Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/9Vaz8H0ZTdpQ8Gp4F-5CkHdYPbM.roa
File:                     9Vaz8H0ZTdpQ8Gp4F-5CkHdYPbM.roa (raw, json)
Hash identifier:          8xJSgnYRQ1H+6rR4N70PBB6muc/sPZGUnEfUIiMMXtY=
Subject key identifier:   F5:56:B3:F0:7D:19:4D:DA:50:F0:6A:78:17:EE:42:90:77:58:3D:B3
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0188E3AC3F373A13260E651BD4E1FB06F405
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/9Vaz8H0ZTdpQ8Gp4F-5CkHdYPbM.roa
Signing time:             Thu 22 Jun 2023 15:14:56 +0000
ROA not before:           Thu 22 Jun 2023 15:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.75.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:ac:3f:37:3a:13:26:0e:65:1b:d4:e1:fb:06:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Jun 22 15:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f556b3f07d194dda50f06a7817ee429077583db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:67:1e:49:3c:b9:5d:13:81:1a:98:f5:0c:
                    49:f8:95:1a:ca:18:c4:ba:e5:f9:ae:7b:29:1f:2b:
                    09:03:dc:ba:d1:fa:9b:46:f5:07:a4:0a:a1:85:aa:
                    54:ff:d6:17:e0:d5:55:62:39:df:d7:12:e2:ba:b8:
                    bd:45:1b:aa:cb:6a:30:ce:5b:4c:5c:b6:80:13:82:
                    09:b4:91:7a:88:e2:93:af:f8:ea:c6:13:72:d8:f1:
                    30:d3:e5:7b:e5:ee:0b:97:9a:ba:7f:4b:f6:53:48:
                    4f:d7:73:89:fb:d2:dd:3b:9d:55:c2:e8:7d:a4:41:
                    00:71:88:b7:0c:ac:b4:05:1e:b1:21:68:5f:f1:52:
                    df:ee:86:ed:46:0e:1e:d3:ba:44:a3:ab:c6:de:30:
                    b1:ed:1c:06:95:92:01:a6:7e:2d:e6:05:7d:fc:31:
                    12:33:f9:58:dc:d2:a5:1b:6b:1b:17:2f:e4:78:9b:
                    58:23:26:84:ee:d7:f4:00:6b:8e:ac:69:aa:43:b8:
                    ae:59:e2:1c:ce:43:54:1c:63:69:be:ba:b6:6c:a8:
                    6a:e2:d1:8b:52:01:8b:82:99:ea:c7:27:7a:f7:d6:
                    f5:ad:33:d9:64:74:21:89:fd:1d:11:24:ce:b8:1f:
                    89:5f:64:7f:5c:3c:b6:a6:72:19:45:a3:ea:fb:bf:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:56:B3:F0:7D:19:4D:DA:50:F0:6A:78:17:EE:42:90:77:58:3D:B3
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/9Vaz8H0ZTdpQ8Gp4F-5CkHdYPbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:69:da:09:19:0d:29:c1:77:c2:06:d5:6a:fb:8c:db:25:
         02:e2:c4:e8:b7:cf:00:6a:2b:40:25:71:20:8e:e9:5d:71:44:
         00:88:26:63:b8:b4:c2:09:f3:72:da:af:89:7c:97:bd:d4:8c:
         a8:73:f9:5e:8b:86:a9:de:2d:8c:b8:37:f4:06:e0:c2:48:cf:
         2c:3b:f9:46:e0:7e:ee:4f:2f:16:36:1d:50:f3:54:3e:b9:44:
         56:58:0c:03:df:ce:4b:e7:db:e1:3b:50:dd:61:93:c9:8c:c5:
         e0:2f:a2:3f:f5:ed:1c:89:ad:d7:b2:e7:79:a0:a0:5e:ca:85:
         47:ff:80:56:85:02:7d:be:3e:bf:64:2f:70:37:e8:e8:1c:81:
         28:9f:5f:11:69:e2:57:b4:d2:5e:50:5c:9f:d8:dd:b3:ce:df:
         d6:24:ed:15:86:df:62:b4:27:90:f7:2f:9c:b1:84:b1:32:99:
         11:2c:cb:98:1a:e4:f8:4a:2a:74:14:24:42:58:3d:17:da:44:
         64:65:73:2f:c6:21:a3:4d:ea:2d:7c:2f:4e:d9:5a:ea:31:f0:
         97:67:d3:6e:97:3c:d0:9e:01:7b:80:d5:36:e0:cd:28:5b:53:
         d3:41:9d:75:3f:19:f0:bc:7f:4f:92:0c:5a:d1:5a:78:b0:c5:
         21:63:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----