Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/H9RTslooLUk59me_ZmJyeiItWEU.roa
File:                     H9RTslooLUk59me_ZmJyeiItWEU.roa (raw, json)
Hash identifier:          e+22Ngk85MF6hQN/KfWI6g5J+5icI7VMh5d+rx1Ptm4=
Subject key identifier:   1F:D4:53:B2:5A:28:2D:49:39:F6:67:BF:66:62:72:7A:22:2D:58:45
Certificate issuer:       /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial:       01856D8AD26629622788B445A7669EF24A21
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/H9RTslooLUk59me_ZmJyeiItWEU.roa
Signing time:             Sun 01 Jan 2023 13:34:52 +0000
ROA not before:           Sun 01 Jan 2023 13:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     10310
IP address blocks:        77.238.189.0/24 maxlen: 25
                          2a00:1288:f03e::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:d2:66:29:62:27:88:b4:45:a7:66:9e:f2:4a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
        Validity
            Not Before: Jan  1 13:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1fd453b25a282d4939f667bf6662727a222d5845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:59:fa:65:a5:56:d3:3e:bd:1c:46:a2:10:
                    d8:f8:29:19:11:66:ea:37:69:d8:cf:0f:27:95:ac:
                    3b:71:2f:a7:e3:c5:3b:e0:ef:1b:c4:f3:42:d0:72:
                    6f:19:35:e3:59:f4:1c:e5:f6:3a:da:ef:67:a7:18:
                    5c:bf:dc:09:cb:22:fd:47:88:47:a5:27:8a:e7:48:
                    ce:26:ca:35:08:61:fd:d8:63:2e:d7:87:a9:26:e0:
                    b6:40:27:ce:f2:ce:6e:26:35:fb:ec:d8:70:a8:bb:
                    fd:a0:57:03:cf:ee:18:9b:33:b6:e8:c1:3b:b3:2a:
                    3b:1b:03:10:54:f7:92:2c:db:e1:dd:65:6f:79:d2:
                    0a:d6:98:8f:fa:b5:a4:5d:4b:76:f4:f4:82:76:d4:
                    66:82:78:3c:d9:df:8a:ed:36:4c:af:95:fa:d4:5b:
                    ac:26:ca:66:8b:ac:ec:dd:d1:3b:2f:d2:27:32:cf:
                    af:e2:80:a4:0e:81:89:bd:20:65:34:bf:b6:0a:cd:
                    f1:9f:b0:99:5c:fd:3e:6f:12:94:5e:93:07:36:61:
                    ae:0c:42:e5:33:04:5b:25:bf:d5:9f:59:44:79:7d:
                    87:a2:f9:a7:bf:29:99:5f:66:c3:2f:df:bb:d5:80:
                    7e:e2:59:ab:6e:75:9e:32:4c:66:f4:b7:3f:4a:6d:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:53:B2:5A:28:2D:49:39:F6:67:BF:66:62:72:7A:22:2D:58:45
            X509v3 Authority Key Identifier:
                keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/H9RTslooLUk59me_ZmJyeiItWEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.238.189.0/24
                IPv6:
                  2a00:1288:f03e::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:69:15:79:cd:0b:83:db:9a:de:3b:db:c2:53:7e:89:f9:
         98:d3:c8:93:75:43:64:7a:80:d1:2c:24:ec:eb:4b:3e:8c:db:
         6b:04:2a:64:77:dd:5f:c3:5b:82:f9:82:2c:6d:b2:c1:c0:f5:
         e1:53:6e:5b:22:27:39:7d:8d:48:dd:a2:84:6e:8e:38:da:52:
         5a:48:78:f8:6f:60:e0:1e:ce:33:c3:42:c6:7e:02:f1:d9:c3:
         de:2a:bb:8d:ac:f4:56:b4:81:b3:21:8a:e3:58:f4:11:cb:9e:
         fa:fa:49:f8:3c:15:18:75:12:e4:85:c2:d4:81:3f:19:ac:75:
         e2:e9:ca:a9:94:9e:c7:a2:12:fb:15:54:7f:06:89:ff:f1:d9:
         82:ad:61:2a:d7:10:23:48:0c:74:cc:2d:35:d2:da:54:50:2c:
         4c:79:62:9f:5e:9b:f6:6a:57:f9:db:c5:71:73:42:4a:93:6c:
         db:96:b8:95:4f:af:0c:4a:0b:13:a6:1c:15:a5:03:fe:d2:70:
         77:bf:b0:06:c8:a9:bc:7a:01:14:d6:11:f0:77:df:b5:d6:c7:
         15:27:4f:41:b2:12:31:c3:d4:73:3a:20:ef:9b:29:42:ea:c2:
         93:0e:ff:aa:f4:02:77:23:c3:57:39:f2:27:83:a3:f3:e0:2a:
         93:c9:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----