Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/B0w9u6HNZ-LI2VvJdR37tmoUrF0.roa
File:                     B0w9u6HNZ-LI2VvJdR37tmoUrF0.roa (raw, json)
Hash identifier:          POWSxFbJxNdNC4nxQlYXiKnWmKKbYdxH0a90Nix2Exw=
Subject key identifier:   07:4C:3D:BB:A1:CD:67:E2:C8:D9:5B:C9:75:1D:FB:B6:6A:14:AC:5D
Certificate issuer:       /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial:       01856FD4FC909F58B682ADE19C42FEB343FA
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/B0w9u6HNZ-LI2VvJdR37tmoUrF0.roa
Signing time:             Mon 02 Jan 2023 00:15:07 +0000
ROA not before:           Mon 02 Jan 2023 00:15:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61029
IP address blocks:        185.77.196.0/24 maxlen: 24
                          2a03:1980:d113::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d4:fc:90:9f:58:b6:82:ad:e1:9c:42:fe:b3:43:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
        Validity
            Not Before: Jan  2 00:15:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=074c3dbba1cd67e2c8d95bc9751dfbb66a14ac5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:9e:b8:22:49:db:bd:c3:37:a8:d5:01:91:
                    6a:2a:b5:46:b9:3a:df:8e:c7:d2:dc:23:57:85:93:
                    27:47:e5:e1:1c:79:2c:29:29:2e:2a:29:71:9b:e9:
                    c8:40:f0:be:0c:38:d1:9d:c1:20:29:7c:90:53:a0:
                    ec:16:9b:a9:4f:a8:0e:2d:cc:fe:be:ab:68:b6:87:
                    d5:3f:4d:28:f0:e0:58:5b:90:5d:30:6e:b5:3a:4c:
                    04:f7:1c:23:ad:9f:4c:33:1a:aa:af:11:39:e3:c1:
                    a7:39:c9:5f:b9:30:a0:9a:6c:7a:78:a8:88:09:3d:
                    3a:77:31:3f:39:49:b7:7e:75:0a:44:9d:13:24:88:
                    0d:29:43:3e:b4:ae:89:ae:fe:ab:5b:77:f8:b6:42:
                    61:ee:62:fb:d6:4c:ea:d9:49:55:90:61:ef:b0:13:
                    a7:3e:9e:86:48:1d:d5:d9:ef:a5:b2:30:b0:c9:87:
                    50:ec:eb:a7:fa:28:1e:50:3d:05:59:9c:2c:26:d2:
                    3e:f2:01:3f:bb:25:8a:8d:44:d7:aa:19:f4:e5:3b:
                    b9:0e:47:1c:c4:ab:69:9f:dc:36:b8:dc:de:ce:2d:
                    13:41:a4:ac:35:37:1c:ab:7a:7c:36:97:dc:aa:2d:
                    3d:e9:25:b0:f1:9e:70:6f:ae:64:56:38:1c:4d:0f:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:3D:BB:A1:CD:67:E2:C8:D9:5B:C9:75:1D:FB:B6:6A:14:AC:5D
            X509v3 Authority Key Identifier:
                keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/B0w9u6HNZ-LI2VvJdR37tmoUrF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.196.0/24
                IPv6:
                  2a03:1980:d113::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:6f:6d:d6:28:9d:9b:20:bd:df:c5:96:df:c3:dc:25:50:ac:
         c0:5c:1c:bc:b1:b8:c4:97:d5:27:e9:92:51:d8:4e:fe:41:5f:
         cf:5a:47:d1:29:ed:57:83:ff:5b:ae:fe:6d:08:6b:72:30:ef:
         c2:f7:49:5d:dd:a7:7e:23:d6:44:4c:dc:c4:f5:4e:65:ee:75:
         83:d1:4c:dd:15:4d:0c:e5:d9:ec:d4:dc:79:6f:11:e2:ce:9f:
         1e:38:46:77:a9:e6:81:87:99:be:6f:07:59:0b:7a:9a:1d:2f:
         3a:9b:97:42:63:af:f0:88:64:93:36:cf:aa:f8:e5:91:d1:3d:
         be:f1:a8:04:d0:f9:00:7d:26:b8:84:58:b1:96:da:10:4a:0e:
         c7:ea:43:1d:16:c7:db:b4:15:07:34:97:91:20:a8:6e:50:35:
         6c:ca:d2:69:b1:4a:bc:c8:da:8b:22:32:f6:ee:65:9a:17:11:
         9d:10:9e:b7:2d:f7:24:41:77:ab:fa:79:5a:9a:5b:9c:c3:ba:
         c8:0e:64:db:2b:b2:5d:2e:6a:7d:f1:00:46:6f:42:49:7f:08:
         34:9d:95:e3:e3:b8:d3:15:14:b7:e4:85:eb:33:f6:3d:cd:40:
         cd:a6:3f:fc:04:5c:8c:dc:e4:0d:97:a8:cb:6b:0f:97:a6:0a:
         3c:dd:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----