Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa
File:                     4cDq52levktJbVgGIErix26GZzg.roa (raw, json)
Hash identifier:          qvWhDM9iVoXWx/lkY0S0vDatV1N8uOLrxw/DrPCpCuA=
Subject key identifier:   E1:C0:EA:E7:69:5E:BE:4B:49:6D:58:06:20:4A:E2:C7:6E:86:67:38
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       0185C54433C0E41CF037C3C3A6264365E04E
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa
Signing time:             Wed 18 Jan 2023 14:24:19 +0000
ROA not before:           Wed 18 Jan 2023 14:24:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58280
IP address blocks:        45.129.224.0/22 maxlen: 22
                          2a0f:fd00::/29 maxlen: 29
                          2a0e:5040::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c5:44:33:c0:e4:1c:f0:37:c3:c3:a6:26:43:65:e0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Jan 18 14:24:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e1c0eae7695ebe4b496d5806204ae2c76e866738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:71:31:58:44:2c:32:ad:7d:ce:e5:95:0d:
                    2b:1e:0b:ca:0f:a1:47:9b:7e:9f:24:fd:ef:79:a4:
                    25:37:91:89:2a:fa:83:8f:c2:90:b9:66:87:46:73:
                    28:4b:00:ac:fa:18:17:ca:df:23:ba:60:a2:39:cd:
                    b8:89:bf:6c:a9:32:ec:7a:4b:bf:1e:10:e5:c7:2a:
                    27:8f:6b:7b:d1:e3:34:75:b1:a2:81:bb:5a:88:01:
                    80:81:4e:47:72:01:88:d3:23:a1:12:c0:47:49:b8:
                    c0:11:f9:83:3d:50:98:5a:b0:c4:89:05:36:31:fa:
                    fc:7c:73:51:9a:f1:f5:04:d5:ad:39:f0:a5:1a:47:
                    0d:ee:b0:ac:8d:63:c3:f7:3a:6a:13:db:68:65:3b:
                    0b:c1:c2:27:a1:95:e9:fb:8d:fb:54:68:9d:5d:3b:
                    01:c1:32:41:68:78:50:9c:ee:cd:c8:d9:43:7f:eb:
                    1b:8d:f4:c7:79:c7:22:32:43:34:14:75:99:a5:2c:
                    ec:20:4a:0f:94:b6:4f:89:e2:13:db:d3:18:98:ec:
                    3b:7d:97:2d:75:3a:4c:9a:8f:68:17:a6:2a:60:cc:
                    f6:ba:7d:56:a1:e2:1f:39:a7:ec:70:4e:42:4c:5d:
                    89:4e:04:20:35:14:cc:b3:3a:4f:ed:70:1b:cd:e3:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C0:EA:E7:69:5E:BE:4B:49:6D:58:06:20:4A:E2:C7:6E:86:67:38
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/4cDq52levktJbVgGIErix26GZzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.224.0/22
                IPv6:
                  2a0e:5040::/29
                  2a0f:fd00::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:24:af:ba:1e:75:14:3f:f7:22:61:8e:e8:60:48:c9:63:92:
         87:de:8d:22:a7:f6:c3:00:e1:3c:4e:6e:53:8e:88:1c:19:60:
         68:65:37:71:10:49:40:bc:32:f0:9c:a4:bc:a0:ec:1d:e8:87:
         2e:89:59:11:c2:7b:cf:e9:0a:4d:ee:64:d3:8c:80:05:8d:f8:
         98:2a:1d:38:00:43:44:73:70:4b:6f:a7:3d:79:3f:b7:3d:cc:
         7f:23:2b:f4:4e:ea:26:e5:ba:59:79:e0:f2:39:c4:d6:c2:5d:
         c0:bd:9f:89:35:79:91:cd:b7:ae:33:d0:42:fd:f4:45:ec:dd:
         14:01:10:57:a4:13:35:1d:de:b5:54:75:3f:bd:09:c0:fa:57:
         fd:31:a1:9f:37:f0:27:51:6f:38:77:ae:e4:b3:0f:2e:4f:78:
         c9:df:47:d8:b2:a8:eb:50:82:f7:99:ce:1f:59:b9:25:ef:73:
         68:8a:fb:55:c2:99:98:74:97:5c:d3:db:3b:1a:c0:f6:0d:1b:
         f8:8a:44:aa:96:d5:39:2b:7a:cf:cc:ff:db:b5:d5:af:ef:eb:
         f2:aa:28:53:80:47:02:5f:b2:58:24:a4:c5:04:d9:df:18:df:
         4f:0c:08:7f:b1:4e:9f:92:fb:9f:0a:68:60:78:ec:08:df:9b:
         9c:8c:e2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----