Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oA5Rszt7WM1UfV4HEHalaNjapNU.roa
File:                     oA5Rszt7WM1UfV4HEHalaNjapNU.roa (raw, json)
Hash identifier:          CfmSe4mqWxcx0F0w82f7QybxmoOkb8sZmXrXbLWXWoc=
Subject key identifier:   A0:0E:51:B3:3B:7B:58:CD:54:7D:5E:07:10:76:A5:68:D8:DA:A4:D5
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01888B150BA34AC47B1389881AEFC83D75B2
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oA5Rszt7WM1UfV4HEHalaNjapNU.roa
Signing time:             Mon 05 Jun 2023 10:23:12 +0000
ROA not before:           Mon 05 Jun 2023 10:23:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.162.10.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8b:15:0b:a3:4a:c4:7b:13:89:88:1a:ef:c8:3d:75:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  5 10:23:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a00e51b33b7b58cd547d5e071076a568d8daa4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:db:20:e8:56:4c:26:81:c1:73:c8:0d:31:
                    62:bd:19:28:3c:10:86:8b:b8:c8:42:7b:4f:c3:bc:
                    0b:94:06:ac:38:3b:19:c8:23:f2:0d:a2:16:56:2f:
                    d9:be:e3:0d:26:a2:67:0d:ec:c4:56:99:91:52:25:
                    79:93:bd:85:a3:d2:bd:69:ab:47:80:d8:f4:2f:86:
                    cf:fe:e4:e9:46:d9:26:a2:6b:2e:c2:f5:13:9c:bc:
                    7a:30:14:b6:d7:6d:a0:6b:17:0b:7b:54:60:80:c2:
                    72:7d:e0:86:c9:25:e5:bb:92:15:9c:ea:6c:a7:97:
                    6a:17:84:26:37:fe:b7:99:75:94:cc:95:2a:35:c7:
                    8f:18:20:74:68:b9:60:e0:ab:01:cb:db:69:cd:a0:
                    bb:41:15:06:c9:00:42:fa:23:85:0f:dc:8a:ec:06:
                    d0:1d:1a:80:a4:04:35:70:1d:2c:26:bc:cc:dc:c2:
                    80:43:df:2d:a3:2e:a7:32:ae:ff:a2:22:9f:92:46:
                    5b:f9:76:8e:96:e5:dd:27:cc:e1:1b:10:cc:4d:e3:
                    8e:12:4b:dc:ad:32:08:c3:6c:19:5d:5d:f9:b4:ae:
                    a1:28:6a:f1:a9:44:56:d0:c1:cf:f9:a7:a3:97:6d:
                    f5:dc:8d:f1:40:df:81:6c:4a:67:4f:e1:6e:9f:83:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:51:B3:3B:7B:58:CD:54:7D:5E:07:10:76:A5:68:D8:DA:A4:D5
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oA5Rszt7WM1UfV4HEHalaNjapNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:32:e0:ea:32:7a:ea:a9:56:65:c8:c4:8c:1f:43:6d:0e:
         9f:8d:eb:6d:1f:f1:72:ac:f4:d8:f0:e4:b5:9d:4d:69:63:ea:
         33:26:66:49:d8:68:87:b7:55:2d:ee:cf:f4:6f:b0:a2:35:c3:
         9d:43:3b:45:fc:f3:0f:b3:37:1c:70:ff:4d:e3:a4:e2:0a:9d:
         f8:91:dd:17:f4:00:bd:64:90:72:81:c4:6e:93:51:8e:40:db:
         13:01:94:78:86:0e:54:c6:cc:48:47:e8:fe:e4:4f:26:41:73:
         da:28:f5:f3:39:36:25:27:38:71:40:46:c5:d8:dd:94:57:cf:
         b3:14:60:3c:9b:4e:9c:6e:d9:8d:87:68:3e:c5:60:db:3e:85:
         a4:cb:aa:ca:46:65:63:26:76:97:32:df:da:89:88:72:ee:06:
         19:39:8d:49:c5:5d:95:58:fd:ba:2e:cd:7d:87:8d:cd:3c:31:
         4d:d1:3d:69:39:fc:82:9f:19:b6:45:48:ee:76:ab:67:e9:63:
         1f:45:d8:d9:95:b7:bd:44:29:45:33:98:54:1a:29:ff:8c:aa:
         26:54:a0:3d:0c:7e:6c:81:b2:c0:60:b9:99:93:12:96:1f:25:
         90:5f:29:b4:45:66:44:d7:86:e4:38:67:d7:b9:1e:85:8c:d2:
         ba:f4:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----