Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa
File:                     29DCjYRUYwjFihqzzu6CERGg2UY.roa (raw, json)
Hash identifier:          iizZCdiD8BsRvg47CS/7VF3Ni6ZWwMnRfnWe9SliKP4=
Subject key identifier:   DB:D0:C2:8D:84:54:63:08:C5:8A:1A:B3:CE:EE:82:11:11:A0:D9:46
Certificate issuer:       /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial:       018779E374A6446626707C6B4F4D5069402B
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa
Signing time:             Thu 13 Apr 2023 09:12:42 +0000
ROA not before:           Thu 13 Apr 2023 09:12:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.75.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:e3:74:a6:44:66:26:70:7c:6b:4f:4d:50:69:40:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80340326822530f943859c73e7df3d3655168b70
        Validity
            Not Before: Apr 13 09:12:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dbd0c28d84546308c58a1ab3ceee821111a0d946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:b3:d9:1b:79:bc:91:0f:3d:85:c8:ab:fd:
                    77:3b:c8:f1:98:b7:af:e2:71:f8:ef:7f:81:28:1a:
                    4a:fd:55:2c:1d:c7:ba:c9:f4:a6:3c:4e:ba:9a:2c:
                    c3:82:57:b3:3b:26:0c:32:25:c9:e4:3a:d4:0d:04:
                    19:63:3d:ec:0f:f1:01:67:8b:bc:81:2b:b0:ee:ff:
                    b3:33:10:9e:fd:0f:b8:35:b7:dd:4a:a9:be:3a:b3:
                    85:78:86:c8:9a:d5:99:13:39:c4:ad:0f:96:28:71:
                    32:b1:54:e4:4a:3d:4b:f0:32:c0:30:b6:8d:af:94:
                    aa:0b:90:c0:91:52:d8:c5:38:20:08:f4:4e:1e:1c:
                    92:bb:c4:99:1d:c3:c2:de:b8:62:4b:c3:d8:de:12:
                    d3:5e:b2:d6:b3:d4:f9:ce:21:a6:9c:76:80:d2:9d:
                    82:02:42:90:90:9c:dc:2c:79:fd:69:7d:8b:49:f7:
                    0a:0a:f0:4c:7c:d5:2d:37:36:31:e6:00:8f:96:81:
                    de:1c:41:fc:99:ff:8f:ab:d2:3c:5d:68:cc:03:cb:
                    96:1d:7a:69:31:6e:da:13:15:8b:ae:61:64:cc:4e:
                    24:72:ad:5b:db:46:d0:2a:71:25:01:99:85:fd:7c:
                    34:50:05:ea:22:ea:92:9e:f2:a0:42:8a:7e:64:ac:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:C2:8D:84:54:63:08:C5:8A:1A:B3:CE:EE:82:11:11:A0:D9:46
            X509v3 Authority Key Identifier:
                keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:d0:10:0f:5d:d4:a7:a2:26:2c:f8:7e:f9:d4:4c:9e:24:
         41:f3:16:f6:93:83:41:76:a4:73:d8:ed:5e:de:fa:7b:d8:4e:
         54:ec:f2:01:fe:ca:ec:4b:f6:73:bc:90:d6:69:d5:88:ad:9c:
         d1:3f:c7:3a:a6:f6:6d:f7:46:02:91:00:44:3c:f2:85:22:02:
         eb:6d:8e:6e:d3:5c:ad:6c:c5:0d:aa:d2:47:82:fb:bd:d6:41:
         c4:e1:4f:bc:ea:6e:eb:39:7f:e4:e6:d1:51:6e:d0:81:34:c5:
         2b:22:a8:f7:2d:d2:d8:ed:8c:c1:e6:db:d1:38:9f:c9:08:b8:
         53:56:16:63:c1:18:85:ae:42:16:eb:af:a3:80:f5:b1:ec:47:
         41:08:0d:9f:ae:0a:76:43:21:e3:84:e0:58:71:62:55:bc:28:
         2a:69:51:9b:d0:2b:b0:bf:96:53:fc:3d:5d:8a:5e:4d:f5:32:
         73:e8:87:af:e7:90:4c:09:4e:da:41:4d:a1:74:04:d3:ae:30:
         2a:cc:72:f0:a5:b3:0f:99:f6:3d:59:9e:8a:01:19:3f:b3:92:
         56:93:d3:95:2a:9e:8f:10:2a:7e:2e:cf:71:aa:da:b1:1b:59:
         c2:67:16:ed:29:51:c4:c5:5a:d4:00:89:a3:d7:36:46:4d:5c:
         99:5f:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----