Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QaIYNlvZQnmI5OalAa-UUmwqqj4.roa
File:                     QaIYNlvZQnmI5OalAa-UUmwqqj4.roa (raw, json)
Hash identifier:          e+Tx3X5oCRReltoHPZ93bBFERgL3JirxbqbrZbbz9Vo=
Subject key identifier:   41:A2:18:36:5B:D9:42:79:88:E4:E6:A5:01:AF:94:52:6C:2A:AA:3E
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01889300F11D2109D9C04F4F89541C7B3ED7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QaIYNlvZQnmI5OalAa-UUmwqqj4.roa
Signing time:             Tue 06 Jun 2023 23:18:12 +0000
ROA not before:           Tue 06 Jun 2023 23:18:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.162.10.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:93:00:f1:1d:21:09:d9:c0:4f:4f:89:54:1c:7b:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  6 23:18:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41a218365bd9427988e4e6a501af94526c2aaa3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:af:3c:f6:40:28:21:f1:32:e7:37:1f:c7:
                    c3:26:29:e6:ca:15:cc:7f:ab:fa:a6:e9:b4:30:85:
                    00:b4:2a:8d:08:60:35:09:c4:7c:fe:7f:0c:90:0c:
                    71:e7:3d:e2:88:34:a2:bf:08:63:90:de:b0:99:45:
                    58:8a:38:2a:79:1b:ac:ba:20:4e:ae:2c:9a:a7:aa:
                    09:20:2c:20:dc:9b:87:ad:1b:49:17:98:50:59:5d:
                    50:28:dc:2b:3c:93:b9:3c:76:e5:cc:d5:e3:89:38:
                    f6:e1:b1:0b:85:29:34:26:69:e4:f6:83:ea:0a:a4:
                    21:a8:43:0b:41:65:78:0b:b3:09:2d:50:3f:9e:c2:
                    48:a6:40:b3:7e:e9:26:cc:17:93:5c:e4:76:aa:86:
                    99:ad:23:d4:3b:a3:c0:b7:74:7e:27:f0:ff:44:c5:
                    95:26:60:02:95:bd:f6:eb:0e:8e:86:0a:f8:a2:78:
                    b2:e5:5f:48:57:68:dc:d1:fc:3f:1b:af:92:e2:11:
                    69:c5:60:ec:7b:a8:f6:82:d1:6b:b7:fc:2d:9e:96:
                    d5:84:19:dc:c0:e8:62:2d:81:8c:6c:48:ca:70:c5:
                    ae:e2:a6:65:f0:bd:48:64:b3:04:2b:e0:07:e0:05:
                    dc:ce:fa:68:8f:46:a5:f9:3c:1e:13:f8:38:19:94:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:18:36:5B:D9:42:79:88:E4:E6:A5:01:AF:94:52:6C:2A:AA:3E
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QaIYNlvZQnmI5OalAa-UUmwqqj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:10:b2:fc:ff:96:f5:f9:d5:12:0f:c2:98:b1:29:50:ae:
         e6:8f:4b:b4:cd:6e:26:fb:0b:7f:1a:38:99:61:1f:14:31:e9:
         ef:a1:99:50:2e:30:69:a8:b4:8a:51:f7:b2:cf:e1:88:7d:aa:
         06:99:81:f7:da:67:e0:d3:d1:0a:72:ab:fd:2b:4f:96:af:e2:
         95:3c:77:1f:e3:7c:4b:22:01:ad:0a:d4:52:2c:80:e3:e2:2a:
         ac:83:07:85:85:c3:cf:7c:8f:20:c4:a5:70:a7:51:b8:16:cf:
         4a:aa:89:26:70:04:aa:e6:84:38:ef:15:c6:09:11:7f:71:60:
         63:9f:bb:5f:63:e1:bf:52:8c:1a:97:b5:7e:0f:ae:1f:89:ea:
         1b:6e:43:a5:2e:69:37:95:5e:e8:1e:7d:0a:12:e1:cc:a4:54:
         04:da:70:75:79:d4:b2:85:34:db:36:58:69:dc:3d:49:76:71:
         eb:40:79:64:1a:de:11:28:1e:5f:13:98:12:65:92:e9:bc:74:
         72:9c:8d:5a:91:b4:4c:df:53:80:ff:e4:e1:99:97:0a:80:2b:
         ab:13:36:ff:61:f7:47:65:ea:61:1f:c2:e3:4f:ef:60:40:9e:
         e4:76:a5:c7:0f:ea:a1:9d:4a:12:2e:44:dc:b1:ed:09:40:a8:
         79:0e:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----