Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa
File:                     oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa (raw, json)
Hash identifier:          9+6/6mblGafKww6qLdcX7/DIPD9K32aNNx1T5wrC0pI=
Subject key identifier:   A1:57:F8:BE:FA:F5:A8:26:83:29:D9:67:36:AD:0C:7C:D9:2A:C1:A2
Certificate issuer:       /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial:       01856E2F8497C8939922665AC7367737639C
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa
Signing time:             Sun 01 Jan 2023 16:34:45 +0000
ROA not before:           Sun 01 Jan 2023 16:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206341
IP address blocks:        45.82.172.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:84:97:c8:93:99:22:66:5a:c7:36:77:37:63:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
        Validity
            Not Before: Jan  1 16:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a157f8befaf5a8268329d96736ad0c7cd92ac1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:9b:0c:0a:47:6f:f9:11:bb:2b:54:d4:60:
                    62:07:f7:17:a8:cf:71:20:dc:40:7a:4b:31:9e:9d:
                    f9:d6:b1:77:47:2e:6e:7d:ed:f0:06:96:8e:98:70:
                    94:2f:0a:6f:d6:84:29:e7:b4:c4:1f:45:b3:a4:4a:
                    32:72:09:91:19:aa:16:1c:d0:37:21:f8:0a:71:2d:
                    a4:ba:f3:aa:94:c3:3e:a4:45:8c:96:46:33:20:1e:
                    d7:ea:d7:d4:87:7b:f7:ac:28:97:8d:a2:f7:62:1f:
                    a2:c0:8a:ce:3c:40:2d:dd:09:9a:82:b6:08:f7:d1:
                    f6:9c:23:54:72:e9:96:34:09:99:ce:cf:30:0e:36:
                    13:7f:f8:f1:1f:4a:fe:1a:e5:52:0b:fe:96:d8:cb:
                    f8:1e:1d:0b:6d:08:44:29:13:ea:30:ba:5a:81:8a:
                    d1:18:c0:68:f5:fb:91:a5:d8:d0:41:3f:97:56:01:
                    56:72:27:0f:d2:ff:48:58:a8:e9:ef:9a:fd:e7:af:
                    13:78:49:69:75:5e:54:f8:be:74:23:28:af:cc:5a:
                    c7:07:31:b8:3b:82:f3:ae:ea:d9:10:c7:7f:3e:52:
                    16:1e:47:e0:6d:11:25:5e:28:ed:bb:d6:4f:91:1d:
                    95:ac:36:ab:a9:82:53:92:f8:09:ee:d0:93:31:c6:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:57:F8:BE:FA:F5:A8:26:83:29:D9:67:36:AD:0C:7C:D9:2A:C1:A2
            X509v3 Authority Key Identifier:
                keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:a3:bf:eb:25:9c:45:2b:46:69:c9:22:46:44:5b:2d:2d:
         3c:e4:1d:80:5c:4d:a2:85:f6:e5:c3:4b:b2:15:95:22:65:fd:
         a6:cd:a6:15:52:ce:99:0f:9e:73:49:5a:ee:0d:13:a4:72:ef:
         81:9f:a1:a3:ad:a4:1e:55:01:48:0e:27:85:e0:0d:d0:13:61:
         b3:4d:62:08:a0:b4:50:82:b7:98:53:eb:3d:37:eb:54:c5:37:
         08:37:07:b2:32:3e:93:76:bd:0f:99:1d:c2:f8:6f:6f:4f:f8:
         55:92:fe:11:8b:a0:2c:0f:4c:1e:56:61:74:2e:fd:96:5e:23:
         22:7c:54:fe:e1:da:67:5a:ba:32:8f:47:d4:03:35:15:a6:b5:
         c8:a2:d9:1d:cb:25:23:a8:da:6a:52:d4:61:93:d4:72:fd:4b:
         d9:b3:23:ad:3e:f8:2d:73:08:0b:31:07:11:fc:98:53:ae:40:
         c9:d5:35:58:5b:25:b9:01:82:50:68:d4:97:de:8e:c2:b1:a2:
         48:cb:aa:15:c4:0c:94:24:11:41:19:c6:3c:6b:d5:3a:24:7a:
         bf:1f:98:2f:ef:a0:3e:97:95:20:1c:29:34:1e:4a:2b:96:d6:
         6b:e7:4c:d8:90:2c:a1:a0:e7:ae:8e:aa:8e:f9:b6:e9:90:e1:
         3a:c8:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----