Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ks6cY0kWPXRlOjQX1Qa1bIC5mdo.roa
File:                     Ks6cY0kWPXRlOjQX1Qa1bIC5mdo.roa (raw, json)
Hash identifier:          Jt6rP6HawdSbsJjMRoSOuO0RQGom5wfLp+i9gjuVFTE=
Subject key identifier:   2A:CE:9C:63:49:16:3D:74:65:3A:34:17:D5:06:B5:6C:80:B9:99:DA
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53ED73550A71244E4DB9EB735CF147
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ks6cY0kWPXRlOjQX1Qa1bIC5mdo.roa
Signing time:             Sun 01 Jan 2023 07:55:17 +0000
ROA not before:           Sun 01 Jan 2023 07:55:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39792
IP address blocks:        45.12.163.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:ed:73:55:0a:71:24:4e:4d:b9:eb:73:5c:f1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ace9c6349163d74653a3417d506b56c80b999da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:da:99:93:6e:ed:ef:e7:15:f5:e3:9e:e4:
                    97:8c:56:6e:fc:75:7b:3a:07:f7:08:22:cd:2d:0d:
                    e6:28:b6:2b:71:3d:7a:bb:d5:c1:ab:64:a7:6e:9d:
                    61:83:33:2b:0f:c7:c9:b6:5e:5c:5b:77:2f:8b:c8:
                    77:ed:b0:bc:89:72:ee:8e:ae:a1:84:e6:04:1a:a4:
                    6e:5d:46:c7:4c:d7:da:80:4b:ac:b0:a2:5b:f2:98:
                    58:2e:0a:f9:a1:c5:0f:b9:2a:1e:d1:1b:7a:13:6a:
                    31:0a:8c:e2:42:4c:ee:3a:a3:1b:ef:d2:01:0d:4b:
                    da:33:49:d6:05:c5:81:d4:14:2b:5f:70:aa:f0:6a:
                    78:ba:8a:e2:3b:03:4d:ff:33:09:b3:0e:94:ae:26:
                    c0:1b:eb:3a:39:c1:b2:e5:80:21:12:c0:0c:43:5d:
                    90:9a:31:86:e5:43:3b:a0:b1:d6:75:1c:96:99:17:
                    57:c3:89:f4:7f:ed:9f:9c:02:5a:4f:53:8c:6e:19:
                    0c:e6:8f:90:50:6c:ef:0b:77:c1:2b:b3:2e:84:8c:
                    c5:6f:35:83:52:6f:18:00:5a:69:80:c3:ae:92:fa:
                    7a:b8:65:af:01:0e:e1:74:2c:b6:7a:65:12:85:4d:
                    2a:22:0b:11:c2:cf:90:ae:f0:5d:b0:4e:cd:64:d0:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:9C:63:49:16:3D:74:65:3A:34:17:D5:06:B5:6C:80:B9:99:DA
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ks6cY0kWPXRlOjQX1Qa1bIC5mdo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:21:a0:36:ca:9c:f0:8a:4b:32:d2:11:3a:b3:6d:ce:44:
         9b:76:8a:40:64:6d:e1:87:d6:72:ce:bf:e6:3a:47:e6:c2:8b:
         94:2e:d0:0e:03:5b:ae:95:47:9d:6d:ef:ca:3b:e2:14:ce:77:
         ce:a6:89:16:24:2b:aa:cf:86:67:cb:c9:a3:dd:4a:5d:86:da:
         a8:47:79:ab:18:70:f2:78:73:82:7d:dc:f8:b6:cc:21:91:42:
         8a:a8:fa:de:82:35:47:25:2b:53:7d:94:80:09:bf:26:b3:49:
         7f:9f:b0:04:6a:63:f6:7a:0f:ee:06:64:dc:02:90:79:bc:57:
         ca:86:f4:0f:05:1a:d7:73:8f:21:28:a5:13:62:42:bd:ee:3f:
         4d:d3:d5:63:09:d5:97:0f:60:f6:d9:c4:cd:bc:40:3a:fc:e3:
         e2:f7:d7:48:0a:6c:3f:2f:be:28:e1:03:85:58:bb:31:8b:e5:
         22:4c:cf:31:4e:4b:e5:9c:43:e4:2c:44:c4:84:67:7f:6a:25:
         95:c6:45:1d:3d:d8:de:f3:dd:1c:2f:c9:ce:92:4b:26:4d:0a:
         9c:aa:22:cf:cb:fa:ee:cd:43:0b:ae:d8:d3:49:69:01:91:0c:
         fd:a4:f4:22:1e:95:67:6b:9a:7d:3f:e7:29:8b:48:f1:5c:9d:
         31:0c:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----