Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/LU1pZ3CtPITiuELvbGWhc6MZ3Bo.roa
File:                     LU1pZ3CtPITiuELvbGWhc6MZ3Bo.roa (raw, json)
Hash identifier:          LqICwNv3CZ1E6Xcu/5m6+oNsvzdIUUdJX1BPcfF3tjo=
Subject key identifier:   2D:4D:69:67:70:AD:3C:84:E2:B8:42:EF:6C:65:A1:73:A3:19:DC:1A
Certificate issuer:       /CN=07ad752bdd91a0d31640c42304cae2a82f817c75
Certificate serial:       018730E1AD4D92E9BB8D7CC86B7C3FA397BE
Authority key identifier: 07:AD:75:2B:DD:91:A0:D3:16:40:C4:23:04:CA:E2:A8:2F:81:7C:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B611K92RoNMWQMQjBMriqC-BfHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/LU1pZ3CtPITiuELvbGWhc6MZ3Bo.roa
Signing time:             Thu 30 Mar 2023 04:58:29 +0000
ROA not before:           Thu 30 Mar 2023 04:58:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        37.16.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:30:e1:ad:4d:92:e9:bb:8d:7c:c8:6b:7c:3f:a3:97:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ad752bdd91a0d31640c42304cae2a82f817c75
        Validity
            Not Before: Mar 30 04:58:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d4d696770ad3c84e2b842ef6c65a173a319dc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:36:c2:25:91:9d:b2:a2:6b:83:1c:62:35:
                    2b:20:09:8a:95:06:19:49:3a:9c:3b:5a:92:6e:8b:
                    d6:11:da:7e:18:5e:11:e8:72:cd:cc:e1:a3:84:42:
                    34:20:fa:94:e2:57:ee:78:79:e7:8d:47:03:65:d8:
                    66:ab:18:82:64:f0:6c:6a:5e:11:15:29:70:67:25:
                    15:44:1c:14:77:3b:d7:25:22:ae:5c:b6:be:34:d6:
                    b9:1e:82:69:e4:98:a0:83:2e:6f:38:f3:9a:6e:24:
                    6d:61:c9:a1:bc:bb:35:5b:ba:ea:5e:eb:29:da:e1:
                    02:10:8e:52:b6:5e:51:da:9b:2a:ed:af:fe:dc:26:
                    02:e3:af:d6:0a:18:f5:3a:b7:25:93:30:88:56:6d:
                    1a:84:7e:3e:f7:b5:23:f1:72:98:2f:c0:c3:61:88:
                    49:12:1d:a2:aa:de:a8:b1:98:91:be:dc:97:90:50:
                    f8:b9:51:bd:9e:b2:11:a5:05:fb:9c:8a:fb:4a:41:
                    39:9e:35:20:d1:13:7f:90:cb:09:80:c2:19:69:c6:
                    4b:e1:c4:48:24:ec:64:f7:aa:ce:2e:06:1b:b7:87:
                    c1:16:5e:e8:e6:cb:77:11:e1:64:74:4f:25:8a:62:
                    06:5c:4e:39:e7:c7:50:33:a5:ab:7b:2e:af:f2:c8:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4D:69:67:70:AD:3C:84:E2:B8:42:EF:6C:65:A1:73:A3:19:DC:1A
            X509v3 Authority Key Identifier:
                keyid:07:AD:75:2B:DD:91:A0:D3:16:40:C4:23:04:CA:E2:A8:2F:81:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B611K92RoNMWQMQjBMriqC-BfHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/LU1pZ3CtPITiuELvbGWhc6MZ3Bo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/be718b-92a9-444b-ae0a-f75e5d853176/1/B611K92RoNMWQMQjBMriqC-BfHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:04:c1:bb:1f:cf:25:7d:2e:d8:ed:9c:2b:c8:61:79:78:d1:
         20:54:c6:e7:02:e7:2b:f4:cb:da:08:db:0b:69:ab:47:4b:c1:
         d7:9b:d6:53:31:5b:d2:bc:14:50:52:6d:7e:61:d8:bb:6a:3a:
         18:b2:f3:93:15:8b:d2:41:7e:bf:2f:f0:c4:69:48:06:7c:38:
         d7:bb:c3:fd:40:b4:a6:4a:e2:6e:ab:24:d7:0f:f0:1e:24:8f:
         f6:db:0a:5c:67:9e:df:c6:2a:0f:f8:8f:99:e4:db:6b:35:3e:
         5a:b8:ff:a6:37:d8:27:22:c2:65:b0:f6:4f:98:f0:9c:44:23:
         96:5e:61:49:c6:4a:74:bd:e1:9d:cf:e3:12:b6:bc:13:9f:d5:
         37:88:cf:39:88:40:e7:e5:c7:77:65:db:17:eb:87:13:39:5a:
         26:13:ac:b8:3a:14:2c:7d:be:35:cb:94:d6:19:18:c9:fd:5c:
         21:4e:cb:c8:5f:b5:27:ae:b5:c4:ec:54:53:f5:2b:77:fe:58:
         4c:50:9a:8b:a1:07:af:84:86:2c:4a:0c:69:b3:3e:10:ca:fe:
         c5:2a:99:14:62:1d:e3:6e:83:e9:18:58:5b:28:09:a8:a0:5c:
         67:a1:3a:f5:19:d1:a9:a5:8d:84:b2:60:96:e0:be:d1:c6:74:
         d8:96:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----