Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa
File:                     AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa (raw, json)
Hash identifier:          aYSNQ1lKecdjWWoDIXhb1NzzFFK1Uu8Nhc8BDFhmqQg=
Subject key identifier:   02:C2:8F:10:71:EB:50:EB:16:F0:35:6D:14:50:7D:CC:57:43:78:71
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       018587E52F333305634C71D50854E013B9CC
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa
Signing time:             Fri 06 Jan 2023 16:23:42 +0000
ROA not before:           Fri 06 Jan 2023 16:23:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        185.27.178.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:87:e5:2f:33:33:05:63:4c:71:d5:08:54:e0:13:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jan  6 16:23:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02c28f1071eb50eb16f0356d14507dcc57437871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:01:07:fd:bf:cd:d5:77:b1:74:91:fc:c9:
                    39:19:b5:c3:1d:21:dd:4c:b8:0c:f3:26:f4:9a:dc:
                    bf:07:2b:c2:c9:f1:37:0f:66:10:90:46:07:4d:d1:
                    33:4e:e0:dc:6a:52:a4:84:44:65:2f:a8:2e:6d:b5:
                    74:27:4f:81:7a:c1:17:d3:8a:da:1b:ac:8e:ed:3e:
                    70:15:53:37:34:d5:61:ff:7b:7a:81:cd:f0:d2:61:
                    01:b0:7b:98:da:24:41:81:8b:ad:96:7e:71:00:ae:
                    96:0c:2b:f6:16:0f:cf:66:30:af:df:4c:fd:ae:d6:
                    b3:2c:28:b8:8f:f9:de:b8:51:da:d0:97:fe:c7:96:
                    70:e4:f8:ac:2f:b0:44:20:81:26:82:44:7c:43:81:
                    89:b8:1f:75:6c:a5:e6:b6:8f:3d:3a:d9:6b:d8:0e:
                    ff:c6:04:e3:15:75:03:69:0f:a2:85:89:03:41:5c:
                    ec:43:f5:67:ff:5f:65:0a:2b:78:6c:e8:c3:93:c0:
                    77:a9:f3:55:1d:0a:53:bf:f2:c2:2a:96:d0:80:d3:
                    73:02:16:0c:2a:82:da:5a:4c:ba:e9:5d:54:bd:c8:
                    e5:64:b3:68:b0:49:27:7f:ec:57:e2:5b:d6:b1:6a:
                    c3:92:bc:45:7a:b4:59:08:6e:8a:80:61:da:f1:90:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:8F:10:71:EB:50:EB:16:F0:35:6D:14:50:7D:CC:57:43:78:71
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/AsKPEHHrUOsW8DVtFFB9zFdDeHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:5c:bc:66:bb:a7:cd:0c:9c:78:09:1f:a8:87:a6:db:c2:
         fe:43:d8:8a:c6:60:91:b1:2f:bd:82:98:71:bb:8f:31:fd:12:
         08:bc:5f:e2:84:e1:9b:ca:42:31:9c:e4:d2:22:6a:5a:85:66:
         3a:e7:23:33:bb:4b:a1:78:e9:54:b5:70:e3:36:28:11:c5:f3:
         6f:41:ff:c3:b7:af:b9:7b:9a:d6:d4:14:4e:1f:01:69:16:41:
         8d:71:d1:48:14:e2:af:f7:0e:91:49:e1:f8:21:96:6f:be:bc:
         b9:63:61:70:ca:11:ea:23:a3:cf:1e:fb:61:d8:a1:c8:fd:25:
         65:1b:a2:32:41:94:9b:90:47:ec:3b:05:1e:0b:76:2d:6a:9d:
         c2:26:c9:55:c8:cf:83:c0:9a:dc:76:f8:7b:8d:c1:60:69:ec:
         28:01:e9:f9:53:43:16:2b:b0:2e:a5:fd:57:29:9a:4c:1f:3d:
         3b:49:3b:ed:c1:4f:b6:eb:ed:52:6e:55:a7:d7:9b:db:e6:1a:
         82:0d:5f:ac:b7:cc:f8:91:2f:31:80:d8:b1:2e:e0:49:9c:dd:
         68:24:46:aa:86:6f:8f:4b:42:72:21:ae:2c:72:7a:4d:74:cc:
         a5:dd:a1:88:c7:1f:0b:68:13:f2:17:2f:36:55:e9:3e:25:4f:
         f8:3c:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----