Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa
File:                     7JYnStlyHZeGrYkDQzJZVLd8sDg.roa (raw, json)
Hash identifier:          Ej6nb5P11O9Qf9a5c6STHlmdAfITBwA2xfb3O4205YM=
Subject key identifier:   EC:96:27:4A:D9:72:1D:97:86:AD:89:03:43:32:59:54:B7:7C:B0:38
Certificate issuer:       /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial:       01856EEFF5B206117419FC96BAC079D1A916
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa
Signing time:             Sun 01 Jan 2023 20:04:57 +0000
ROA not before:           Sun 01 Jan 2023 20:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49910
IP address blocks:        77.232.252.0/23 maxlen: 24
                          2a12:9940::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:f5:b2:06:11:74:19:fc:96:ba:c0:79:d1:a9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
        Validity
            Not Before: Jan  1 20:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec96274ad9721d9786ad890343325954b77cb038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:42:f6:f2:e3:74:0e:d9:03:1f:ce:7e:c9:
                    00:ae:d3:c8:fd:85:d7:c2:dd:85:83:af:a8:c5:de:
                    4a:b1:48:da:40:23:c9:69:11:79:9f:89:5c:27:08:
                    92:fb:fe:3b:51:97:e2:65:c4:7e:99:9b:1c:8a:64:
                    df:94:0c:ef:a4:f9:46:6b:8e:02:ac:ca:4a:d5:f3:
                    dd:19:e9:f0:7c:7b:c6:0c:de:e1:45:62:93:35:0d:
                    dd:ad:3b:4a:e1:5a:33:6b:f2:a6:87:22:fc:8c:61:
                    fa:38:5c:9c:dc:3b:85:9f:cd:e9:24:4b:a7:26:d6:
                    18:92:2d:71:32:98:29:17:6c:53:ed:f1:89:0e:85:
                    8b:db:4a:9a:46:08:88:b2:05:34:c3:c6:b9:f9:73:
                    08:e0:f6:f6:53:ea:06:73:a7:af:36:a8:31:9c:c2:
                    a4:29:46:44:e9:fd:db:30:96:df:36:7b:cb:4a:88:
                    12:ee:b6:9a:16:b3:34:db:92:02:87:9c:fd:6a:08:
                    67:e5:2f:06:49:04:2c:5e:59:19:31:90:e4:99:e7:
                    f7:b7:01:10:a7:1c:af:a4:58:51:fb:4e:87:65:bc:
                    36:2e:e8:01:df:4a:01:0a:8b:cd:f2:9b:64:37:4b:
                    ae:bb:cf:2c:2a:cd:9c:4d:2f:54:52:be:33:b0:79:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:27:4A:D9:72:1D:97:86:AD:89:03:43:32:59:54:B7:7C:B0:38
            X509v3 Authority Key Identifier:
                keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/7JYnStlyHZeGrYkDQzJZVLd8sDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.232.252.0/23
                IPv6:
                  2a12:9940::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:fa:65:0e:2a:f8:1d:8a:dd:47:66:44:28:69:1c:8b:7b:
         47:37:d9:8d:92:57:c9:c8:9d:69:29:0d:3a:5b:ec:9d:ce:c4:
         14:80:15:f7:6a:55:07:b0:12:3b:57:6a:70:84:2d:69:11:9b:
         3d:ae:95:e7:c7:c3:4b:c7:74:96:39:7a:fd:f0:d3:8d:7f:ec:
         f3:ca:89:34:d5:3c:72:ce:47:44:1d:80:35:02:c3:ba:2b:50:
         e8:72:48:d4:ec:7a:8b:29:07:3d:99:c3:1a:12:1c:42:f4:c8:
         e5:a5:78:3a:82:68:63:e1:cf:c7:d7:62:b2:7e:fa:36:9f:32:
         07:02:5a:be:6b:4b:fd:b4:dc:d6:c6:f1:ba:78:e3:19:83:97:
         de:91:1c:85:86:26:8f:d9:bd:be:39:16:ef:75:a5:b5:ac:a7:
         3d:3d:1e:14:61:3d:5f:e7:e9:8e:9c:e0:e3:2a:57:e6:d8:3d:
         02:ea:73:d6:e9:7f:1e:c1:25:36:db:a9:30:8a:7b:80:0e:49:
         73:53:64:e8:3e:1c:d5:ee:4d:cd:b7:b1:56:7e:c7:6a:3a:c0:
         f7:58:00:36:d6:df:ff:6e:67:be:35:f5:fe:75:ed:04:0b:5b:
         5b:b4:f8:2d:a2:73:93:99:1f:c4:95:b2:12:27:f8:48:6a:3a:
         9c:ef:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----