Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa
File:                     vcy34sd4taIiL4an2dxCBZRM3Qk.roa (raw, json)
Hash identifier:          mfZEd8doVue1o4k0ADwki4pB/q55C9K1ZCAuJHp+bEg=
Subject key identifier:   BD:CC:B7:E2:C7:78:B5:A2:22:2F:86:A7:D9:DC:42:05:94:4C:DD:09
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       018573FDF589381834792F7E0A5A3BBC6CAF
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa
Signing time:             Mon 02 Jan 2023 19:38:21 +0000
ROA not before:           Mon 02 Jan 2023 19:38:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49030
IP address blocks:        45.10.120.0/24 maxlen: 24
                          2001:67c:1424::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:fd:f5:89:38:18:34:79:2f:7e:0a:5a:3b:bc:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Jan  2 19:38:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdccb7e2c778b5a2222f86a7d9dc4205944cdd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:b8:35:84:59:75:35:63:83:54:71:b1:bf:
                    db:78:44:f1:59:f9:74:cf:c0:59:e9:c7:71:65:77:
                    d0:b4:06:57:bc:3c:78:cc:4b:35:23:21:b6:7c:42:
                    d3:65:bb:a2:e2:b5:06:f8:0a:2c:a5:eb:78:0b:9c:
                    86:2d:96:11:ee:dd:91:df:80:96:7b:3d:c0:f3:81:
                    5b:6a:7c:0d:2a:fb:78:58:10:a5:9a:ed:f6:b0:d5:
                    b7:2a:f8:75:df:a2:76:9b:4a:d4:05:d5:a1:0b:33:
                    59:e5:a5:cf:39:44:0c:f7:e1:76:34:23:84:75:f5:
                    3d:c5:64:e0:f7:18:7b:2a:4d:9a:b1:59:1c:46:d4:
                    6b:1b:d9:3d:c4:5b:67:d4:45:2d:1c:0d:f9:6b:a7:
                    7c:f0:7b:7d:46:1d:09:d8:be:94:62:b0:ea:5a:45:
                    05:0e:13:70:93:b6:b7:00:ff:82:78:a0:42:1c:db:
                    96:92:15:d7:4b:76:4d:5f:07:8d:e0:d0:db:9d:fd:
                    04:e3:2a:e1:ca:b9:cc:2b:f2:9c:e4:69:2d:c9:0f:
                    39:86:94:23:bb:12:47:93:fb:20:70:4b:9a:1b:b0:
                    41:44:7f:9d:f9:2b:f4:4b:e2:ec:3b:75:11:90:90:
                    1d:97:be:fd:9a:ad:2e:8a:60:5a:47:ce:f5:84:7f:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:B7:E2:C7:78:B5:A2:22:2F:86:A7:D9:DC:42:05:94:4C:DD:09
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.120.0/24
                IPv6:
                  2001:67c:1424::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:f6:53:fa:0a:53:c1:b9:eb:31:2b:dc:bf:19:97:3f:b4:
         81:6d:85:8e:4e:ee:c1:f1:be:88:4e:b2:60:03:1a:8f:85:21:
         00:7a:41:a4:3f:cc:20:88:9f:29:10:50:5f:61:98:a0:08:47:
         94:3c:a5:93:9b:af:50:aa:c4:bf:e4:05:65:61:d2:d5:f9:65:
         02:32:1d:58:55:f7:d3:78:2a:32:10:bf:f6:46:ee:7b:93:76:
         63:ff:38:8a:ed:c8:cd:a6:3a:7a:48:3d:af:e7:cf:b0:77:df:
         2e:dc:7e:6f:21:89:a7:96:15:c7:45:5b:a3:bf:ce:b4:a6:03:
         d9:5b:e0:c5:d7:ef:c9:ed:07:3b:3d:2a:5e:14:f9:be:d2:0a:
         45:07:0a:e5:0b:b4:43:f9:2f:2b:cc:68:4c:41:96:e0:c6:c5:
         64:f9:e7:ea:35:54:d1:06:a7:55:8f:5d:d3:a8:59:1b:0c:d4:
         78:1f:41:e7:b9:d1:66:c6:04:e9:a9:78:ea:f3:ff:40:bd:84:
         3c:65:4a:ed:85:fa:56:75:40:89:b7:9a:8f:dd:96:e0:86:87:
         ec:fe:69:3f:00:25:fc:dd:35:9e:02:8c:b1:0e:f5:be:22:30:
         28:2a:9f:d5:05:04:cb:26:63:2b:76:c6:41:8f:70:61:2d:06:
         55:b7:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----