Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eA_MHU75gC46YuZ17l0SMCUoR-I.roa
File:                     eA_MHU75gC46YuZ17l0SMCUoR-I.roa (raw, json)
Hash identifier:          wykpOQXxocdPhF+QDN9y8lQqnJU6Xnucfo0xTjGJgmY=
Subject key identifier:   78:0F:CC:1D:4E:F9:80:2E:3A:62:E6:75:EE:5D:12:30:25:28:47:E2
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       018764E29061B028A686311919571BB91EE7
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eA_MHU75gC46YuZ17l0SMCUoR-I.roa
Signing time:             Sun 09 Apr 2023 07:19:42 +0000
ROA not before:           Sun 09 Apr 2023 07:19:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139076
IP address blocks:        176.117.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:64:e2:90:61:b0:28:a6:86:31:19:19:57:1b:b9:1e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: Apr  9 07:19:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=780fcc1d4ef9802e3a62e675ee5d1230252847e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:23:a6:ea:80:52:7c:5a:42:f4:7d:67:b8:
                    0d:99:3b:2f:cd:b4:ed:a2:b6:82:61:42:8c:40:17:
                    8e:7a:76:b1:eb:20:5e:20:15:6b:54:2c:a8:1f:84:
                    51:e6:4e:2c:f3:a9:69:2e:84:b2:f1:20:8d:cc:37:
                    04:11:e0:7e:96:74:08:8e:7e:f0:ce:30:9e:ae:67:
                    cd:35:ed:bb:1b:35:87:6f:6e:11:b8:b9:78:d9:b9:
                    c2:19:5c:e0:da:21:21:48:89:ff:8a:29:99:af:68:
                    38:27:bc:02:6b:28:d2:57:cc:9f:cb:f3:26:5e:95:
                    40:c3:fc:62:2e:92:fa:c5:bd:b9:06:0a:63:d7:ed:
                    18:c9:86:1f:ee:78:b0:83:27:9e:67:a6:0a:cc:fe:
                    fe:75:f4:da:ea:1d:6e:bd:11:74:22:d6:5a:a0:f0:
                    83:30:97:a2:dc:2d:90:8e:ed:7e:85:97:86:27:5a:
                    fb:62:2e:a6:80:58:d9:f8:17:c8:b9:1b:a6:4b:6b:
                    6b:04:71:42:1e:45:f0:8f:08:1a:fd:79:d1:9b:a9:
                    a4:ea:03:15:bf:4e:45:13:a2:b1:05:87:7b:3b:5d:
                    cf:68:07:2e:1d:1e:c2:e8:dc:f1:37:e4:62:0f:96:
                    c7:43:0b:4f:c9:b8:d7:cd:2a:5b:1e:a6:b9:2c:c8:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:CC:1D:4E:F9:80:2E:3A:62:E6:75:EE:5D:12:30:25:28:47:E2
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/eA_MHU75gC46YuZ17l0SMCUoR-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.117.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:60:1d:0e:b4:59:2f:20:98:7b:30:f6:95:5a:b7:21:a6:f7:
         09:2b:0e:16:65:54:93:a3:77:8c:5e:3f:c2:f1:40:bf:28:37:
         dc:07:f4:c9:ad:31:f1:ec:5f:6d:09:0b:41:42:15:04:b7:7e:
         50:00:07:da:45:48:33:88:ef:5e:b6:41:d5:0f:ee:21:58:6f:
         ff:b2:89:52:0d:8a:11:ed:8c:a7:78:c8:d4:8d:ba:01:be:3a:
         56:a5:25:29:e4:1b:66:be:00:3d:05:3b:cb:cc:dc:f4:d4:fb:
         62:31:c6:21:72:bb:fd:5d:03:b0:c6:c2:2e:bf:4a:94:2e:50:
         0a:7a:60:55:fc:5f:5f:8f:24:1d:80:38:f6:8c:4c:23:1e:6c:
         fd:54:6e:77:84:9b:9d:09:5f:3a:2e:90:63:5e:28:38:3e:1a:
         ce:52:58:55:ab:8e:77:29:12:88:94:80:ca:27:c8:b8:76:be:
         5d:14:06:c9:c9:54:96:72:9b:a7:7e:0a:52:dd:5d:8d:cc:4f:
         5a:99:e6:b8:95:64:9c:c4:a5:02:49:b0:ce:b9:4f:bc:da:31:
         6a:1a:37:be:de:75:eb:dd:0f:ed:66:f9:b3:6b:99:5a:1f:f0:
         23:bf:32:31:52:31:b0:4e:e0:ec:8a:98:be:49:e8:db:cd:56:
         f0:01:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----