Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/oqEyxdUhOSBqfi9E86rFhizEKxY.roa
File:                     oqEyxdUhOSBqfi9E86rFhizEKxY.roa (raw, json)
Hash identifier:          u5ovwnk6dyjqBJi09r+udp1KXtekiJXjSXPSYw38Pt0=
Subject key identifier:   A2:A1:32:C5:D5:21:39:20:6A:7E:2F:44:F3:AA:C5:86:2C:C4:2B:16
Certificate issuer:       /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial:       01856E38A56F8A839578FAF4333896AF8C93
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/oqEyxdUhOSBqfi9E86rFhizEKxY.roa
Signing time:             Sun 01 Jan 2023 16:44:44 +0000
ROA not before:           Sun 01 Jan 2023 16:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210414
IP address blocks:        45.93.21.0/24 maxlen: 24
                          2a12:a080::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:a5:6f:8a:83:95:78:fa:f4:33:38:96:af:8c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
        Validity
            Not Before: Jan  1 16:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2a132c5d52139206a7e2f44f3aac5862cc42b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:dd:55:a8:68:63:ff:e3:03:1a:db:09:b3:
                    d3:98:87:09:63:5e:c4:35:6a:5e:20:36:5c:87:b1:
                    ce:13:11:7b:04:54:b6:27:c5:b0:07:e8:a9:1d:72:
                    21:c4:c4:98:56:61:0e:95:45:e4:ac:ab:e9:25:85:
                    ba:4e:70:6b:9a:09:37:42:16:96:8f:56:a9:73:96:
                    20:76:d9:aa:c8:5e:d1:d0:7f:27:21:2b:96:fa:4e:
                    89:e2:b3:c4:a3:37:ff:e1:d6:0e:b3:7d:8e:17:89:
                    4d:e4:fc:8c:f6:44:ea:63:d3:8f:3e:1f:e4:92:c2:
                    21:26:2d:8b:09:32:a9:df:d3:8a:84:71:00:ef:00:
                    b8:49:96:48:15:55:54:44:24:47:f6:99:de:ab:e6:
                    1b:8f:f0:20:d6:ff:8f:25:b7:06:45:e6:f6:72:b0:
                    e0:41:02:d5:76:2b:21:68:7e:af:58:0a:7f:d2:ce:
                    84:4a:60:b5:46:8c:cf:4b:fb:5d:36:70:87:2f:b7:
                    e8:38:ba:f9:a0:73:74:db:52:65:07:b3:05:e5:e9:
                    bf:ca:39:56:95:c0:86:a0:73:38:ca:67:71:56:76:
                    c6:01:48:ee:fc:35:04:dd:ce:e6:e7:d5:51:46:2f:
                    2f:df:8a:9f:a3:f1:0b:08:4e:f6:32:76:81:71:7c:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A1:32:C5:D5:21:39:20:6A:7E:2F:44:F3:AA:C5:86:2C:C4:2B:16
            X509v3 Authority Key Identifier:
                keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/oqEyxdUhOSBqfi9E86rFhizEKxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.21.0/24
                IPv6:
                  2a12:a080::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:2e:99:21:a7:69:c1:48:5b:fd:ea:0f:d7:5e:a4:4e:ac:
         3a:66:76:6d:93:a5:91:bd:62:aa:51:96:67:24:77:e5:3f:e3:
         39:e6:4c:78:b3:50:a2:ec:c0:29:1c:25:e2:49:3d:0a:e2:c3:
         66:cc:2d:0d:57:19:05:da:36:4e:12:7e:5d:d7:01:5f:00:b4:
         d0:af:20:5f:88:64:a9:48:96:59:3a:48:28:59:b8:0e:e4:21:
         e9:a2:f0:ff:8d:80:79:53:e4:18:83:ca:af:df:fa:b5:7f:08:
         b8:e7:d3:cc:94:9a:54:a3:81:69:3b:72:4a:b6:74:93:4a:03:
         5a:b2:0d:09:8f:0f:1f:bb:02:b0:36:33:83:51:ef:35:e2:2c:
         b3:01:5c:bc:6d:46:1e:f1:e2:e8:46:5e:49:36:bf:e8:19:0a:
         f2:b2:42:ad:1a:1e:cc:46:dd:30:1f:df:a9:27:fc:fc:d9:19:
         7b:4c:b6:e1:7f:5c:5b:17:22:fd:da:13:0c:d6:fd:ce:2e:ca:
         d9:2f:14:dc:d3:cb:13:41:0e:01:8d:cb:e6:c4:2f:3a:43:5a:
         2c:ee:5c:d6:c1:b0:a7:e3:ad:de:e5:59:52:d8:95:3c:4e:8f:
         b5:3e:bb:a1:e4:93:73:9e:c5:18:04:e0:ec:73:7c:59:7b:3e:
         a8:80:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----