Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/UCqpm7hIbcrit1mbzNw2DQyvaLg.roa
File:                     UCqpm7hIbcrit1mbzNw2DQyvaLg.roa (raw, json)
Hash identifier:          //esV+vJQBl6BUlZqvIUjtlzAZ3zrH5pb6XwIOxfpfc=
Subject key identifier:   50:2A:A9:9B:B8:48:6D:CA:E2:B7:59:9B:CC:DC:36:0D:0C:AF:68:B8
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       018570797FDF14E79AC94EF6F365B06A7685
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/UCqpm7hIbcrit1mbzNw2DQyvaLg.roa
Signing time:             Mon 02 Jan 2023 03:14:48 +0000
ROA not before:           Mon 02 Jan 2023 03:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209900
IP address blocks:        45.65.88.0/22 maxlen: 22
                          2a09:fe00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:7f:df:14:e7:9a:c9:4e:f6:f3:65:b0:6a:76:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: Jan  2 03:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=502aa99bb8486dcae2b7599bccdc360d0caf68b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:d4:7e:9b:78:39:9b:a0:1b:70:41:d1:fc:
                    ea:82:87:29:a7:3b:d1:0c:b9:80:4f:d0:67:0e:e9:
                    9b:b5:49:6c:93:33:c9:9d:a8:45:0b:25:30:b3:65:
                    0a:5a:93:80:32:77:28:d2:5d:db:1e:22:8c:4e:ea:
                    ac:9b:be:b8:ae:c3:fb:55:4e:f8:78:2c:7f:3e:4d:
                    d4:d8:58:d8:00:01:fd:18:c2:bf:59:e3:9b:d7:63:
                    76:b0:ff:70:59:1c:31:72:3b:53:e7:25:45:28:1e:
                    bd:b3:76:e9:2e:5e:c3:79:92:fb:3d:38:12:a8:8b:
                    f2:82:19:4a:66:d5:1d:0d:07:4e:c0:20:66:32:3a:
                    8b:c7:34:da:21:42:bf:7b:ae:23:5f:94:1d:6a:fc:
                    00:63:5b:6e:45:a3:a3:49:55:04:34:a7:2b:8c:41:
                    2a:89:4a:fe:36:ae:2f:c2:2a:cc:d7:2d:e9:c5:09:
                    83:14:20:83:76:b0:54:55:f1:f7:ed:8b:fb:f6:2f:
                    0e:dc:09:df:32:44:88:7a:02:b5:9d:8a:8f:a0:f1:
                    ea:b2:00:80:8d:b0:0e:5a:c0:b2:4e:c5:c8:23:e9:
                    5c:e9:2b:d3:e9:2c:e1:8c:3c:e6:cb:22:9d:d2:db:
                    9b:0d:1c:4c:4c:97:1f:49:7f:90:2c:0c:3b:2c:0d:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:A9:9B:B8:48:6D:CA:E2:B7:59:9B:CC:DC:36:0D:0C:AF:68:B8
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/UCqpm7hIbcrit1mbzNw2DQyvaLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.88.0/22
                IPv6:
                  2a09:fe00::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:72:e4:56:9d:0f:73:81:98:b8:f5:59:77:f0:ca:b1:75:2a:
         53:05:71:30:a4:c8:5f:50:cf:88:03:1e:24:62:08:d1:6e:24:
         0d:fb:ec:64:27:d7:3b:81:cf:6b:6d:6a:d5:5a:b7:2a:f2:f8:
         cb:47:5f:6b:8e:d1:b5:ff:1f:b2:2b:b3:70:db:60:b2:27:e6:
         4c:ec:32:c7:c9:6e:d1:d2:26:e1:de:d0:23:ae:6b:35:e7:b0:
         ed:39:85:3a:4f:9a:b3:14:0e:cb:9d:ac:15:96:fd:1f:94:28:
         1e:4c:78:47:06:18:81:e9:f8:05:2b:f9:bf:ff:09:6f:d3:aa:
         ab:af:33:39:50:42:41:24:7a:05:1c:05:e3:4f:a8:50:73:4a:
         bb:b3:db:20:68:df:8d:dd:33:df:0a:de:aa:c6:1d:a4:7b:d0:
         df:1e:1f:b7:98:c2:95:cb:fb:9f:04:a3:73:3f:32:3d:1e:55:
         c2:99:58:af:23:10:5a:ad:68:51:22:22:c2:fe:0a:3b:26:9d:
         e8:b6:8a:40:46:9f:e9:60:b5:86:66:4e:15:37:51:77:ad:63:
         2d:b4:7b:6a:8d:66:23:71:0b:39:1b:30:34:57:00:5a:19:ab:
         87:97:7c:f5:48:1e:ea:c7:42:17:53:0e:f3:7c:a6:63:4c:a3:
         89:ff:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----