Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/wv4tdq-3JAnhLFMTtUsGiUyNV78.roa
File:                     wv4tdq-3JAnhLFMTtUsGiUyNV78.roa (raw, json)
Hash identifier:          DILY75DiVoMYhIEAjn3zt56T71ibhInyLJ2Ct/IPSzM=
Subject key identifier:   C2:FE:2D:76:AF:B7:24:09:E1:2C:53:13:B5:4B:06:89:4C:8D:57:BF
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       0185708C9AA4AD133C2FEBF822B63CB60A49
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/wv4tdq-3JAnhLFMTtUsGiUyNV78.roa
Signing time:             Mon 02 Jan 2023 03:35:40 +0000
ROA not before:           Mon 02 Jan 2023 03:35:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201709
IP address blocks:        45.153.112.0/22 maxlen: 24
                          2a12:c380::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:9a:a4:ad:13:3c:2f:eb:f8:22:b6:3c:b6:0a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Jan  2 03:35:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2fe2d76afb72409e12c5313b54b06894c8d57bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:f8:77:1f:89:3f:33:e7:4f:4e:e7:7f:78:
                    1f:65:a6:a9:93:f4:f8:97:67:3c:55:04:9f:0e:bb:
                    1e:27:47:8d:a4:fd:7d:66:77:20:f1:af:79:a6:18:
                    b7:b4:ee:3e:8c:7f:d6:53:e0:72:f7:f6:7d:ec:d6:
                    ec:ca:91:d0:91:06:f5:71:c5:04:e2:d3:d3:e1:cc:
                    da:e2:4e:1e:d4:ac:2f:ef:0f:d1:4d:c3:5f:7a:e5:
                    79:ee:19:cc:8a:ee:7a:bf:fa:9b:37:98:f0:0d:91:
                    b4:6d:cc:5c:be:88:3f:ae:c4:80:52:1e:d8:cd:87:
                    3b:2a:df:ca:de:1e:66:df:aa:89:f9:fc:b6:0c:d2:
                    c2:a4:2f:f2:80:b9:87:c7:8d:cf:80:91:ba:09:a6:
                    96:f1:cf:01:40:da:02:6c:f2:ea:b4:1b:52:89:53:
                    7b:8f:72:a1:7e:2f:45:b4:da:bf:63:d1:72:0c:14:
                    58:c5:49:98:4e:91:63:9e:8f:8b:45:32:f0:2d:4d:
                    49:3d:34:30:51:8e:25:e8:df:4e:a0:59:3d:d7:c2:
                    b0:43:bd:1f:70:46:88:fe:33:19:77:ab:be:e5:20:
                    fb:f0:51:e8:4b:40:3d:7e:30:3e:75:dc:f2:0e:27:
                    ac:60:50:1a:45:73:74:dc:89:7c:53:ce:10:41:fa:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:2D:76:AF:B7:24:09:E1:2C:53:13:B5:4B:06:89:4C:8D:57:BF
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/wv4tdq-3JAnhLFMTtUsGiUyNV78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.112.0/22
                IPv6:
                  2a12:c380::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:31:7b:67:b7:98:fd:29:86:46:1a:c9:fa:29:3c:03:3f:
         e0:e6:f3:2b:06:45:12:67:68:80:7b:e5:ff:8c:3d:7d:4c:7a:
         f7:2d:53:26:36:f8:07:f6:ff:c2:92:ac:4c:fb:46:e3:fa:6c:
         22:e5:04:61:9f:74:4d:88:c2:5d:eb:08:3d:c7:75:71:48:b6:
         a0:b9:58:27:13:a4:8e:4f:29:9f:31:26:90:a2:d8:80:8d:84:
         81:46:b7:73:51:86:d2:89:9b:e8:f1:7b:01:8e:86:2e:3b:d2:
         6c:89:77:91:5c:c9:d0:2a:e6:0e:57:9a:78:ef:88:5d:b0:87:
         0f:36:bd:a2:10:1c:a4:36:1a:7b:7c:7c:15:b3:42:12:7d:91:
         b1:b1:82:58:d9:01:62:ee:09:62:2b:4a:2b:45:2a:80:0a:ab:
         34:85:e7:ec:f6:e7:38:0d:40:c7:07:01:19:b3:f2:6a:10:c4:
         a1:d0:a1:3d:d4:0e:4f:a5:64:44:db:e7:a4:24:14:70:f4:c8:
         e4:20:35:95:bd:73:d3:a4:95:b5:3d:3d:da:aa:0e:c0:e4:85:
         4c:ec:79:07:b3:5f:04:00:b9:e7:e1:3b:89:6e:d5:3a:91:9c:
         d2:6c:c8:19:86:34:90:d0:9f:e4:c8:70:d8:6d:44:ae:71:35:
         d5:40:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----