Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa
File:                     u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa (raw, json)
Hash identifier:          scwx/9b/T3GkPAL2AY4hZ2cfwYZqgB6En+Z0sXxpo3o=
Subject key identifier:   BB:CC:77:BB:A5:4E:71:38:01:85:07:36:42:CE:57:B2:BC:E9:C7:74
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       01856EF4301B2D83442AE28ECADF94F66DF3
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa
Signing time:             Sun 01 Jan 2023 20:09:34 +0000
ROA not before:           Sun 01 Jan 2023 20:09:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208429
IP address blocks:        45.137.164.0/22 maxlen: 22
                          2a0e:a440::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:f4:30:1b:2d:83:44:2a:e2:8e:ca:df:94:f6:6d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Jan  1 20:09:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bbcc77bba54e71380185073642ce57b2bce9c774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:8d:dd:5e:cb:29:9c:6d:99:64:c7:ce:1d:
                    0f:b2:19:0e:a1:19:a3:4b:8f:a0:56:9e:7c:e8:de:
                    6a:be:03:72:1a:50:eb:04:03:1b:ae:e1:f8:16:49:
                    5f:fe:53:71:73:8d:84:13:39:9a:52:9f:f5:1d:ce:
                    f7:72:eb:85:d4:47:24:c1:55:d0:5a:70:0b:f6:78:
                    76:f3:42:6d:2f:4b:0d:fb:13:2a:e4:cb:33:55:a3:
                    bc:31:a3:e3:77:cb:36:0f:0e:26:8c:f0:7d:e7:ab:
                    5d:eb:14:0b:68:b7:db:5f:96:87:00:80:6b:12:13:
                    ac:0d:7e:6b:34:18:a6:a9:87:32:1a:40:ac:50:df:
                    4c:34:d1:78:34:b3:41:e9:a8:e7:3d:68:92:61:6c:
                    88:e7:00:d7:92:5b:61:38:cd:92:62:17:6c:52:86:
                    19:f3:14:a2:dd:3f:e7:97:d1:7d:1e:b3:b4:30:a8:
                    70:0d:d1:fe:ee:73:58:d2:80:a8:44:8b:e7:a8:54:
                    ca:40:47:37:f2:e1:67:0a:71:9b:bc:a9:2f:8e:5d:
                    fa:b9:b5:10:52:fe:ea:fc:d8:8a:0f:3e:44:9c:02:
                    26:0d:a5:40:e4:c2:7c:66:b7:79:ad:29:01:7c:d3:
                    a7:8b:f2:6d:cb:66:6b:ce:8a:8d:50:13:67:6b:e5:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:77:BB:A5:4E:71:38:01:85:07:36:42:CE:57:B2:BC:E9:C7:74
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/u8x3u6VOcTgBhQc2Qs5Xsrzpx3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.164.0/22
                IPv6:
                  2a0e:a440::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:14:f9:d6:44:b2:e5:46:89:f2:64:76:ed:ea:77:35:f6:
         0f:33:48:23:e5:79:d1:7c:a9:c1:1e:2b:8b:24:5f:97:1f:16:
         c5:8f:f2:0a:22:2b:6b:ce:a9:0c:99:54:ab:ff:5f:c0:ef:e8:
         da:4b:98:2a:97:80:74:e9:33:e1:c0:c2:23:c9:cd:b8:4e:d4:
         d8:5e:45:6e:15:4f:77:ea:ac:cf:d6:98:c8:74:df:3c:bf:7b:
         7b:70:1d:24:cb:47:94:eb:22:c4:22:9e:94:0e:4e:db:ab:7f:
         61:c4:61:57:e5:b7:76:e1:ed:51:1e:25:5a:d1:76:59:f8:d3:
         6e:f5:12:f1:90:ff:e9:7e:18:a3:3e:20:b5:39:53:86:b7:84:
         ae:52:51:ca:29:87:8d:6c:cb:15:78:c5:f8:0a:b0:84:42:9b:
         4e:81:cc:93:04:f6:bd:40:70:48:d2:cf:15:e6:c7:27:98:48:
         91:d8:28:37:f1:cc:76:91:9a:aa:08:66:19:e6:7a:32:15:82:
         23:6d:d5:ca:28:b7:88:de:09:6b:9a:d5:85:e2:8b:92:7c:bf:
         a8:a7:6f:5f:4e:e3:dd:1c:6c:e9:59:8c:6e:70:94:17:f8:4c:
         9f:90:13:96:86:d6:ed:5d:41:f2:77:66:38:1a:d6:cd:2d:00:
         b2:b7:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----