Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/SoSru9mblDVb0Lm98GpKhNpW8Iw.roa
File:                     SoSru9mblDVb0Lm98GpKhNpW8Iw.roa (raw, json)
Hash identifier:          cnSYnx2ouEjoXexYvd+mk7jTkQ29G1lm4dPdgL/FgJI=
Subject key identifier:   4A:84:AB:BB:D9:9B:94:35:5B:D0:B9:BD:F0:6A:4A:84:DA:56:F0:8C
Certificate issuer:       /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial:       018723A0D9913F365F896B53EEDBB23DF75E
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/SoSru9mblDVb0Lm98GpKhNpW8Iw.roa
Signing time:             Mon 27 Mar 2023 15:12:36 +0000
ROA not before:           Mon 27 Mar 2023 15:12:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        77.75.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:23:a0:d9:91:3f:36:5f:89:6b:53:ee:db:b2:3d:f7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80340326822530f943859c73e7df3d3655168b70
        Validity
            Not Before: Mar 27 15:12:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a84abbbd99b94355bd0b9bdf06a4a84da56f08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:a4:0c:ca:2c:f6:99:3c:f4:ba:5c:4d:f3:
                    95:8e:0e:0b:61:af:b6:f7:51:4a:89:69:ac:19:73:
                    7d:54:08:b3:c6:03:4c:6d:81:09:b0:6a:60:53:8a:
                    ec:45:6f:2c:5d:4d:eb:70:7b:29:21:99:cf:8b:84:
                    bf:f4:ab:dc:aa:81:73:82:f9:f5:7f:60:32:24:8d:
                    c8:71:64:b2:2d:d9:98:9d:f9:c7:2c:38:42:80:7a:
                    14:66:fa:bb:b9:f0:04:0a:20:fe:7c:f9:89:13:d6:
                    98:4b:64:5a:cc:c4:b3:17:da:67:68:b4:7c:c7:db:
                    14:bf:96:a2:0d:7b:47:b8:f5:3b:82:64:1d:f8:78:
                    0b:1f:59:55:9c:30:90:17:4c:cf:4e:d9:4d:43:96:
                    c5:ca:b1:7f:49:98:95:34:81:c9:ce:cb:92:ea:4e:
                    dd:44:ea:9b:30:37:84:51:8f:3a:d3:25:75:ff:81:
                    5f:82:2d:d3:ca:fa:5e:54:ce:26:7c:9d:ba:cb:6f:
                    e8:fd:bb:35:e2:b5:05:cb:f4:d6:2f:bf:14:12:b5:
                    7b:fa:5e:6e:8c:22:a9:a5:80:67:fb:c3:21:77:0e:
                    92:9c:b3:03:d4:e8:2b:28:5c:23:33:b5:39:fb:05:
                    38:99:40:39:2c:52:64:8c:0e:c8:4b:2f:26:c4:11:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:84:AB:BB:D9:9B:94:35:5B:D0:B9:BD:F0:6A:4A:84:DA:56:F0:8C
            X509v3 Authority Key Identifier:
                keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/SoSru9mblDVb0Lm98GpKhNpW8Iw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:e7:03:f0:36:a1:08:8e:fb:ac:87:78:1b:64:16:f2:a6:bc:
         43:a4:b7:0b:df:87:d5:67:11:93:fa:e5:bf:3b:f9:e2:05:20:
         3a:19:ff:f3:ed:10:63:9c:71:61:38:c5:b8:a5:d4:1c:84:ca:
         5e:4f:31:66:c3:64:6a:d1:62:ce:b8:02:d9:77:9b:48:32:bd:
         44:b2:99:a9:13:b8:29:be:f4:49:36:90:bc:79:41:50:73:70:
         0d:40:3d:1e:d5:35:ac:4b:28:c1:68:38:10:e6:8b:31:7a:a6:
         6b:f5:1f:5d:0a:79:c6:aa:55:48:c0:42:f8:a5:eb:92:0c:23:
         5c:cd:22:1a:d8:39:1a:7c:50:11:a2:b6:42:af:2c:9c:7b:52:
         22:50:17:c9:a6:f7:10:86:fb:e0:e6:dd:4f:93:b3:5c:96:b1:
         75:84:b4:03:43:ab:a7:19:85:53:63:9a:68:01:b3:ab:c2:fd:
         b5:1e:fa:44:95:8c:05:6a:e2:d2:5e:38:1e:82:95:17:6c:2b:
         b8:fc:88:01:46:92:7b:6c:35:80:4e:b0:67:e5:60:26:6b:d8:
         9d:54:dd:a8:af:e8:74:9a:5d:33:41:72:a5:4d:48:4f:b9:2c:
         27:b4:5b:26:b9:6a:f3:f9:d8:3d:be:6b:e6:ac:81:cc:7f:5c:
         52:74:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----