Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa
File:                     xlHEndZd2JISt49US4G6LrDyLtU.roa (raw, json)
Hash identifier:          JHWMuOc3c4ulkC5aTFXn/Is8m4XHp0/J4mZRYuuvW9k=
Subject key identifier:   C6:51:C4:9D:D6:5D:D8:92:12:B7:8F:54:4B:81:BA:2E:B0:F2:2E:D5
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       01857079A9A4C67A1141A4CE48806A0ED939
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa
Signing time:             Mon 02 Jan 2023 03:14:59 +0000
ROA not before:           Mon 02 Jan 2023 03:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        46.228.136.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:a9:a4:c6:7a:11:41:a4:ce:48:80:6a:0e:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Jan  2 03:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c651c49dd65dd89212b78f544b81ba2eb0f22ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:31:e5:68:05:7b:9b:87:cf:dc:e4:b5:b6:
                    74:03:f7:fd:10:bb:47:ae:27:a2:0f:6e:8c:8a:8d:
                    55:04:17:3a:ea:7c:cb:ab:73:e9:82:58:22:89:31:
                    52:d3:91:96:26:27:c2:41:5a:1a:45:c2:ac:68:a7:
                    87:ac:66:7c:1c:5e:2c:71:73:b1:bf:1b:4e:35:85:
                    46:03:be:a9:0a:a1:39:cf:7a:bf:74:64:cb:df:05:
                    5d:57:b2:e4:1f:de:db:c4:45:f7:52:ba:c4:7b:b2:
                    a6:74:20:49:2d:bc:2c:7a:a9:5a:79:32:92:11:f9:
                    ef:f6:29:be:42:55:4d:cf:e5:57:29:9e:2b:8e:e8:
                    c9:13:15:52:8f:79:aa:fb:3d:f6:a7:32:6e:a5:e5:
                    fb:7f:bd:52:8a:1e:20:0b:2c:b1:d2:7e:55:00:fd:
                    33:ae:6a:4c:59:74:f7:6d:d3:cb:30:52:72:b4:bf:
                    2f:68:ea:c8:62:10:c8:ab:8a:ae:3b:9c:b3:da:b8:
                    96:0e:94:57:79:b0:b0:e8:bb:5c:99:93:14:15:bb:
                    92:f6:76:7f:36:0f:b1:f8:7d:d8:50:af:ee:64:28:
                    5f:04:81:a5:e2:2f:e5:f3:ce:aa:15:7f:4f:78:c5:
                    d8:57:b2:13:11:62:73:36:7a:ea:95:e3:19:ae:87:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:C4:9D:D6:5D:D8:92:12:B7:8F:54:4B:81:BA:2E:B0:F2:2E:D5
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/xlHEndZd2JISt49US4G6LrDyLtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.228.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:a7:a9:9c:e1:37:20:e7:5a:db:ea:d8:7a:a5:61:e3:95:
         b2:51:42:80:4c:74:05:1d:df:f1:13:07:c6:7b:77:ca:f6:c9:
         80:76:b5:02:36:65:f1:78:94:5e:2e:70:4f:9e:77:21:23:f2:
         ef:fa:e1:bd:1f:44:6c:0f:3a:b3:97:e5:c9:2a:8e:87:28:5c:
         a3:f2:e4:63:b2:bc:e2:49:97:ae:56:06:6e:7e:60:25:51:1d:
         09:6e:a5:da:16:1f:61:b4:47:e8:8f:1e:a7:66:89:6b:00:ea:
         70:27:25:45:bd:03:b8:99:2c:be:6e:71:31:d0:7c:bb:17:97:
         ab:33:a2:60:ae:c4:ce:63:bc:9d:d6:c9:b5:18:b6:f5:7c:e0:
         b4:e7:b0:26:10:53:3d:7e:78:cd:e3:d7:5c:16:ef:34:79:66:
         12:b0:b0:cc:ab:71:26:6c:85:52:cb:67:3f:23:e1:61:c0:35:
         76:b0:70:ed:60:b0:45:fa:17:ca:e0:d9:42:89:71:7c:81:ca:
         7e:53:1d:e9:aa:46:80:d5:75:e0:b3:7f:fa:4e:31:7b:a4:08:
         64:fc:92:90:62:71:fa:15:6b:94:2a:f1:fd:6a:af:58:1a:f7:
         f6:e5:79:c8:99:4b:41:ed:4b:fe:bf:34:5a:07:5e:fb:1c:e3:
         ed:51:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----