Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/UXcNfGAFSbqHL1DU6XiNOfQxi9M.roa
File:                     UXcNfGAFSbqHL1DU6XiNOfQxi9M.roa (raw, json)
Hash identifier:          Ar1dIN9Q1NMGvfrv/+HxX801K6kXV8Nm+hqSlkOqFRg=
Subject key identifier:   51:77:0D:7C:60:05:49:BA:87:2F:50:D4:E9:78:8D:39:F4:31:8B:D3
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       018570429CB28371A2EE07B667EE0A64323E
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/UXcNfGAFSbqHL1DU6XiNOfQxi9M.roa
Signing time:             Mon 02 Jan 2023 02:14:51 +0000
ROA not before:           Mon 02 Jan 2023 02:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202079
IP address blocks:        37.203.242.0/27 maxlen: 27

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:9c:b2:83:71:a2:ee:07:b6:67:ee:0a:64:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Jan  2 02:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51770d7c600549ba872f50d4e9788d39f4318bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:6e:8c:e6:b2:e1:54:bf:25:b1:6e:85:a5:
                    ef:b5:e9:fe:71:23:40:6e:e2:45:d5:cf:40:48:7a:
                    5a:61:d1:4b:1e:37:a4:e6:4a:a1:e7:fc:88:6a:40:
                    d9:5b:88:34:71:83:63:06:f7:ca:39:52:b0:d3:dd:
                    7d:85:1e:ef:b5:74:c5:0a:98:60:38:02:d3:03:c6:
                    87:fa:d8:18:2f:d7:1c:75:b2:4a:21:09:1f:41:fa:
                    af:66:de:93:f3:a7:8a:c3:aa:2b:33:b0:8c:5d:f5:
                    20:43:cb:e5:a2:2f:0b:3c:c9:a4:a5:0a:74:2d:1a:
                    4c:b8:1e:65:62:6f:21:78:1a:96:6d:e2:43:0c:ad:
                    a1:bd:db:7a:f7:3b:2a:6a:27:f6:92:3f:a7:67:40:
                    27:e9:1c:0a:cf:45:7f:97:c1:05:72:07:16:5c:87:
                    cd:3b:37:68:eb:3a:16:1b:c2:6d:5a:1f:b4:7a:91:
                    13:03:03:b7:1d:fd:c3:4c:a8:3c:38:8f:4c:0a:00:
                    f8:3a:97:12:b7:aa:22:81:65:02:85:13:d7:b3:a7:
                    fd:48:cb:c3:b7:3a:11:b1:6f:62:1c:dd:b5:53:94:
                    10:6c:24:ed:35:90:ee:ea:9e:ff:cf:a2:21:3b:f7:
                    30:16:73:fe:70:91:eb:c8:10:f3:db:fc:ff:af:10:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:77:0D:7C:60:05:49:BA:87:2F:50:D4:E9:78:8D:39:F4:31:8B:D3
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/UXcNfGAFSbqHL1DU6XiNOfQxi9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.203.242.0/27

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:75:ee:e9:fc:11:92:3e:f0:ec:fe:c0:a2:39:3a:58:ea:
         f5:a5:ea:43:f5:df:e9:38:d1:76:1e:60:72:a1:0d:64:26:10:
         02:cd:30:1c:c2:4e:5d:1c:d6:ab:2d:47:75:2f:cd:f7:63:8f:
         33:ea:1f:9a:09:fc:d2:cc:5a:67:f5:6c:81:fc:a1:e5:2d:78:
         76:78:a9:04:a0:8c:49:3e:ad:fd:65:c3:36:7f:ac:7b:2f:a2:
         63:d0:e5:e7:50:77:70:c8:bb:9f:6e:6b:02:f3:02:24:38:08:
         89:5f:6e:08:8a:6e:ce:34:31:27:7b:e5:1a:e4:18:44:a3:73:
         7f:7f:b6:75:94:75:2c:e4:70:f7:5d:e9:31:3f:02:01:ae:07:
         b2:15:67:a8:44:cb:02:64:75:08:9b:3a:16:c0:0d:cd:a4:a1:
         95:f9:29:31:e4:d2:f0:cc:84:1e:8d:bd:6e:ba:70:00:a6:f9:
         8a:ab:bf:b0:f8:ef:41:f8:e6:0d:04:5d:87:e0:b8:16:7b:56:
         6d:26:e5:1b:2a:49:38:c2:05:7f:10:57:34:81:0f:2c:02:bd:
         38:16:6b:82:4c:fd:86:97:d8:2e:00:41:57:e5:11:88:df:09:
         ba:51:78:71:9b:c7:36:31:c6:ae:57:aa:18:79:22:9a:bd:68:
         8c:ed:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----