Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/q7MzFN_oEu-3xMYCJ-gcuLM47_8.roa
File:                     q7MzFN_oEu-3xMYCJ-gcuLM47_8.roa (raw, json)
Hash identifier:          06s2BSLJCmAy+AQrZYzY2/K5fTVW6I4fhBRdhrk0Sb8=
Subject key identifier:   AB:B3:33:14:DF:E8:12:EF:B7:C4:C6:02:27:E8:1C:B8:B3:38:EF:FF
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       01856CAF3585749061C71B90B9EB7B841660
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/q7MzFN_oEu-3xMYCJ-gcuLM47_8.roa
Signing time:             Sun 01 Jan 2023 09:34:59 +0000
ROA not before:           Sun 01 Jan 2023 09:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51793
IP address blocks:        37.143.160.0/23 maxlen: 23
                          2a03:8f87:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:35:85:74:90:61:c7:1b:90:b9:eb:7b:84:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Jan  1 09:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abb33314dfe812efb7c4c60227e81cb8b338efff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:f3:b9:93:4a:22:04:8c:7f:9b:77:f9:1e:
                    d0:c0:45:b4:90:ea:16:13:37:8f:d9:73:21:06:e1:
                    0c:4f:e1:c1:cd:84:7f:6f:1d:d4:7b:ce:9a:c0:56:
                    40:6e:f1:80:5a:e5:4e:af:b6:f7:1a:66:78:6d:1f:
                    a1:98:70:6f:9f:ff:bf:34:a0:23:a7:64:7c:9a:cf:
                    f8:84:35:08:2e:2d:0b:61:d7:11:71:70:69:fe:aa:
                    b4:75:f2:b2:05:12:ff:3b:5a:62:80:c7:bb:6e:8c:
                    64:50:31:8d:9b:a1:0c:28:eb:cf:e9:57:63:7e:3f:
                    14:13:50:0b:f2:da:ab:b6:92:38:ec:54:17:5d:8e:
                    81:27:79:21:e5:8e:28:51:9e:93:4e:81:9d:d8:33:
                    8a:de:49:8d:e2:62:57:97:83:6c:f7:93:8f:55:41:
                    6c:8c:a8:38:bd:af:22:3e:fa:19:b7:f8:e2:74:c0:
                    94:c8:cf:cf:53:87:d6:c1:be:0b:0d:60:f0:e1:51:
                    bd:84:4a:95:b6:e2:37:28:1f:1a:9d:fc:b1:00:1a:
                    8f:bb:20:27:58:5b:20:be:be:e6:90:ad:6a:51:9b:
                    14:bc:eb:5f:bf:41:69:f8:71:8a:cb:26:b9:9b:1b:
                    36:9d:6d:12:72:c2:65:49:22:1f:4d:30:73:77:11:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B3:33:14:DF:E8:12:EF:B7:C4:C6:02:27:E8:1C:B8:B3:38:EF:FF
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/q7MzFN_oEu-3xMYCJ-gcuLM47_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.143.160.0/23
                IPv6:
                  2a03:8f87:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:37:a5:eb:75:1f:8a:ce:42:91:9d:60:1f:a9:93:37:ac:fe:
         e0:e1:65:93:e6:d8:1d:bd:cd:58:92:d4:ac:22:1f:f3:03:6f:
         e1:90:b2:07:72:23:2d:1d:e1:fc:fa:3c:0c:8e:b1:0f:92:31:
         a7:bc:08:3f:4a:c1:68:cc:34:24:ac:f8:cf:1a:a7:cf:1f:79:
         57:bc:5e:71:ef:6d:b9:60:4c:82:a5:50:07:78:a6:c1:67:f5:
         2b:88:52:56:a2:0d:9f:80:60:ee:39:aa:ed:44:fd:d0:30:f5:
         a2:3b:f2:96:5b:ca:0c:40:2f:76:f4:2a:93:f3:1c:25:11:19:
         f6:7f:10:f4:e3:a5:19:6c:f1:07:c4:fa:17:9f:07:62:4d:7c:
         cc:52:cd:44:44:12:34:ad:5c:80:99:fa:d9:3e:0b:1a:b6:1b:
         1e:fc:fa:67:66:d0:5b:0a:ce:bf:d4:ae:19:f7:f6:b8:a4:9f:
         97:c4:b8:3d:3b:21:db:db:b1:33:f4:97:4f:df:6d:12:99:e3:
         ba:8f:ef:4b:2a:de:ed:87:a8:d9:e4:f1:b1:d4:37:a5:67:40:
         52:c4:c0:7a:4b:b5:7e:a2:1a:a8:58:d2:72:26:c2:5d:a9:d4:
         e4:21:4a:ae:0d:bf:cf:74:d9:eb:04:ff:39:82:6b:37:c4:1d:
         4e:ae:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----