Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/VRZ1rcnWWCdnqIugivy7I1AWZek.roa
File:                     VRZ1rcnWWCdnqIugivy7I1AWZek.roa (raw, json)
Hash identifier:          OeUk9+AK65S3dexLcQRx+zdteQCm5g3H/J3NPycOKME=
Subject key identifier:   55:16:75:AD:C9:D6:58:27:67:A8:8B:A0:8A:FC:BB:23:50:16:65:E9
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       0185BAAB388C3B87DC9B84E54E5D813513DC
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/VRZ1rcnWWCdnqIugivy7I1AWZek.roa
Signing time:             Mon 16 Jan 2023 13:01:01 +0000
ROA not before:           Mon 16 Jan 2023 13:01:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9002
IP address blocks:        139.45.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ba:ab:38:8c:3b:87:dc:9b:84:e5:4e:5d:81:35:13:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jan 16 13:01:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=551675adc9d6582767a88ba08afcbb23501665e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:59:82:38:61:fd:bd:d2:12:c3:3c:ea:b9:
                    33:3b:a7:f1:5a:09:0e:ce:29:1b:14:f5:46:7e:21:
                    05:0a:ea:e1:a9:a1:71:64:e5:17:09:d0:94:d0:23:
                    4d:9e:5e:71:0d:d5:97:95:b3:db:33:58:70:16:29:
                    34:9f:0b:76:a1:39:4b:46:79:e5:d6:04:90:c8:77:
                    13:93:01:c9:a8:38:36:ea:e4:10:77:9f:f2:e4:ff:
                    99:e8:ff:f1:44:ca:c4:7a:1a:17:04:c4:b2:58:b6:
                    a9:27:da:5e:bb:8a:5c:a9:4c:a8:54:c5:e5:5a:bc:
                    d1:9b:e5:72:69:4f:3c:85:26:91:cd:d3:ed:8d:49:
                    96:ad:1f:24:6f:52:76:1f:3f:bd:73:72:8c:60:d2:
                    83:fa:d1:1b:d2:2a:02:03:ba:4d:c2:b5:e9:af:09:
                    aa:47:da:c3:53:8e:29:04:3a:a9:07:79:0c:01:58:
                    d7:a0:02:cc:98:a5:f9:46:1d:b1:08:a2:de:79:50:
                    a5:94:f6:34:d1:f6:11:af:1d:d8:30:32:68:5b:71:
                    f8:a8:66:2f:bd:f0:81:bc:17:37:ad:c6:81:6d:45:
                    be:78:45:fc:5b:0f:6d:67:15:93:75:bf:29:25:1a:
                    b2:c5:bc:72:a3:35:57:df:57:c9:84:44:e1:f7:60:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:75:AD:C9:D6:58:27:67:A8:8B:A0:8A:FC:BB:23:50:16:65:E9
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/VRZ1rcnWWCdnqIugivy7I1AWZek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:36:5f:50:02:38:c5:c3:b8:57:6f:cf:2c:19:b0:5b:77:b6:
         f7:a1:d6:25:5f:0c:76:aa:0a:35:2a:7f:2b:5d:44:33:60:ae:
         cd:09:6f:2a:75:79:87:70:55:f4:c4:50:bd:e5:c8:98:a7:e2:
         37:c3:37:eb:63:2a:d0:e2:4d:19:f4:4a:ac:23:aa:d5:18:0f:
         d8:cc:9c:f5:43:c2:39:4d:4d:1a:d7:c4:1d:1a:a5:4c:9a:92:
         83:a7:46:8b:7b:24:da:7c:e4:ed:e2:bc:94:ae:3a:4f:27:40:
         c9:33:a6:ac:13:cb:cb:9a:0c:57:a7:c0:4c:f5:0e:79:68:f0:
         2a:a0:00:11:c7:72:d2:3b:c2:0d:d6:3a:92:fd:14:f3:9c:12:
         3d:49:c5:4a:ac:a1:0f:51:98:54:c3:21:1d:1b:fd:d9:06:42:
         0b:92:ce:dc:9f:41:06:b3:b9:f4:c3:d0:dc:07:aa:f2:c5:12:
         4a:dc:8b:17:5f:d8:fd:16:93:89:ff:02:80:cf:8c:86:50:df:
         78:d9:e7:d3:36:0b:a0:25:16:2c:5d:4b:62:bf:61:11:cd:53:
         55:93:d1:39:ad:d7:04:d8:fd:f1:61:ac:4b:81:ad:ed:98:88:
         08:9c:08:31:9e:6f:6d:48:d3:71:3c:70:a9:8a:13:e2:49:00:
         5d:3a:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----