Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/c_cdgfdbe61-nRr_KV409j-tHAA.roa
File:                     c_cdgfdbe61-nRr_KV409j-tHAA.roa (raw, json)
Hash identifier:          0U6IX7fbYrcHlDtWF0f0xhr3Rf4Qln+jxGBWvJpQad8=
Subject key identifier:   73:F7:1D:81:F7:5B:7B:AD:7E:9D:1A:FF:29:5E:34:F6:3F:AD:1C:00
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53E8D8ADF839505A4A75F83E613365
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/c_cdgfdbe61-nRr_KV409j-tHAA.roa
Signing time:             Sun 01 Jan 2023 07:55:16 +0000
ROA not before:           Sun 01 Jan 2023 07:55:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35487
IP address blocks:        45.136.0.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:e8:d8:ad:f8:39:50:5a:4a:75:f8:3e:61:33:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73f71d81f75b7bad7e9d1aff295e34f63fad1c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:12:ec:bf:df:42:73:9c:45:3e:c5:49:9e:
                    e1:de:00:6d:56:6f:fa:7b:47:e7:3c:58:7e:2f:97:
                    21:ea:00:97:25:b6:fd:bf:b5:19:91:94:ee:a6:d6:
                    99:37:4c:73:45:02:bf:e7:09:4a:16:f8:11:df:dd:
                    1b:0b:4b:c1:54:48:6f:30:31:36:2e:70:d2:12:eb:
                    00:66:27:c5:59:ff:b6:97:78:ea:c7:1f:98:c9:d3:
                    1d:21:ce:29:48:04:63:dc:b8:7d:fe:c2:b1:d6:18:
                    9f:04:66:fd:8d:5a:d1:66:34:1f:d5:fe:3a:34:c7:
                    a9:6d:ce:26:a4:10:04:1c:20:de:1c:3c:ba:ec:eb:
                    54:61:48:af:d9:68:7e:22:32:6e:25:49:e4:25:e2:
                    58:cb:b4:a4:34:a0:89:80:5c:de:a8:f4:81:0e:2f:
                    ab:0e:73:e4:8b:d1:30:22:95:23:0b:74:32:1e:b9:
                    b1:49:08:26:c6:51:d1:07:b0:cd:44:ab:60:23:ea:
                    8f:ec:9a:27:e3:39:34:df:0c:bd:eb:cd:a1:f3:64:
                    2e:20:82:75:ae:2e:d6:ff:df:52:1b:37:0c:da:ee:
                    a0:c1:21:fe:1d:b4:29:29:29:a7:65:d6:ab:88:cd:
                    c6:e8:b6:1a:f2:d9:0b:62:3c:89:d2:67:f7:5f:6c:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:1D:81:F7:5B:7B:AD:7E:9D:1A:FF:29:5E:34:F6:3F:AD:1C:00
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/c_cdgfdbe61-nRr_KV409j-tHAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:69:f3:ee:10:f7:ab:a6:18:5b:86:42:12:aa:7e:54:84:73:
         a3:24:30:f6:a6:75:fd:57:0b:f4:ad:9b:54:e5:cc:d1:15:5b:
         70:83:56:55:c5:0a:a0:66:2f:74:b4:88:da:2f:ca:63:ef:40:
         6c:df:d6:e7:56:6d:d2:ee:38:fd:0a:44:40:09:42:b2:bc:60:
         49:14:db:73:03:99:ce:19:85:a6:79:fa:1e:86:f8:fe:c4:39:
         1d:70:02:fe:db:62:9f:94:b3:ac:b4:d7:ad:bb:b2:7d:c8:7a:
         1f:5d:86:1c:4c:39:91:b2:60:c6:6a:1a:02:42:1b:f6:0a:28:
         06:b2:d3:77:71:00:c0:7a:7e:c9:f8:94:7d:c8:4a:e5:55:50:
         aa:c5:78:09:b5:af:33:75:5a:ac:5e:ee:b5:44:63:91:f0:dc:
         21:07:ce:4d:f8:42:7a:fc:dc:34:b3:13:9a:3f:36:c0:d6:43:
         c6:dc:23:65:8a:f9:9f:95:cc:9e:68:b6:d2:e3:1c:2d:4d:8c:
         e5:9b:b9:6b:0f:3c:cd:a0:2e:b6:cb:95:3e:c0:2b:0c:ee:e4:
         7f:20:95:de:4b:7b:9b:12:a4:21:83:96:24:7e:93:b9:1b:5b:
         5a:1d:fb:14:f8:f6:c9:cd:7f:4e:18:79:8f:ee:8d:41:ee:d8:
         9e:83:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----