Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203439393939.roa
File:                     37372e37352e3232352e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          zKX6UKksciSE5p3mgt2zv3H9s2ExV5stfh4A1s1s0Aw=
Subject key identifier:   2E:13:63:AD:65:C5:AB:60:41:32:FB:C0:49:67:F7:F8:8A:EF:C9:1C
Certificate issuer:       /CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
Certificate serial:       1373F8FF5CC47FF5E9C60B25499D7FBA669C799A
Authority key identifier: C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer
Subject info access:      rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 21 Oct 2022 09:58:37 +0000
ROA not before:           Fri 21 Oct 2022 09:53:37 +0000
ROA not after:            Fri 20 Oct 2023 09:58:37 +0000
asID:                     49999
IP address blocks:        77.75.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:73:f8:ff:5c:c4:7f:f5:e9:c6:0b:25:49:9d:7f:ba:66:9c:79:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
        Validity
            Not Before: Oct 21 09:53:37 2022 GMT
            Not After : Oct 20 09:58:37 2023 GMT
        Subject: CN=2E1363AD65C5AB604132FBC04967F7F88AEFC91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:e6:31:fe:b4:9e:97:e3:d3:b8:8a:26:ac:
                    a3:78:58:40:22:15:71:59:d2:b9:fd:b9:03:35:10:
                    c1:40:54:72:36:4b:82:ee:ca:d3:54:85:aa:fb:32:
                    13:13:e4:f5:81:ba:33:cd:98:3e:64:99:81:6b:9a:
                    43:17:bd:ff:61:0e:54:c4:b9:35:e6:a9:f3:ff:84:
                    aa:cd:f4:c9:e5:f4:ee:df:7a:8f:b1:cc:09:bf:44:
                    98:d0:c1:97:0f:4c:10:da:7b:5f:18:d2:bb:89:95:
                    e9:ed:02:5d:a4:06:65:d0:cb:a6:a6:3b:b8:f2:42:
                    b1:62:0b:42:e6:71:9c:49:ec:da:81:9e:79:43:16:
                    a5:19:4b:c5:d1:ab:3a:80:5f:ae:7f:04:24:a1:d1:
                    0b:82:21:65:79:3e:d2:c5:50:ec:2e:dc:1f:28:2e:
                    99:46:7f:28:89:50:9a:9a:ca:69:19:63:ad:37:73:
                    52:2f:8b:c8:35:c8:ea:5c:45:af:12:6d:32:d9:49:
                    2b:13:e4:f8:d1:b6:99:44:65:81:9e:bb:b1:2b:cb:
                    33:34:c7:29:db:79:01:4f:ca:25:6e:7b:af:c1:26:
                    52:be:7a:e2:6f:56:a3:c6:97:37:99:49:63:78:c5:
                    df:d7:a5:72:e8:ee:90:ce:d9:72:83:7b:9c:d5:84:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:13:63:AD:65:C5:AB:60:41:32:FB:C0:49:67:F7:F8:8A:EF:C9:1C
            X509v3 Authority Key Identifier:
                keyid:C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/23/C56EB66B96238B09E2EBD0F8687F9A08FE325C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:a0:de:e1:1d:57:e7:fc:ff:7a:89:ed:fe:20:27:97:5a:75:
         f2:3a:50:9c:77:be:95:0f:73:32:14:51:73:d6:7d:45:34:55:
         3e:5a:41:9f:8c:35:53:13:09:30:b6:c7:3d:be:75:f2:3d:5b:
         aa:31:8b:27:08:21:00:3f:05:51:f1:72:26:22:eb:c9:4f:fe:
         8b:22:be:19:36:67:81:83:ca:16:36:4f:6d:4b:5e:29:09:1b:
         b2:7f:3b:af:84:ce:09:ec:51:91:d0:f0:30:80:fd:28:db:89:
         c0:bc:74:7d:ed:b7:bd:3a:b7:42:cc:bf:f5:5f:78:56:5f:17:
         4a:63:e6:e2:45:5c:db:3e:92:b0:ec:d6:7c:88:40:2c:fb:04:
         e4:3b:5c:15:42:f0:41:23:b3:43:a9:5d:4e:21:7b:11:40:0b:
         ce:e4:66:35:d8:54:98:99:0a:62:7c:26:5f:74:7b:ef:04:72:
         a3:d8:ef:cc:3f:a3:5c:4d:4d:96:55:78:92:d7:2e:f9:d2:39:
         6a:2f:52:4c:e3:ce:b6:b1:a9:f7:51:b6:de:36:0d:94:20:fe:
         a3:5b:c2:ff:84:ca:92:ef:5b:bc:26:12:57:82:68:8c:bd:4d:
         ed:ed:f4:1b:7b:df:21:5f:8c:34:a7:41:f0:70:93:db:fd:12:
         ee:79:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----