Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203433303433.roa
File:                     3138352e3234312e35382e302f32342d3234203d3e203433303433.roa (raw, json)
Hash identifier:          3SS8NfcDcgqpfMI5iKTGdggRoWwjIk6xbdKsBuKOOt0=
Subject key identifier:   E3:01:EC:CE:0E:EF:85:27:8C:F1:BD:A6:89:F7:4C:99:0C:F0:81:95
Certificate issuer:       /CN=77223c7df24b51552233edf70edc05faaa74141e
Certificate serial:       2AB8CCD8BD445DCE0BEE81D8C579E0134583A511
Authority key identifier: 77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject info access:      rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203433303433.roa
Signing time:             Fri 21 Oct 2022 09:58:32 +0000
ROA not before:           Fri 21 Oct 2022 09:53:32 +0000
ROA not after:            Fri 20 Oct 2023 09:58:32 +0000
asID:                     43043
IP address blocks:        185.241.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b8:cc:d8:bd:44:5d:ce:0b:ee:81:d8:c5:79:e0:13:45:83:a5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77223c7df24b51552233edf70edc05faaa74141e
        Validity
            Not Before: Oct 21 09:53:32 2022 GMT
            Not After : Oct 20 09:58:32 2023 GMT
        Subject: CN=E301ECCE0EEF85278CF1BDA689F74C990CF08195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:c2:44:b4:f6:5e:d3:f6:5f:fc:b3:e8:6e:
                    43:59:83:b6:1c:89:b4:f3:55:b0:2a:82:e8:ce:2d:
                    82:91:e3:26:bb:34:12:11:c6:e4:1e:3b:32:71:15:
                    79:5c:75:65:9c:7b:25:12:4c:db:8f:42:99:ac:c7:
                    2a:fc:15:e3:9c:18:0b:8a:b0:1a:45:80:64:76:96:
                    6f:a7:85:56:52:53:75:d6:03:58:98:f8:78:03:f7:
                    79:ab:05:29:bb:ab:79:f6:d7:8f:c3:68:dd:3b:4c:
                    a6:cc:9e:ea:b5:3f:49:7f:af:ac:62:ae:a5:4e:86:
                    93:00:79:32:d4:06:43:9a:e9:e9:1c:f7:f7:75:e1:
                    29:8b:45:68:e7:22:d6:25:30:68:dd:09:39:ae:49:
                    1a:0c:fd:c8:21:a4:ab:72:f0:a0:c6:0d:e3:1d:55:
                    ac:7f:76:88:70:74:e7:41:af:da:61:bd:de:06:58:
                    73:09:c9:cd:c3:ae:cd:ce:71:3b:0f:61:ff:fb:25:
                    f2:49:35:34:00:f4:bb:ea:14:e9:1c:40:47:ca:8e:
                    70:2f:19:30:14:91:8d:4c:21:86:81:a5:bd:00:57:
                    66:79:00:ce:0e:31:40:52:5b:d2:7b:9c:52:3f:4c:
                    52:73:90:30:95:38:90:82:85:80:ca:d7:2d:78:ce:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:EC:CE:0E:EF:85:27:8C:F1:BD:A6:89:F7:4C:99:0C:F0:81:95
            X509v3 Authority Key Identifier:
                keyid:77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/25/77223C7DF24B51552233EDF70EDC05FAAA74141E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e203433303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:23:78:eb:73:42:a9:a3:34:82:b5:a7:51:d6:dd:3e:3c:66:
         1f:b4:a0:d3:7d:c6:4b:fc:a4:6a:c7:6d:1f:d2:00:28:7d:70:
         8a:81:a9:6d:47:c1:a6:14:c2:5a:a5:2f:86:b9:24:e9:7f:54:
         11:ad:7f:4c:33:6c:de:1d:69:19:c3:43:52:58:67:71:78:ea:
         ac:a1:2a:3d:f3:9d:b6:99:06:33:b3:f9:3f:c3:06:9f:21:92:
         5c:a3:49:73:ef:d0:ed:74:2e:55:a2:d6:2b:5e:e9:0c:b3:37:
         cb:86:73:4d:04:e3:77:2f:8e:43:7e:1f:0b:b1:f8:8f:65:54:
         8a:1f:a9:ee:97:e2:76:a2:bf:b5:ff:56:2a:a7:c4:7a:ee:92:
         1b:d8:97:db:05:28:a8:69:29:2e:51:5b:e4:5a:08:a4:f4:63:
         41:41:f1:f6:7d:a1:fa:da:21:33:98:8e:90:b2:90:b2:96:5a:
         62:2e:aa:63:79:41:65:93:01:3e:46:f4:53:2d:60:fc:d4:ac:
         3e:2e:f3:9f:4f:37:3a:60:23:d3:18:5c:17:72:25:d4:e1:8d:
         f4:eb:90:5f:02:63:26:1e:a1:a2:8d:47:47:8d:27:95:d1:3d:
         a4:a8:61:9c:02:f8:04:0b:e1:83:2f:5b:ef:3e:1e:b5:22:76:
         5a:4b:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----