Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/mOOoUTmTQv0_NKEgmBLHSZjxtb4.roa
File:                     mOOoUTmTQv0_NKEgmBLHSZjxtb4.roa (raw, json)
Hash identifier:          v8V5XuGBtZClgVMPHqP7VXE4rfWeiVnKG3JfclHycUA=
Subject key identifier:   98:E3:A8:51:39:93:42:FD:3F:34:A1:20:98:12:C7:49:98:F1:B5:BE
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       018572BA3AC5145C3FD58490B4EAEE89B1B7
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/mOOoUTmTQv0_NKEgmBLHSZjxtb4.roa
Signing time:             Mon 02 Jan 2023 13:44:45 +0000
ROA not before:           Mon 02 Jan 2023 13:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212417
IP address blocks:        37.77.136.0/21 maxlen: 24
                          2a09:9a00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:3a:c5:14:5c:3f:d5:84:90:b4:ea:ee:89:b1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: Jan  2 13:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98e3a851399342fd3f34a1209812c74998f1b5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:41:f9:d4:5c:e6:d1:37:37:40:d9:c9:43:
                    70:ec:c7:ed:33:3c:f4:79:85:40:56:46:d6:68:fc:
                    46:d7:9c:06:d0:86:24:1c:de:eb:55:06:aa:44:f5:
                    56:70:56:fc:17:c9:2c:3e:db:a8:c3:8e:91:90:26:
                    fa:b2:8c:41:71:b5:25:49:0f:57:92:cc:4e:48:4a:
                    c1:53:6b:41:87:a6:ff:65:0e:96:fd:7b:53:ea:6e:
                    aa:b3:e6:7e:80:40:b4:29:15:d6:d6:01:2d:e8:40:
                    63:1f:73:14:b1:38:95:3b:c8:10:ea:ff:02:56:e4:
                    79:77:b7:3c:d4:70:f8:83:97:f7:b1:f3:bf:df:29:
                    30:0c:4a:a4:66:8f:f3:95:10:66:20:aa:68:45:79:
                    bf:b6:2e:aa:e9:f4:67:86:94:22:ef:e9:41:ba:cf:
                    55:bf:74:7e:2f:9b:77:0e:62:d3:80:de:61:6b:8b:
                    e0:6a:ed:0c:3e:dd:ec:2a:37:89:f0:5c:84:7e:15:
                    20:59:90:4e:81:c6:f6:56:e5:35:1d:89:88:1e:a9:
                    92:a4:31:d7:eb:f3:f7:01:bd:ed:3c:fe:13:0d:d8:
                    b0:94:cc:2a:34:94:7f:f8:39:d3:ab:54:ba:d0:f0:
                    31:2d:9b:1c:ab:6c:5e:25:1a:bb:99:e8:a1:da:1c:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E3:A8:51:39:93:42:FD:3F:34:A1:20:98:12:C7:49:98:F1:B5:BE
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/mOOoUTmTQv0_NKEgmBLHSZjxtb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.136.0/21
                IPv6:
                  2a09:9a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:bc:a1:2d:63:00:99:06:f2:20:e1:36:ea:3f:45:84:2f:
         b7:19:e8:f1:14:47:09:b3:1c:e5:33:fb:25:7c:2a:81:17:3b:
         bf:bb:a1:59:b5:7b:e4:34:e8:64:7e:d6:36:5a:27:ab:75:5a:
         a4:e6:10:bc:e2:13:1a:48:7c:ea:f4:6e:cf:55:8f:bf:b5:09:
         10:15:30:d5:60:db:96:b5:d0:5d:17:20:43:fa:41:08:b2:71:
         03:f2:74:ae:a0:66:13:61:6f:d8:9c:fe:50:66:d1:b4:57:13:
         5e:7b:dc:f1:aa:f4:53:9d:18:f4:f1:6c:35:f5:9a:dd:cc:b9:
         90:27:52:29:df:3d:ec:a0:86:6a:a0:2b:1c:55:82:2e:22:ae:
         c1:51:cb:27:9d:3f:cd:c6:c1:5b:2f:fa:8c:13:a3:b0:48:73:
         3c:7e:6c:13:75:51:9e:39:bc:fb:ee:c1:aa:86:4f:9f:43:dd:
         6f:34:03:cc:d2:b9:61:e0:5d:a4:82:d7:91:a0:aa:0d:93:d2:
         bf:31:1e:5c:ce:1f:49:c7:87:98:1f:df:9f:e3:58:38:f7:63:
         2a:7f:ec:01:2d:31:95:22:4c:34:39:99:54:79:f7:70:22:3e:
         26:ab:c5:80:db:10:2e:20:c3:79:0a:51:27:bc:ab:b7:6f:42:
         6c:4f:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----