Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa
File:                     xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa (raw, json)
Hash identifier:          ESvzxMatuZtWiYSbDGu/OsTaj06FiVA0GhL41UWKJvQ=
Subject key identifier:   C4:9A:BD:1C:42:9B:C9:0C:AB:13:D7:D0:17:9B:60:71:C1:06:CC:94
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53EE03C7EFCD3C79B6909216729571
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa
Signing time:             Sun 01 Jan 2023 07:55:17 +0000
ROA not before:           Sun 01 Jan 2023 07:55:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40676
IP address blocks:        45.12.161.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:ee:03:c7:ef:cd:3c:79:b6:90:92:16:72:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c49abd1c429bc90cab13d7d0179b6071c106cc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:93:9c:ca:70:4f:06:20:fd:51:33:2e:72:
                    e6:fd:c4:27:04:83:a8:36:dc:b9:30:ac:5a:95:5d:
                    b2:d7:77:8d:38:75:af:65:c1:37:fb:01:24:55:bf:
                    2b:4b:8f:b9:71:12:47:f8:ce:ea:50:d0:d1:16:ea:
                    fb:15:f8:92:e5:7a:dd:f0:ba:37:0b:50:ba:15:b1:
                    df:cb:cd:f1:bd:31:99:23:44:1c:36:b8:8d:03:8e:
                    68:62:96:24:69:91:5e:d8:a9:87:47:6a:e0:5d:12:
                    d7:84:9a:8a:b3:65:52:34:e0:db:55:48:17:4c:d4:
                    37:f4:f6:f3:11:88:b0:4f:96:60:3a:9f:81:af:2f:
                    6e:41:87:4d:64:aa:58:9e:9a:35:af:88:98:16:9e:
                    32:80:39:5a:19:49:0d:6a:94:29:29:28:d0:66:21:
                    d1:8a:b1:3c:04:be:27:d3:2b:9c:9d:23:0d:9f:8a:
                    04:89:95:a5:07:8a:0b:ef:53:2e:a7:ff:44:cf:68:
                    40:1d:bd:6f:ea:c7:47:33:b6:fe:81:08:ea:d4:50:
                    39:8f:0a:0b:81:6a:a9:a2:15:82:86:23:70:f7:33:
                    dd:9a:24:31:e4:06:ae:ab:b1:77:14:32:ec:5d:b6:
                    e4:c4:2c:3f:0f:c7:17:f5:7a:b9:6e:85:9f:c0:2a:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9A:BD:1C:42:9B:C9:0C:AB:13:D7:D0:17:9B:60:71:C1:06:CC:94
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/xJq9HEKbyQyrE9fQF5tgccEGzJQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:df:18:ef:6b:0b:6f:61:17:30:c5:f1:bf:35:85:d5:6e:74:
         8a:95:70:0d:67:82:eb:2b:dd:58:f9:ba:5a:35:d5:b8:22:19:
         92:6f:5a:ba:95:4b:39:df:df:9c:ea:ec:47:2e:29:4b:80:df:
         c3:61:c7:a9:f8:a8:83:65:67:40:9e:c0:fa:f3:04:f0:f6:be:
         b7:84:4c:72:c2:e4:55:ae:2c:7b:eb:3c:e3:ca:18:69:a9:86:
         96:6f:a4:e1:a5:8e:09:25:14:b5:16:1d:83:da:3e:99:56:27:
         eb:18:e6:d1:fe:09:fb:94:1e:dc:b3:59:be:42:ed:62:87:7c:
         52:3d:62:c6:90:65:4c:de:26:eb:59:3d:b3:f3:36:68:d7:e0:
         2e:96:df:4a:bd:26:44:c4:c5:28:1c:13:30:22:2d:e4:eb:89:
         b6:cf:ac:bb:a6:bb:f2:dd:e4:37:40:01:f1:f9:b0:34:1c:dc:
         02:d6:be:30:3e:79:5e:e2:a5:96:b9:08:c0:b8:62:ac:64:a7:
         f8:83:66:2f:9a:b3:e4:fa:b8:97:23:35:2a:5a:7e:35:30:0c:
         65:dc:77:28:90:5b:99:13:de:02:f6:cb:2c:ec:91:5c:7b:83:
         84:28:1c:ee:a4:43:73:69:1f:71:60:a2:71:8f:5c:c4:e1:46:
         db:94:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----