Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203631333137.roa
File:                     37372e37352e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          HQSfU4Qe4mKZbGF6M4Ir1POFwqC9b2Spw2IuDRJRX0I=
Subject key identifier:   70:8E:BB:18:A1:89:A2:55:37:EE:88:9F:E3:F3:BE:FF:93:7D:0A:9F
Certificate issuer:       /CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
Certificate serial:       7F92CEACAA8439E5A48444F62D7D7DB11E1911BE
Authority key identifier: C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer
Subject info access:      rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Oct 2022 09:58:37 +0000
ROA not before:           Fri 21 Oct 2022 09:53:37 +0000
ROA not after:            Fri 20 Oct 2023 09:58:37 +0000
asID:                     61317
IP address blocks:        77.75.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:ce:ac:aa:84:39:e5:a4:84:44:f6:2d:7d:7d:b1:1e:19:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
        Validity
            Not Before: Oct 21 09:53:37 2022 GMT
            Not After : Oct 20 09:58:37 2023 GMT
        Subject: CN=708EBB18A189A25537EE889FE3F3BEFF937D0A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:e5:c9:d1:24:b0:3c:01:c6:b0:29:ee:02:
                    66:85:4e:41:c5:59:c2:3b:92:bc:a9:ca:3b:78:5e:
                    ed:2e:d4:8c:b0:3f:06:cb:1f:f8:e1:29:95:cc:cb:
                    46:66:7e:d6:e0:58:95:23:e6:fe:78:a8:86:9a:b0:
                    5f:a8:9e:0e:89:0b:0c:44:de:d2:1f:ff:85:13:17:
                    93:e9:07:0d:df:2f:26:81:9f:4c:58:69:15:9c:8e:
                    6f:a9:a0:fb:32:37:92:bb:37:16:b1:d2:98:a2:fb:
                    30:7f:81:b5:87:e0:ab:e8:58:2d:d8:8f:2c:4a:54:
                    f0:8d:00:e6:af:49:30:f5:5e:cf:36:fe:7f:39:77:
                    de:f7:63:67:d1:4c:89:c0:99:46:81:6c:48:1d:67:
                    56:f9:72:de:57:a2:d8:f7:90:31:08:ef:f3:7c:21:
                    c8:d5:fb:38:82:c0:98:23:62:ea:6f:31:bf:d7:29:
                    1f:00:88:92:09:25:e1:15:b5:46:05:3a:2b:6c:cf:
                    3f:f7:1d:d2:98:92:96:c1:9d:9f:f7:a4:f6:28:9a:
                    6d:9c:27:47:5d:78:b0:92:66:66:1b:80:bc:64:0a:
                    19:22:f5:29:83:e5:48:29:35:1c:d4:7c:82:a5:40:
                    2a:ae:da:af:c5:af:5f:79:6d:1d:2d:cb:83:59:b0:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:BB:18:A1:89:A2:55:37:EE:88:9F:E3:F3:BE:FF:93:7D:0A:9F
            X509v3 Authority Key Identifier:
                keyid:C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/23/C56EB66B96238B09E2EBD0F8687F9A08FE325C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:0d:7c:2b:0c:d9:40:49:91:cc:72:d2:80:f9:a7:07:60:ce:
         67:f4:25:7e:97:66:d7:18:b1:ca:67:a9:78:bf:db:5d:76:35:
         35:21:c5:8c:ee:07:21:a0:ff:68:9b:a1:9c:8f:75:68:b1:62:
         aa:61:a4:bd:55:af:7d:41:a3:48:24:e7:97:47:d0:22:66:b1:
         db:65:b4:06:46:be:9b:d2:e4:87:ba:7d:35:64:62:26:f6:cf:
         e4:06:95:8f:7a:72:bc:e6:27:93:85:a1:c3:76:2b:09:85:69:
         29:9e:c3:35:3d:cd:97:4b:16:29:e5:36:83:7e:0b:6f:d2:07:
         9b:bd:3c:28:5a:31:49:f8:da:59:c9:2d:4a:1c:42:fa:ed:ff:
         00:fa:ff:4b:00:87:30:24:14:89:17:54:78:4c:95:26:e9:d9:
         83:8f:c9:18:07:68:43:07:4b:59:92:8e:fe:fb:1a:84:40:78:
         a0:4b:d1:36:b9:93:c9:99:f2:d4:cf:49:30:0f:50:4b:cf:ce:
         e9:0d:9d:f6:e7:74:65:6c:44:ad:7c:16:60:06:94:c9:72:68:
         b6:a3:1e:63:b3:ac:db:a3:22:dc:63:f1:74:d4:fb:28:4c:d4:
         bb:62:29:f8:51:d9:1f:fe:30:da:cc:eb:7b:40:91:8b:83:b7:
         32:2e:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----