Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/d69JEi1JdktHKJC4fGgfZO1BYKo.roa
File:                     d69JEi1JdktHKJC4fGgfZO1BYKo.roa (raw, json)
Hash identifier:          /LssWl3Fsqplrdkz7JUFzswJCnjWk2SApD4JIFsY5cw=
Subject key identifier:   77:AF:49:12:2D:49:76:4B:47:28:90:B8:7C:68:1F:64:ED:41:60:AA
Certificate issuer:       /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial:       01856F94A169BB83296B329D6FFFC160D042
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/d69JEi1JdktHKJC4fGgfZO1BYKo.roa
Signing time:             Sun 01 Jan 2023 23:04:49 +0000
ROA not before:           Sun 01 Jan 2023 23:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        45.158.62.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:94:a1:69:bb:83:29:6b:32:9d:6f:ff:c1:60:d0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
        Validity
            Not Before: Jan  1 23:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77af49122d49764b472890b87c681f64ed4160aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:23:92:b4:b3:b0:7f:50:ba:9b:44:e0:b2:
                    d4:4e:e9:7b:41:e4:87:3a:69:26:c0:7b:f1:c0:b0:
                    42:0d:45:71:6f:58:12:7e:f6:fe:45:48:3e:ed:f3:
                    9a:2e:47:4d:b5:ee:09:5c:6e:08:45:6d:7b:91:10:
                    e0:74:f1:8c:3e:2f:36:78:df:df:41:46:a0:b3:43:
                    a7:c6:89:9f:0b:07:c4:8d:9e:06:4c:7f:a5:de:59:
                    28:45:36:53:b8:99:ae:fa:28:7e:c9:32:ee:33:89:
                    2b:9f:68:3a:71:3e:37:af:83:c6:45:9b:12:10:ee:
                    48:63:5d:82:ad:39:71:2e:2e:ae:be:d8:1a:81:84:
                    6a:a9:35:7f:85:d8:ff:ce:aa:b7:1a:43:5e:54:5a:
                    0e:a1:87:3c:5a:58:ec:ba:53:ed:4e:ad:d2:9d:f8:
                    5a:77:df:e9:fd:96:8b:f4:21:ba:11:da:82:b5:33:
                    55:76:57:7f:e9:6f:c5:d9:fa:0a:43:b1:64:ef:5e:
                    16:dc:62:d1:79:57:2d:18:f0:ae:14:42:2a:51:95:
                    fb:4a:e0:3d:b4:03:54:6a:fc:0c:e2:1d:b3:4b:15:
                    ff:98:1c:6e:01:4d:db:6c:67:c8:a1:a2:93:90:8c:
                    99:85:cc:ab:a3:6e:fc:2d:9d:6e:ec:b2:cd:9d:bb:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AF:49:12:2D:49:76:4B:47:28:90:B8:7C:68:1F:64:ED:41:60:AA
            X509v3 Authority Key Identifier:
                keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/d69JEi1JdktHKJC4fGgfZO1BYKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:71:0b:26:71:56:f7:a5:aa:f6:76:76:f4:7c:86:3b:79:
         92:ee:d6:f0:8e:ea:bc:b7:f3:eb:2d:75:32:c0:40:72:2a:17:
         f3:81:1d:95:b8:55:b1:ea:b7:0e:d2:4d:e5:eb:b4:99:b1:04:
         f1:7b:57:9f:6c:67:65:fa:a5:9b:5f:9c:53:a3:46:3b:c1:d3:
         1b:af:2f:ac:06:06:92:e3:10:2a:0b:15:da:1e:97:62:30:9e:
         a4:6a:51:27:d1:13:df:bb:74:82:2b:2c:83:0c:97:98:69:91:
         89:3c:4b:8c:4f:1b:04:46:2d:3a:13:60:cd:47:13:74:26:76:
         8d:d8:db:c5:db:d1:5a:83:5b:e7:b3:85:bd:82:b3:72:0f:d5:
         47:f4:7d:b7:f7:c6:70:10:73:3e:9e:51:91:e3:66:f7:54:3d:
         34:ed:6a:5a:b8:e0:24:7c:11:a0:70:49:95:f8:a5:35:31:c3:
         f1:12:ee:02:b8:3c:21:d9:f9:1b:4c:ee:98:cb:64:4b:62:d9:
         f4:48:c6:9c:9c:1c:d8:e8:ff:0e:7e:a6:64:00:d8:29:3d:2e:
         c6:3c:09:be:54:34:d5:43:27:54:e4:ea:4a:d1:1f:28:cc:3e:
         f5:7b:41:94:ac:48:32:93:46:ac:09:12:ee:4e:c4:a3:2d:a9:
         d5:cb:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----