Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa
File:                     uNwR_K_f6bOzbWScFP-mqa5CnsM.roa (raw, json)
Hash identifier:          OW1XJWOgwLGImc/25cjSYgBpxhNnUO0v8cni0LUGBwA=
Subject key identifier:   B8:DC:11:FC:AF:DF:E9:B3:B3:6D:64:9C:14:FF:A6:A9:AE:42:9E:C3
Certificate issuer:       /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial:       01857030776C13F8D8B643FA0908DF8D3116
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa
Signing time:             Mon 02 Jan 2023 01:55:02 +0000
ROA not before:           Mon 02 Jan 2023 01:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208567
IP address blocks:        45.91.125.0/24 maxlen: 24
                          2a0e:f41::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:30:77:6c:13:f8:d8:b6:43:fa:09:08:df:8d:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
        Validity
            Not Before: Jan  2 01:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8dc11fcafdfe9b3b36d649c14ffa6a9ae429ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:27:a9:55:bd:9e:3b:ad:91:39:81:e7:19:
                    a3:e1:25:8d:3d:db:44:9b:f5:a0:f8:f9:a2:ac:9c:
                    02:26:21:28:01:9a:b8:d7:0d:12:f2:b8:ed:cc:40:
                    ff:b9:4b:3b:41:fe:41:40:82:b9:b0:1c:9d:d8:7a:
                    fc:47:f7:c2:29:e5:f3:85:62:ba:8c:ae:d3:57:51:
                    ed:64:97:89:4d:4b:04:9e:3b:37:d7:9f:44:92:7d:
                    84:4b:7a:4c:29:db:e3:11:15:60:65:77:7c:a6:a0:
                    b9:07:28:6a:e7:50:65:d4:b1:a8:3b:2a:5d:1d:e7:
                    c7:c4:fa:ac:f4:15:b1:e4:42:1e:60:c1:5d:7c:c1:
                    e9:43:de:25:7d:28:01:4c:af:96:93:ff:64:6a:ca:
                    1e:af:93:20:49:ea:90:0a:55:b3:45:31:32:9e:aa:
                    4d:fb:59:46:d9:0b:18:d1:07:36:8c:e7:a6:48:ed:
                    20:b3:3c:fa:5c:bb:4a:d9:41:13:d6:3f:c4:f0:1e:
                    a4:26:5b:5a:88:0b:da:1c:ba:b1:0f:25:9b:01:a6:
                    ca:7f:44:45:86:89:b2:a6:f3:79:09:70:66:a2:b6:
                    12:62:79:73:21:d5:97:ce:28:7c:8a:2d:f1:89:c2:
                    14:e8:ae:ff:f6:61:e1:40:f1:d2:2b:34:b6:83:8d:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:11:FC:AF:DF:E9:B3:B3:6D:64:9C:14:FF:A6:A9:AE:42:9E:C3
            X509v3 Authority Key Identifier:
                keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/uNwR_K_f6bOzbWScFP-mqa5CnsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.125.0/24
                IPv6:
                  2a0e:f41::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:53:59:e9:70:27:04:39:92:68:4f:31:ee:c9:a8:1c:82:94:
         d4:3b:c2:f4:d9:4e:cd:c9:b2:5e:5a:68:33:3d:14:38:10:ab:
         8a:30:68:c9:bc:0a:1e:8f:8c:ba:71:4a:23:3d:46:50:af:ac:
         b6:1a:fd:97:47:22:84:e7:b3:be:f9:e7:15:9f:4d:b5:ba:1e:
         cd:02:d4:bc:fc:a9:0d:b1:75:a8:47:5a:a6:7a:4d:58:bc:66:
         a3:dc:bd:9f:24:52:ee:e8:af:fc:aa:a5:ef:72:92:7c:64:f4:
         76:73:2e:a6:14:08:be:6e:2a:45:00:42:15:41:ab:f2:5a:5c:
         85:a2:23:2a:17:70:ab:10:ef:d6:ba:f2:a6:b9:93:82:5f:1d:
         e3:91:c5:6e:37:cc:6e:65:0d:b4:f7:45:ed:c0:7e:01:9c:15:
         80:f6:29:18:ab:28:32:31:68:da:38:45:1b:0b:26:d7:21:8e:
         5a:32:98:4b:f7:90:f8:35:0c:61:2e:41:ad:f7:36:f8:a1:e5:
         38:e3:d0:1d:60:f5:ad:60:7b:12:0c:d7:69:3f:31:f6:0d:2c:
         a5:e0:f4:91:96:c4:ce:c3:d9:e6:2e:fa:62:63:6d:9e:aa:39:
         ee:5b:cc:ab:88:6d:45:4d:0e:3d:85:d6:b1:be:36:54:5e:97:
         08:73:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----