Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa
File:                     W8c23KH12l-ek0rc-Yl119LAOWk.roa (raw, json)
Hash identifier:          XFnBFKxTQjgJ/kIwOLMZFnBcw6FP4DeU2DNp41lMuhc=
Subject key identifier:   5B:C7:36:DC:A1:F5:DA:5F:9E:93:4A:DC:F9:89:75:D7:D2:C0:39:69
Certificate issuer:       /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial:       01857227D92C4685A8A459B86F626DBF952E
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa
Signing time:             Mon 02 Jan 2023 11:04:52 +0000
ROA not before:           Mon 02 Jan 2023 11:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     378
IP address blocks:        132.74.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:d9:2c:46:85:a8:a4:59:b8:6f:62:6d:bf:95:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
        Validity
            Not Before: Jan  2 11:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5bc736dca1f5da5f9e934adcf98975d7d2c03969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:a5:39:81:c1:08:6f:78:ac:5e:b7:36:57:
                    41:28:ce:bc:a5:64:f0:c0:42:e2:27:37:cd:47:2e:
                    d2:6f:bf:7b:e6:b0:82:e8:5e:bc:43:cb:00:3d:89:
                    d0:c5:fd:f6:1b:53:c0:2b:fb:63:42:c5:d8:df:ce:
                    f3:0b:21:39:42:45:0e:0f:ba:c5:5f:da:fd:cd:52:
                    52:f8:7f:4b:f4:c7:b9:ad:51:fc:f2:cf:dc:9c:d4:
                    89:cb:9c:8d:b8:ff:d9:aa:be:2c:b0:83:9c:b8:3d:
                    a5:ef:14:00:e1:04:7b:40:0c:27:0a:63:5f:45:10:
                    c5:d0:83:69:d8:1d:c3:83:eb:b3:e9:68:11:38:2a:
                    51:72:a2:cc:69:1d:84:34:26:38:1b:57:4d:5f:25:
                    96:1d:a0:69:d2:6b:5a:ff:51:65:fb:3f:de:59:d3:
                    8c:fe:2c:6a:6f:d9:ef:a5:0f:12:d7:43:fd:7c:41:
                    96:95:90:3c:70:52:59:35:90:af:e7:92:4c:b4:07:
                    9f:37:aa:87:51:4b:9f:84:10:0c:1b:aa:25:bc:2b:
                    eb:a5:ad:9e:1d:2e:88:ff:e5:4a:47:02:8f:e4:52:
                    b1:86:b8:69:c3:0e:8a:83:f8:89:4b:0e:3b:c1:9c:
                    81:1e:c5:be:37:e5:88:fa:8d:b9:4f:df:1f:86:5f:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:36:DC:A1:F5:DA:5F:9E:93:4A:DC:F9:89:75:D7:D2:C0:39:69
            X509v3 Authority Key Identifier:
                keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/W8c23KH12l-ek0rc-Yl119LAOWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:28:bc:f2:ca:ef:50:bd:79:7f:71:4e:1a:5e:04:9f:5e:
         86:83:ee:b1:19:c2:b9:6e:45:3b:83:b9:3c:74:1e:05:fc:95:
         eb:c1:5b:b4:34:25:5b:83:2a:69:30:eb:f6:06:6f:64:e1:d3:
         93:e2:fe:03:36:5c:e2:71:12:77:6b:b0:12:b6:e8:19:9b:1b:
         e7:1c:d3:d1:4a:43:f5:54:9b:4e:25:57:46:71:6c:e1:c9:1c:
         07:df:8a:5c:2a:a3:37:9a:d7:77:f5:12:dd:1d:a2:ee:f6:d0:
         d6:bd:89:75:83:35:b3:21:84:f4:b3:78:4f:42:e0:51:88:4a:
         92:50:f7:25:d1:8f:5d:19:77:d1:1e:44:c8:f3:4b:9b:fa:6f:
         91:37:5f:23:fa:f9:a1:ce:8f:02:75:16:de:7c:69:64:47:27:
         19:36:d1:05:a7:2d:64:1c:5b:78:44:d0:1a:85:d5:20:2d:03:
         ec:fe:90:99:8d:26:3c:01:28:e6:cf:a1:d9:c0:e4:cf:80:d6:
         4a:3d:73:f4:9f:8e:49:e0:6e:b0:43:83:77:96:93:7f:33:e1:
         7f:19:b5:24:8d:d8:ec:b7:ed:c4:07:39:62:56:a4:bf:ba:e6:
         6b:50:30:50:81:94:dc:2c:80:51:2d:35:34:4d:0d:1a:c6:51:
         0b:06:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----