Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0VwczFbNQtrmRTGPQHZfjvGaHWQ.roa
File:                     0VwczFbNQtrmRTGPQHZfjvGaHWQ.roa (raw, json)
Hash identifier:          csFmmUKm8LmoA2VspmNY41kw1m/lVUg6+NeXdmKAsVo=
Subject key identifier:   D1:5C:1C:CC:56:CD:42:DA:E6:45:31:8F:40:76:5F:8E:F1:9A:1D:64
Certificate issuer:       /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial:       0189855722300EFA2DD68D7A129BCE6B0AFB
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0VwczFbNQtrmRTGPQHZfjvGaHWQ.roa
Signing time:             Mon 24 Jul 2023 00:40:27 +0000
ROA not before:           Mon 24 Jul 2023 00:40:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62321
IP address blocks:        45.89.8.0/24 maxlen: 24
                          2a0e:b40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:85:57:22:30:0e:fa:2d:d6:8d:7a:12:9b:ce:6b:0a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
        Validity
            Not Before: Jul 24 00:40:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d15c1ccc56cd42dae645318f40765f8ef19a1d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:86:54:7c:59:09:31:de:e1:1f:99:6d:fc:
                    70:2c:6b:58:7e:e3:c7:a9:68:7f:07:11:f7:28:05:
                    60:3d:31:97:de:04:31:b6:ba:a0:31:70:5d:92:a5:
                    d3:e2:8d:0f:1c:21:74:6f:e0:b6:ac:88:0a:9d:1f:
                    74:f6:e5:61:f3:1a:2e:07:71:a4:bc:7b:17:89:ef:
                    b6:1b:79:01:7e:18:b2:6d:df:c2:4c:43:42:30:53:
                    19:46:3d:f8:ff:00:1a:bb:12:13:5f:7f:00:8a:96:
                    92:9a:57:21:05:84:a3:f0:92:e9:d8:38:bf:b8:82:
                    6d:0d:51:29:79:af:63:ea:b6:f5:d6:1a:56:f8:2e:
                    7d:8b:12:6f:92:1f:89:c7:46:d9:e1:4f:a1:e2:31:
                    06:6c:b0:55:70:57:75:82:26:6f:d4:ba:d4:14:75:
                    73:77:e6:0e:90:49:b4:59:58:4a:e0:e0:16:06:e0:
                    ce:24:b3:2b:ef:42:96:13:bd:cd:11:c0:fd:ef:82:
                    10:ad:b8:82:4e:89:e9:71:7b:85:d8:0d:7c:97:65:
                    38:35:b0:f4:f5:ce:87:a1:fe:92:0c:13:bf:06:c1:
                    1b:d2:9a:55:d4:8a:66:67:e5:72:85:31:19:fe:4e:
                    e1:ea:f3:7a:c4:3d:96:6e:44:e7:14:ed:18:d3:3a:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5C:1C:CC:56:CD:42:DA:E6:45:31:8F:40:76:5F:8E:F1:9A:1D:64
            X509v3 Authority Key Identifier:
                keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0VwczFbNQtrmRTGPQHZfjvGaHWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.8.0/24
                IPv6:
                  2a0e:b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:ef:a0:d2:9b:62:6d:97:27:f0:a1:ee:2e:eb:d4:f2:7f:
         f0:08:a9:c0:eb:12:e6:da:2b:f2:0c:d8:50:f6:05:da:c7:61:
         3c:4a:33:1f:ac:d9:df:28:df:86:88:12:66:d2:19:85:65:d1:
         dc:61:cb:45:f5:de:24:ed:41:66:9c:bb:c6:90:6e:8d:1f:21:
         76:b6:bf:c0:e2:e3:ff:9c:da:98:96:f0:19:13:f1:bb:4d:72:
         d9:65:59:95:c2:9d:05:ca:ad:cf:c5:9c:eb:3e:f4:1d:cb:d8:
         54:35:55:b7:e1:2c:48:e5:3b:06:f2:8e:7f:89:79:ac:f4:da:
         c1:6f:7b:65:10:25:bf:b0:3d:37:0f:88:72:12:41:72:1f:31:
         58:24:0a:d5:6f:14:c5:02:c3:ae:31:ce:93:60:75:60:6d:9b:
         98:af:23:05:b6:38:17:6a:5b:b0:ed:ee:fe:95:99:06:a8:53:
         08:80:51:3b:ad:75:3e:35:9c:26:d4:6d:f6:97:94:64:4b:3e:
         7e:96:22:2c:6b:7a:62:12:0c:f7:6f:56:38:87:e3:fc:41:01:
         b2:8b:84:6b:8e:8b:20:d9:7e:e4:4f:8b:8a:72:65:11:82:9b:
         52:e8:67:df:fc:41:2c:58:93:7a:30:ca:f7:d3:73:fc:1e:79:
         33:9c:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----