Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsuaNKa2mebPacwn_F6fKX3fwoQ.roa
File:                     wsuaNKa2mebPacwn_F6fKX3fwoQ.roa (raw, json)
Hash identifier:          5jrIR7u2osHTKjuFZbC9oPc79ksCa19CjM9lWcvoJxE=
Subject key identifier:   C2:CB:9A:34:A6:B6:99:E6:CF:69:CC:27:FC:5E:9F:29:7D:DF:C2:84
Certificate issuer:       /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial:       01856FE7220BC718AC424D8191F739EF0C92
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsuaNKa2mebPacwn_F6fKX3fwoQ.roa
Signing time:             Mon 02 Jan 2023 00:34:56 +0000
ROA not before:           Mon 02 Jan 2023 00:34:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41652
IP address blocks:        45.80.2.0/24 maxlen: 24
                          2a0e:3780::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:e7:22:0b:c7:18:ac:42:4d:81:91:f7:39:ef:0c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
        Validity
            Not Before: Jan  2 00:34:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2cb9a34a6b699e6cf69cc27fc5e9f297ddfc284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:20:39:f9:74:95:35:ab:4e:d1:21:88:6b:
                    e8:90:1d:72:b8:76:ab:0d:4e:63:5b:ae:92:ed:3e:
                    44:02:6b:ff:92:aa:53:97:7a:e3:11:56:a6:ad:c6:
                    a8:ff:eb:e7:00:23:d5:ff:ea:0e:a6:b1:9d:d2:84:
                    96:90:a3:61:35:d7:78:36:da:9e:84:67:69:22:7c:
                    fd:f8:49:71:f6:3c:79:35:8f:60:af:e7:9b:0d:22:
                    58:9d:22:ff:f3:46:fa:2c:5a:0c:f8:3d:8a:27:2e:
                    f7:d7:12:25:4e:d2:da:f7:5c:49:4b:f3:b9:b5:e8:
                    68:b0:0a:7f:23:88:6a:c3:97:70:c1:cf:65:8d:ee:
                    e1:4a:93:cc:8e:86:fc:18:e5:75:93:43:b4:1a:a2:
                    2f:7f:7a:7e:10:02:cd:a0:37:3e:de:61:15:b0:0e:
                    61:8f:7b:04:9e:7b:9a:10:86:b0:25:ae:24:4c:68:
                    25:cd:d7:c8:9a:64:42:01:6c:3a:92:e9:36:46:07:
                    48:1e:80:14:1c:9e:07:48:7c:fd:95:9d:74:7e:23:
                    7e:c2:56:67:1c:dd:4d:96:04:04:52:d4:d6:4c:a9:
                    2f:78:5f:2c:4d:43:46:4d:6d:bb:39:e7:a3:a2:a8:
                    d4:b4:37:b7:b6:0b:59:a5:34:18:3e:6a:d0:ba:0e:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CB:9A:34:A6:B6:99:E6:CF:69:CC:27:FC:5E:9F:29:7D:DF:C2:84
            X509v3 Authority Key Identifier:
                keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/wsuaNKa2mebPacwn_F6fKX3fwoQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.2.0/24
                IPv6:
                  2a0e:3780::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:f9:af:0c:97:96:ba:17:80:df:70:f5:c7:ad:f2:13:c8:
         25:ca:b4:95:c4:fc:18:d6:1c:77:29:26:37:f6:28:9b:2d:d3:
         fd:3a:42:23:48:61:3c:b3:2e:85:3a:49:4a:0a:84:5f:db:e9:
         f6:37:e7:9f:34:91:15:3f:a6:c9:83:02:9b:4d:f2:ea:bf:8c:
         10:c8:62:90:72:4a:69:17:e9:76:f3:a0:c2:b0:fa:1b:f8:d7:
         28:05:7d:ec:7f:14:c7:05:40:5e:ca:f7:26:37:30:4c:f3:10:
         d3:11:3b:53:10:fd:2e:4c:45:0d:34:06:b6:75:2b:47:38:fe:
         ca:1e:b2:6f:3d:87:50:6e:47:94:e7:58:76:5a:58:a0:1c:52:
         99:2f:69:f3:37:3c:84:8a:fd:fd:e4:d9:ec:ac:92:34:c7:54:
         dd:ad:59:8d:b6:16:0f:81:71:5e:38:b9:ff:48:54:82:44:a9:
         bf:e3:3f:3d:79:57:36:b4:e4:37:ff:36:a7:86:83:14:4a:80:
         f9:97:83:3a:01:c8:f6:87:ba:ab:d9:e9:70:25:ac:70:d6:30:
         96:d2:b7:ce:14:08:f0:f1:02:12:2c:08:51:78:8e:0e:54:e2:
         ff:af:49:2f:8b:ae:47:51:1d:e5:53:bc:9e:75:da:7d:27:90:
         94:65:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----