Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/gM3Gxy5uyNxg9ci2xOmb3KJJrjM.roa
File:                     gM3Gxy5uyNxg9ci2xOmb3KJJrjM.roa (raw, json)
Hash identifier:          go2K0NXA++i/ySR7sX81jEZChEvMu5jQmCIk4Us3etg=
Subject key identifier:   80:CD:C6:C7:2E:6E:C8:DC:60:F5:C8:B6:C4:E9:9B:DC:A2:49:AE:33
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0189BA866901D31914F0B440626A02CA8A7E
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/gM3Gxy5uyNxg9ci2xOmb3KJJrjM.roa
Signing time:             Thu 03 Aug 2023 08:31:58 +0000
ROA not before:           Thu 03 Aug 2023 08:31:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        77.75.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ba:86:69:01:d3:19:14:f0:b4:40:62:6a:02:ca:8a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Aug  3 08:31:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80cdc6c72e6ec8dc60f5c8b6c4e99bdca249ae33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:9f:18:08:ea:3a:f6:58:61:75:c1:9a:f3:
                    f4:91:34:58:58:97:e7:20:6f:5d:a4:fa:c6:aa:76:
                    5a:ac:24:63:38:75:3d:95:2b:bc:2e:43:06:56:18:
                    02:29:c3:bf:df:42:63:0b:f9:83:cf:7b:fe:c6:e5:
                    9c:c4:e5:d7:8d:08:e0:36:bc:c0:72:cf:6c:bf:51:
                    09:83:e1:19:b9:02:97:0d:9d:3d:db:11:2c:51:b2:
                    7f:8c:50:17:bb:75:33:8b:69:2c:77:c5:82:ce:eb:
                    18:43:a3:a3:a9:b6:3f:b3:17:4d:9f:89:8e:ee:69:
                    20:f1:17:7a:02:6c:a5:44:04:02:aa:b2:d0:83:fb:
                    5f:5c:12:df:24:15:a4:d6:2a:b4:17:9e:3f:6b:7d:
                    bd:6d:46:6b:07:6f:de:3b:1e:d8:1e:f6:11:60:67:
                    c7:3f:da:38:ba:aa:dd:be:83:c4:52:9c:12:f6:f3:
                    fa:39:41:b0:a4:1c:28:93:f5:86:91:9e:80:d7:06:
                    09:e0:74:eb:d3:bc:8a:9d:8c:c8:be:c3:a7:34:5f:
                    bd:75:26:86:5d:76:09:c7:3a:53:75:97:bd:c2:55:
                    f6:2b:e2:74:ff:27:02:90:fd:55:c7:9c:4f:15:b8:
                    c4:ea:db:e7:6f:4c:45:6d:52:fb:4d:aa:45:e6:0f:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:C6:C7:2E:6E:C8:DC:60:F5:C8:B6:C4:E9:9B:DC:A2:49:AE:33
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/gM3Gxy5uyNxg9ci2xOmb3KJJrjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:1e:5b:ad:c5:5b:c9:b2:99:6a:7b:10:16:19:0a:7c:67:
         fd:39:1e:12:76:4b:bd:b8:09:a1:62:1a:e7:27:7e:46:1c:33:
         d7:e5:ff:78:6b:78:d5:df:e8:d7:ac:50:1d:ef:e7:72:76:be:
         99:88:2d:d2:4d:19:7e:19:8a:d1:de:a3:ad:39:fc:1a:d6:b8:
         14:f3:87:ba:0e:f7:e0:33:bc:1b:ed:c9:d3:7e:aa:03:c6:5c:
         f0:52:e5:9d:e6:00:7c:c6:c7:6a:30:ab:eb:cd:41:1f:c9:27:
         9c:66:ef:c3:80:d7:f9:31:b3:a0:2b:83:88:5d:b9:94:b9:16:
         2d:46:6f:5f:d9:d5:2c:e6:64:de:72:24:24:03:d0:6a:ef:c9:
         f7:d4:72:76:40:8c:30:db:ee:78:e5:ed:ed:5a:cb:d3:38:9d:
         b8:e0:7e:ad:d4:d8:0d:91:51:d1:83:da:e2:8c:11:b4:0a:ae:
         15:dd:de:ac:4a:62:ff:3a:ae:84:3d:a6:fc:63:d9:22:8a:7d:
         e2:28:b5:c1:f2:04:56:e6:5c:85:bc:f3:3a:92:c1:76:6a:de:
         11:fd:31:bb:67:ca:ae:2c:41:d4:af:70:89:7d:55:71:47:b3:
         4a:4e:72:0c:1a:2f:e6:59:c3:f3:85:e8:ac:52:9a:ef:cb:57:
         bb:07:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----