Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/MzsjDDGxb1bB-FuJkxeKCs21oeA.roa
File:                     MzsjDDGxb1bB-FuJkxeKCs21oeA.roa (raw, json)
Hash identifier:          7Kd+Q+CN8yNDglO/FxV6yukIDLTt56dB4Pyv0Z8Kpe8=
Subject key identifier:   33:3B:23:0C:31:B1:6F:56:C1:F8:5B:89:93:17:8A:0A:CD:B5:A1:E0
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       01856F1D8B74612B39C12B35127558F0BD01
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/MzsjDDGxb1bB-FuJkxeKCs21oeA.roa
Signing time:             Sun 01 Jan 2023 20:54:45 +0000
ROA not before:           Sun 01 Jan 2023 20:54:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36351
IP address blocks:        193.56.217.0/24 maxlen: 24
                          2a05:a880:dc20::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:8b:74:61:2b:39:c1:2b:35:12:75:58:f0:bd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Jan  1 20:54:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=333b230c31b16f56c1f85b8993178a0acdb5a1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:83:73:a6:52:18:23:c7:bd:6b:ec:79:0f:
                    14:15:0a:e3:79:e5:eb:d9:13:f8:2c:b0:d4:b1:bd:
                    f6:88:50:3c:1a:07:db:15:d8:6f:46:b9:e5:0f:d2:
                    5c:59:48:4b:e8:18:24:9d:92:f8:db:6b:0e:4a:87:
                    67:68:3b:05:5a:db:c6:42:a8:4f:2f:da:ab:e4:6a:
                    00:cb:0c:0a:7d:1a:34:89:ea:2a:86:e6:7a:7f:ac:
                    9f:45:cf:96:c7:ca:32:95:23:9a:54:08:a7:3e:d7:
                    d3:cb:18:67:b9:77:94:21:66:18:e3:9b:20:98:8b:
                    cb:de:38:4a:bd:74:ae:14:76:57:8d:c8:1a:8d:62:
                    d0:bc:8e:b8:11:35:e9:44:29:0a:92:48:41:b6:7a:
                    55:16:af:cd:38:5d:47:65:b8:ab:04:47:e9:6f:f5:
                    95:7e:82:a6:51:ee:38:f9:2d:36:28:0c:aa:48:e0:
                    f6:ce:be:f2:7c:bd:b1:eb:62:79:be:22:3c:5f:5e:
                    58:f4:55:55:59:11:89:0e:69:ae:ee:4f:9d:4b:2f:
                    5f:9b:6c:fc:ea:47:82:04:cb:81:85:81:de:fe:9c:
                    8c:8d:69:10:e0:1a:80:f5:76:44:69:82:f0:7d:f8:
                    ee:ea:dd:68:c4:fe:6d:ce:2c:b9:15:1d:84:5a:c3:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3B:23:0C:31:B1:6F:56:C1:F8:5B:89:93:17:8A:0A:CD:B5:A1:E0
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/MzsjDDGxb1bB-FuJkxeKCs21oeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.217.0/24
                IPv6:
                  2a05:a880:dc20::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:75:e6:79:0c:dd:f3:b3:75:4a:50:17:15:f3:53:93:b2:73:
         5d:87:93:5b:ad:29:99:e8:df:ee:6b:ff:44:f2:87:4a:25:af:
         b0:0f:f5:92:b6:93:5c:6a:62:34:a4:1e:99:8a:1a:48:f9:e3:
         8d:9e:21:98:fc:d0:e0:1f:e7:56:e6:2b:8c:90:56:fa:76:f2:
         06:ac:55:d8:85:a3:e8:a2:4d:b2:05:b2:d4:65:b6:7c:30:46:
         be:9a:a7:a9:4d:38:c6:41:ff:c2:15:c0:b9:3f:da:62:07:a2:
         eb:25:d6:75:76:e1:71:5b:37:b4:ea:81:b3:9c:86:0c:41:52:
         1e:f6:3c:d7:f6:8c:24:c3:73:8f:db:3a:3d:78:f6:4e:d3:6f:
         18:dc:59:f5:48:96:ae:33:40:bf:85:31:98:9e:48:bd:41:ab:
         2e:52:2e:e4:1f:eb:8b:dc:52:79:ad:92:fa:79:79:31:68:37:
         02:71:31:2c:7f:b7:8a:88:a2:0f:c2:45:77:ef:39:ea:83:49:
         e8:d0:aa:33:89:09:04:f8:2d:29:1f:d5:43:49:59:4c:fb:65:
         bd:64:34:f6:84:6f:a9:ca:a5:99:f9:e3:2b:cb:27:b4:47:b8:
         79:5c:6a:fb:aa:f6:10:ba:7d:18:92:5b:2e:2e:34:11:ac:42:
         14:90:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----