Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/cZrk6bKOzjhJWR7uE0MLfYpzICc.roa
File:                     cZrk6bKOzjhJWR7uE0MLfYpzICc.roa (raw, json)
Hash identifier:          SrfETLlLShh8Vpc4KTkb3ru+olVGp6ovxvLvhOdb1wQ=
Subject key identifier:   71:9A:E4:E9:B2:8E:CE:38:49:59:1E:EE:13:43:0B:7D:8A:73:20:27
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       018570673DD872C6A0A1C1680602A529742F
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/cZrk6bKOzjhJWR7uE0MLfYpzICc.roa
Signing time:             Mon 02 Jan 2023 02:54:52 +0000
ROA not before:           Mon 02 Jan 2023 02:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210858
IP address blocks:        45.142.14.0/24 maxlen: 24
                          2a0b:100::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:3d:d8:72:c6:a0:a1:c1:68:06:02:a5:29:74:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Jan  2 02:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=719ae4e9b28ece3849591eee13430b7d8a732027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:0d:a4:1d:d0:b4:62:56:2c:e7:6c:b8:77:
                    f3:89:53:21:5b:de:f1:89:0e:96:67:c3:12:ec:80:
                    a7:5f:95:f3:96:25:b8:aa:f5:ad:24:de:cf:22:69:
                    23:ee:9f:23:79:db:62:85:55:aa:7e:81:1b:f7:df:
                    8d:e4:b6:c1:3a:dc:fe:66:5a:aa:11:66:f3:27:11:
                    91:6f:f7:bf:0d:0f:be:2c:c8:72:ee:b0:ea:72:22:
                    1c:9c:2f:59:e9:8a:b9:ec:97:2c:9c:93:51:7e:0d:
                    dd:2b:a2:f6:aa:73:9c:11:f1:a4:97:32:0a:a9:58:
                    1b:50:7b:ce:8e:05:40:a5:a7:61:70:0a:20:16:20:
                    eb:09:68:d6:4b:a4:de:cf:8a:c7:6e:dd:2d:41:e3:
                    c4:d4:fe:42:e3:b4:1e:94:56:91:6d:cd:3c:ba:11:
                    63:dd:37:8d:a0:4b:e7:f7:a4:d5:e4:fd:6e:18:cd:
                    e0:e0:4e:9d:64:c9:be:77:88:64:87:e0:04:b2:c8:
                    55:fc:aa:e9:67:21:b6:f7:57:d4:2a:da:b2:db:6f:
                    28:7f:26:52:ab:2d:98:e2:6d:43:7d:05:be:cf:97:
                    75:fe:44:f7:1f:df:0e:c6:51:5c:79:28:61:a8:b1:
                    3f:a5:cc:25:6c:14:d1:82:a8:12:96:d4:ec:cb:45:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9A:E4:E9:B2:8E:CE:38:49:59:1E:EE:13:43:0B:7D:8A:73:20:27
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/cZrk6bKOzjhJWR7uE0MLfYpzICc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.14.0/24
                IPv6:
                  2a0b:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:d2:a6:4d:7f:75:cd:e8:0a:8d:8a:81:fa:81:46:d0:2a:67:
         30:54:04:61:06:fd:47:33:1e:39:f1:9c:c8:89:b2:52:03:d3:
         74:05:71:9e:48:04:11:16:e8:77:b4:d3:14:f6:17:4b:60:40:
         7f:a1:00:ed:fa:b1:92:a3:e0:d1:d5:e8:3d:f1:5d:a5:ff:91:
         07:33:48:68:ab:9e:d4:0d:9a:8f:2d:29:2a:b2:8c:ae:3d:e3:
         fc:ac:c7:84:45:9b:6d:ec:1f:0f:37:ec:93:f5:ca:73:9b:ce:
         f6:89:18:00:af:10:86:fa:6a:49:a0:8d:62:ab:58:ba:5e:da:
         02:87:c9:14:6a:00:bf:b7:f4:c6:e8:57:9f:d2:75:10:e5:dd:
         98:20:b0:32:68:3f:60:60:48:db:ab:93:b8:25:31:6b:b4:7a:
         3d:d1:ef:a5:d4:32:45:91:76:1a:9d:a2:27:f1:bf:28:99:ba:
         4a:4a:8a:4a:95:53:a5:e6:bc:c2:bd:30:7b:27:77:c2:de:04:
         a0:47:2a:2c:2a:09:b0:1f:1d:00:b4:c5:b7:07:97:f7:11:db:
         87:83:2c:87:f2:ca:56:7a:93:9b:9d:8a:ed:54:c2:6a:a9:6f:
         f5:65:f8:de:9a:c4:5a:2a:9b:d6:44:ad:03:33:09:35:77:f5:
         a7:b5:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----