:1a:26:ba:dd:bd:75:71:86:5f:2a:
         26:b1:b7:54:9f:f4:ba:6d:6f:b6:82:a5:e3:f6:3a:74:10:79:
         0d:5d:ba:d5:ca:08:b4:b1:58:58:a0:19:2f:8b:ea:ba:bf:09:
         dd:66:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----