Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa
File:                     POpi6akD38lnnwuVVLa6NfTGDxw.roa (raw, json)
Hash identifier:          n6bQSr7R5N//rq/Lm63CfOfhIRflZzKalrJz3P+ueiM=
Subject key identifier:   3C:EA:62:E9:A9:03:DF:C9:67:9F:0B:95:54:B6:BA:35:F4:C6:0F:1C
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       018B3CD04FF71496871F9F78073C5AA7D87B
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa
Signing time:             Tue 17 Oct 2023 08:46:06 +0000
ROA not before:           Tue 17 Oct 2023 08:46:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.242.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:d0:4f:f7:14:96:87:1f:9f:78:07:3c:5a:a7:d8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Oct 17 08:46:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cea62e9a903dfc9679f0b9554b6ba35f4c60f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:28:e3:33:6c:b6:3f:5f:44:9f:c1:a9:b6:
                    0d:c7:cf:d8:2a:58:98:c7:62:65:6a:33:d2:48:e3:
                    73:e7:c1:69:97:22:81:76:74:f3:1b:f1:93:89:11:
                    ed:2a:63:09:5f:9c:e3:59:b7:5f:08:f7:ee:d7:c9:
                    99:17:d1:5b:2c:1a:a8:0b:30:df:82:eb:5f:ef:dd:
                    61:3e:84:2c:60:3b:a9:2e:f1:7e:5a:41:14:32:4b:
                    da:72:d8:6a:01:56:e0:8e:1f:0d:69:08:48:4d:e3:
                    b9:39:6f:0a:bd:48:2e:57:81:a9:88:92:51:a0:10:
                    14:5b:05:43:d2:06:af:33:3f:1b:ea:1f:36:70:95:
                    5f:09:14:ac:a4:eb:a7:d9:f5:a8:4b:36:cb:1f:6f:
                    6e:2f:8b:c1:b2:56:69:4b:fd:b2:89:f9:3d:92:2f:
                    12:fb:25:f9:77:a5:ef:a7:9c:70:02:ed:e5:93:4d:
                    d6:ef:bf:c9:3d:ca:08:50:5d:11:df:19:ad:0a:80:
                    11:89:50:16:f6:22:8d:c0:d8:51:8a:77:42:d7:51:
                    3c:ce:ca:c1:56:aa:f2:3b:c0:78:ba:1a:05:fb:a8:
                    ec:40:3b:3f:3b:fe:ba:0f:27:92:d7:60:9b:cb:65:
                    b7:2d:74:78:fb:ba:31:3a:34:c2:ae:06:f2:72:a7:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EA:62:E9:A9:03:DF:C9:67:9F:0B:95:54:B6:BA:35:F4:C6:0F:1C
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/POpi6akD38lnnwuVVLa6NfTGDxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:32:af:a5:e7:d4:c6:ea:b8:ed:bc:40:01:26:53:71:36:
         65:11:88:8b:cf:e2:c1:ae:0f:cf:40:6d:a1:c0:82:de:50:e9:
         85:ae:1d:70:f5:23:5c:f6:ae:a0:df:17:5b:58:80:2d:8e:21:
         88:a1:47:b9:83:2f:77:af:74:21:db:a6:64:ea:17:ed:e4:76:
         b7:be:1a:55:60:29:e0:47:c0:2b:ef:db:47:00:81:de:bb:79:
         84:a6:e9:80:c9:4c:e1:be:05:ab:79:39:a1:61:2b:9b:8e:24:
         51:0c:6e:f4:cc:61:77:c8:f7:86:59:89:a1:b5:d4:c8:6b:57:
         c0:8e:fd:32:9a:58:14:97:19:8e:e6:8f:f3:8c:7c:f8:2b:22:
         d2:d2:2a:a1:f4:3e:3a:27:91:3e:42:2a:36:90:cd:b5:42:29:
         82:47:4b:bc:f4:fa:42:9a:68:db:18:68:09:95:ab:6e:1e:8d:
         45:0e:02:a0:04:c8:3e:1c:7a:f3:69:28:6c:65:10:7f:6f:9b:
         e7:58:be:49:35:a9:bc:22:ff:a0:63:93:3f:87:01:fd:cf:90:
         0b:7f:fe:78:f3:f7:12:6b:f6:26:d8:6a:0a:04:ce:81:6f:0d:
         e4:d3:28:f3:d3:23:c3:8a:d9:11:90:a6:6e:97:5b:07:a1:27:
         0e:50:f0:df
-----BEGIN CERTIFICATE-----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