Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa
File:                     7O7Nprm9OtQOQzQNn3LkczlGsr0.roa (raw, json)
Hash identifier:          D6+d5vZOBrJnUEoJt/PBvFNJmLgFXIbLJF689WxUAj0=
Subject key identifier:   EC:EE:CD:A6:B9:BD:3A:D4:0E:43:34:0D:9F:72:E4:73:39:46:B2:BD
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01856BDC6A484A6505154BEF7DAA4E8622D8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa
Signing time:             Sun 01 Jan 2023 05:44:45 +0000
ROA not before:           Sun 01 Jan 2023 05:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51044
IP address blocks:        45.148.172.0/22 maxlen: 32
                          2a0f:600::/32 maxlen: 64
                          2a0f:600::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:6a:48:4a:65:05:15:4b:ef:7d:aa:4e:86:22:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jan  1 05:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eceecda6b9bd3ad40e43340d9f72e4733946b2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:e4:c0:f2:2e:9c:65:8f:74:d2:75:e3:4b:
                    14:4d:66:e1:af:54:08:f4:2a:4a:39:21:2f:d2:24:
                    af:50:23:45:30:5e:93:e5:ab:c3:77:ad:85:21:dc:
                    9a:1f:9a:3e:91:26:40:0a:78:7b:0d:45:11:c2:2d:
                    f3:d6:ca:8e:f9:13:6f:fd:e5:92:5e:22:a2:07:cd:
                    10:9b:99:5d:2c:56:d8:ca:d9:ed:85:b6:0f:fe:c1:
                    42:45:53:2a:6a:ec:51:76:23:5e:35:64:77:01:5c:
                    78:97:fd:54:0b:62:cb:60:76:e6:0c:d1:8a:95:04:
                    c5:7b:63:4b:23:f6:fa:59:ef:43:df:10:25:ab:cc:
                    96:c5:0e:04:ea:df:ef:b8:e5:ec:1a:f3:18:5a:9c:
                    ec:f4:06:88:70:44:1c:16:9b:3a:87:55:ec:fc:13:
                    54:fb:95:07:80:ce:f9:cf:2a:3c:e0:29:87:dd:41:
                    8a:08:1b:93:bc:21:dd:2b:83:4c:40:af:c0:52:34:
                    a9:fc:53:58:ff:1d:c6:54:01:5e:2f:09:02:91:65:
                    b1:ca:7d:0e:51:fb:67:e1:27:c1:2e:6f:26:ac:8d:
                    57:56:7a:2c:7c:c6:5f:7d:8e:2b:18:fa:46:46:94:
                    b5:7a:4e:82:b3:12:65:3e:bd:a8:04:98:e7:ef:b7:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EE:CD:A6:B9:BD:3A:D4:0E:43:34:0D:9F:72:E4:73:39:46:B2:BD
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/7O7Nprm9OtQOQzQNn3LkczlGsr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.172.0/22
                IPv6:
                  2a0f:600::/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:8b:11:fd:a1:cf:f7:a1:f7:dc:35:cd:b0:a4:0c:9d:71:
         3b:f4:9b:4a:3d:8f:73:73:9c:c5:60:2c:2f:36:1b:79:03:71:
         9b:07:fd:3d:7f:fe:67:2d:0a:e0:70:17:b4:68:87:39:4e:1d:
         e7:e3:d1:80:6b:57:e7:13:e6:07:9f:ec:e3:f6:2f:b5:d7:ab:
         70:d8:af:e7:88:aa:4c:7f:f5:3c:14:d9:dc:44:cd:12:88:7f:
         f0:c7:57:9e:01:d3:f7:17:fe:58:68:d7:07:89:75:4e:2b:49:
         3f:54:4f:fb:5c:c5:0a:ca:f6:94:db:41:30:d4:4f:9f:78:89:
         53:da:ba:4b:8a:2d:27:59:0d:e7:66:77:cb:2c:8b:0a:2b:9a:
         76:59:18:2b:35:fc:62:d4:1a:dc:d3:d6:29:a7:27:68:ca:90:
         18:9f:80:1b:17:76:c0:41:f1:c5:7e:e1:fe:e4:95:20:97:1e:
         0b:87:ae:09:e9:35:9c:81:3a:6b:fe:d0:88:bf:b5:21:d7:b7:
         37:ba:b7:32:8c:41:03:2d:ff:94:ca:05:6c:6d:8e:2a:0a:d4:
         6b:e9:e3:a4:2f:2c:4a:55:40:54:53:6a:a0:77:28:7a:b2:ba:
         6a:67:5a:5b:e8:7d:2e:c1:d0:8f:dc:08:84:2c:d6:09:d2:cb:
         3a:12:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----