Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/qLeofkik3-r99zw_OFe5dhE_o4Q.roa
File:                     qLeofkik3-r99zw_OFe5dhE_o4Q.roa (raw, json)
Hash identifier:          8O242EjHJTSRJPYJVENrphiO2E2FeunvsmGHLuKKa1U=
Subject key identifier:   A8:B7:A8:7E:48:A4:DF:EA:FD:F7:3C:3F:38:57:B9:76:11:3F:A3:84
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       01856F94B7BEA942198102FF2B9FD5271A96
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/qLeofkik3-r99zw_OFe5dhE_o4Q.roa
Signing time:             Sun 01 Jan 2023 23:04:55 +0000
ROA not before:           Sun 01 Jan 2023 23:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43948
IP address blocks:        45.86.104.0/24 maxlen: 24
                          2a0f:95c0::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:94:b7:be:a9:42:19:81:02:ff:2b:9f:d5:27:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Jan  1 23:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8b7a87e48a4dfeafdf73c3f3857b976113fa384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:ea:96:a6:d7:9d:2a:2a:07:e8:90:3b:fa:
                    39:fb:e8:d6:cc:71:cd:fc:f9:f3:57:82:2e:da:07:
                    3f:8d:ee:a3:25:bf:12:27:91:f9:b9:34:3b:cb:f0:
                    5f:70:be:3b:d7:e6:88:57:5c:3c:b3:ba:b4:f5:03:
                    4d:07:f2:2d:57:a6:ab:df:22:07:e5:2c:27:52:cc:
                    3b:94:67:d0:79:b4:5f:98:2b:c5:25:8c:04:1e:f3:
                    95:1e:08:85:85:c1:f5:cb:d5:a9:8b:50:e6:45:7b:
                    59:ec:91:92:0c:8a:80:4f:eb:48:15:d0:a0:0f:fc:
                    cb:cf:87:47:a8:b6:50:43:cf:db:fb:c3:72:aa:5f:
                    fd:a9:d5:26:81:51:14:07:b4:ca:93:68:8c:5f:e4:
                    b0:b9:4f:ad:2c:31:5a:3c:fb:97:23:63:28:65:ad:
                    d2:71:1d:9f:c5:d6:50:8c:7c:de:b9:e8:9e:be:07:
                    ae:a8:14:8a:71:f1:53:f6:5c:a3:c3:0a:9c:89:0e:
                    6a:b0:bd:30:e8:4e:9b:e8:bd:58:df:aa:94:7f:bd:
                    eb:66:c3:52:e2:97:58:94:f5:dc:3f:8c:e4:6a:85:
                    7b:aa:cc:a6:33:b3:de:b4:b5:d7:46:41:2b:83:fb:
                    79:36:74:97:64:63:01:9d:b1:4c:7f:0f:d7:c1:51:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B7:A8:7E:48:A4:DF:EA:FD:F7:3C:3F:38:57:B9:76:11:3F:A3:84
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/qLeofkik3-r99zw_OFe5dhE_o4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.104.0/24
                IPv6:
                  2a0f:95c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:8b:85:33:b4:35:7d:7a:d6:e0:73:64:f2:ef:d6:50:a1:95:
         58:70:c3:0d:3d:bb:fb:b4:41:41:e1:34:30:59:ca:74:32:c2:
         70:53:f2:16:ce:82:d8:09:97:5f:95:54:4e:af:d9:0a:bd:aa:
         1f:d7:e6:23:bc:cd:47:73:2d:aa:fa:f3:1f:77:bd:16:0a:67:
         46:4c:cd:4a:8c:94:b2:e6:97:ff:15:63:ff:1b:91:bf:73:86:
         62:17:5b:a5:18:80:f0:8d:6d:3c:5d:fb:3c:98:f4:1b:8a:43:
         82:df:f2:a1:c8:46:ba:4d:30:b7:b6:18:ad:69:fb:a2:b1:0e:
         1f:b2:5d:f3:4e:14:a7:97:d3:23:4d:9b:60:eb:33:37:fd:96:
         c6:a8:64:0d:01:34:89:9d:15:b0:d1:b7:5d:f8:65:91:c3:e9:
         fe:85:57:6d:64:dc:62:46:25:bb:95:6d:fa:0c:b5:b8:7a:fd:
         22:b3:80:61:91:1e:1b:02:a2:50:cd:48:cd:b7:a3:7e:78:0e:
         a9:e3:7e:ad:6a:18:6b:67:bc:f5:f4:8b:55:9a:04:70:3b:04:
         00:be:8e:76:57:b3:17:25:38:da:d1:e2:28:97:7d:f0:38:d9:
         5a:e2:d3:4d:d7:a6:4a:36:4a:72:fc:f5:6a:ce:55:a1:f4:2d:
         7c:ca:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----