Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/Rwm_tS3foiRpdOskptnFWHwKZmU.roa
File:                     Rwm_tS3foiRpdOskptnFWHwKZmU.roa (raw, json)
Hash identifier:          UX7A14fKduNCRbizjZ3HhUX5ewEWrNfzEvOMsd3pZcM=
Subject key identifier:   47:09:BF:B5:2D:DF:A2:24:69:74:EB:24:A6:D9:C5:58:7C:0A:66:65
Certificate issuer:       /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial:       01856E1D2AD17F173E1D45A9AEC251DCEB99
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/Rwm_tS3foiRpdOskptnFWHwKZmU.roa
Signing time:             Sun 01 Jan 2023 16:14:43 +0000
ROA not before:           Sun 01 Jan 2023 16:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3303
IP address blocks:        91.223.121.0/24 maxlen: 24
                          2001:67c:2f70::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:1d:2a:d1:7f:17:3e:1d:45:a9:ae:c2:51:dc:eb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
        Validity
            Not Before: Jan  1 16:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4709bfb52ddfa2246974eb24a6d9c5587c0a6665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:11:96:d5:c1:ff:5a:ad:91:97:79:b1:dc:
                    74:12:2b:6b:72:a6:07:45:d5:3d:e5:0f:28:dc:9f:
                    25:13:01:12:27:ae:1d:0b:f8:c4:3c:b0:41:83:b4:
                    35:ea:9d:87:d9:95:79:fe:04:e0:8e:0e:ec:fa:0d:
                    08:64:4f:f7:22:91:22:7f:d1:e0:40:1d:6f:87:90:
                    51:55:56:fd:47:ba:07:52:80:f3:22:cf:a8:c7:d4:
                    18:cd:f1:ac:44:c8:d5:bc:a0:84:c7:e6:ae:d3:04:
                    19:cf:65:37:1d:ea:04:59:64:a9:e0:80:ab:ae:1c:
                    50:aa:30:b0:6e:bf:fb:e1:1c:81:de:dd:79:7c:0d:
                    43:79:73:77:94:f8:f6:52:74:7e:70:40:6d:87:85:
                    4c:9b:61:9b:ca:ad:71:50:01:d8:99:2a:36:21:9b:
                    cc:d2:a1:dc:ef:36:52:65:c9:81:51:fc:ec:f5:5d:
                    c8:4a:92:f2:0f:d2:81:63:01:bf:2b:d3:ff:44:be:
                    44:e1:36:b5:bf:c1:68:c3:db:c4:a1:f0:6e:37:eb:
                    de:1f:e9:6e:eb:f7:cc:1c:26:9f:95:88:f4:d0:ea:
                    82:32:1e:0a:38:33:49:d8:48:e5:b3:c1:c4:f7:e5:
                    39:57:e2:f9:7c:8d:58:a2:19:b4:18:9b:f1:82:f7:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:BF:B5:2D:DF:A2:24:69:74:EB:24:A6:D9:C5:58:7C:0A:66:65
            X509v3 Authority Key Identifier:
                keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/Rwm_tS3foiRpdOskptnFWHwKZmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.121.0/24
                IPv6:
                  2001:67c:2f70::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:4d:e8:cf:17:42:52:a0:9a:8c:e7:f7:f7:e8:8d:f5:dc:
         8f:9a:f3:96:1a:49:9b:aa:7a:9d:ec:57:2a:63:e7:ef:83:cf:
         24:b4:4f:06:14:2c:2f:22:ae:84:2d:ac:47:61:1b:4e:05:c0:
         38:dd:cd:7b:ef:a9:52:df:13:69:2c:78:c2:6a:9a:29:b1:63:
         d3:59:d6:ff:25:a7:a0:9f:66:fd:7f:00:2f:fa:8c:d5:d3:6a:
         f6:f7:17:bd:5f:8d:b1:6e:53:68:11:7a:6e:df:be:e5:39:c8:
         af:75:38:84:2b:15:c7:4b:61:ec:b4:52:cd:1f:54:76:70:1b:
         32:58:5f:ba:9a:f5:d1:85:54:e1:a2:2c:4b:d1:db:b0:70:35:
         99:52:ab:dd:30:bd:9e:f8:ff:fb:2c:7b:72:c2:3b:3d:18:fe:
         e2:dd:89:83:7b:d5:72:bc:98:c8:85:43:b9:18:fd:77:eb:5e:
         a9:f7:96:cf:d4:f7:bc:46:35:a1:cc:45:2a:a6:66:c4:70:1d:
         32:76:53:27:12:c3:c5:05:4b:99:b2:23:56:11:4c:e1:f5:aa:
         7c:17:35:6d:88:6f:e0:e8:4c:4f:ee:b2:d4:52:97:08:99:48:
         91:c9:a6:98:99:47:2e:48:55:35:c1:fb:c5:00:b9:61:a6:6c:
         05:95:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----