Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/39iyGLSd5V5vGGmCFZkA1rbGV-0.roa
File:                     39iyGLSd5V5vGGmCFZkA1rbGV-0.roa (raw, json)
Hash identifier:          OCced1evRxYUNrAj6+XB3aBbIOCOc8Ja9AtG5FqBVv0=
Subject key identifier:   DF:D8:B2:18:B4:9D:E5:5E:6F:18:69:82:15:99:00:D6:B6:C6:57:ED
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       018582183A8A215B7766A6AEB208332B4743
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/39iyGLSd5V5vGGmCFZkA1rbGV-0.roa
Signing time:             Thu 05 Jan 2023 13:21:43 +0000
ROA not before:           Thu 05 Jan 2023 13:21:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210089
IP address blocks:        79.110.169.0/24 maxlen: 24
                          2a0d:1a45::/32 maxlen: 48
                          2a06:1e83:caff::/48 maxlen: 48
                          2a06:1e86:babe::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:82:18:3a:8a:21:5b:77:66:a6:ae:b2:08:33:2b:47:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan  5 13:21:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dfd8b218b49de55e6f186982159900d6b6c657ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:eb:44:b6:e8:f4:a2:0d:2f:eb:d8:73:35:
                    72:04:f1:5c:45:a3:7e:36:a2:bb:9b:ff:cb:db:74:
                    26:6f:86:43:e1:fb:68:23:4f:9e:1d:2f:e6:ad:6c:
                    ad:e4:ac:8c:1b:21:ea:b2:fa:cd:dd:83:1d:4d:6f:
                    f1:ea:9f:d4:e3:69:fc:05:c4:00:d7:1d:d6:8e:78:
                    f1:ac:cf:7c:65:c9:66:12:97:cd:2e:a4:d9:20:86:
                    c6:ff:db:96:3a:42:01:00:90:a8:18:a0:38:73:ba:
                    31:06:cf:6a:b6:26:5c:cc:f1:64:74:b5:af:d2:91:
                    ce:8c:be:b7:a8:af:fe:66:ce:08:af:94:43:31:0f:
                    44:6d:37:12:be:6e:67:83:96:9e:81:dc:a7:e2:b2:
                    48:73:32:90:1c:d7:fa:e7:f8:08:46:9c:7c:8c:5b:
                    56:3c:93:33:e6:de:5e:ac:f4:91:b7:80:d2:07:df:
                    f6:08:f4:dc:e1:8b:1e:fc:fa:8a:25:d1:92:95:bb:
                    51:af:07:4b:e0:3d:17:46:da:9c:d7:66:17:c0:c3:
                    28:04:9b:d8:e6:ff:d2:9b:b4:90:98:6b:e0:e8:b7:
                    62:38:8d:03:e0:1e:31:1d:d3:9c:2d:a3:50:d3:5f:
                    52:88:19:6b:df:91:93:58:5e:26:28:1b:22:3f:3b:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:B2:18:B4:9D:E5:5E:6F:18:69:82:15:99:00:D6:B6:C6:57:ED
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/39iyGLSd5V5vGGmCFZkA1rbGV-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.169.0/24
                IPv6:
                  2a06:1e83:caff::/48
                  2a06:1e86:babe::/48
                  2a0d:1a45::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:e2:23:c4:0b:0a:6a:8f:83:ce:87:56:e9:c6:92:a1:3f:
         94:00:ee:cf:2d:95:cb:44:62:e9:be:f7:f2:9f:15:06:bb:95:
         5a:5d:7c:9a:21:87:df:df:8a:c9:bf:74:49:54:8c:4d:d6:87:
         51:74:62:79:56:22:e8:86:fa:e2:8c:f8:ad:fd:9e:a0:95:64:
         9b:ad:3a:b6:83:f9:14:97:de:2f:d7:6f:a3:50:ad:4a:3b:59:
         e0:cd:9e:87:29:4c:75:41:3d:a2:ea:f6:89:c1:69:d5:04:22:
         cf:e3:38:27:1a:b7:a3:90:d4:be:65:51:6c:3b:42:6a:79:ad:
         2c:11:d1:7a:1f:1e:47:0c:50:08:b4:11:38:90:76:db:8b:49:
         ca:8c:84:f1:07:cb:19:c1:50:90:39:fa:59:b5:5e:30:54:cd:
         f2:f5:31:d3:ec:c9:3c:35:57:71:2a:a5:f6:57:06:19:bc:13:
         91:00:f4:57:a2:23:3c:62:79:5b:f3:06:a6:87:c7:09:34:cc:
         3d:ba:b7:8a:1c:93:56:f5:b4:5b:83:4e:71:f9:5a:3c:c3:17:
         79:d7:fa:e5:a3:69:1b:b9:fe:c4:f9:9d:ae:83:b8:ba:d3:9e:
         b7:e8:6e:2b:42:fc:9c:9a:fa:5a:2b:2b:eb:b6:37:0c:29:0b:
         89:a0:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----