Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/ghDCc4T8YfY9M9oyOZ-Ul1vjdCE.roa
File:                     ghDCc4T8YfY9M9oyOZ-Ul1vjdCE.roa (raw, json)
Hash identifier:          5rgCF8+0BSJXca9Tjrm/M3moAMrvo5kDKi3v3X8UIgk=
Subject key identifier:   82:10:C2:73:84:FC:61:F6:3D:33:DA:32:39:9F:94:97:5B:E3:74:21
Certificate issuer:       /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial:       0185723A288AA3EB87DF39C4CFAC1A4B412F
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/ghDCc4T8YfY9M9oyOZ-Ul1vjdCE.roa
Signing time:             Mon 02 Jan 2023 11:24:52 +0000
ROA not before:           Mon 02 Jan 2023 11:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44066
IP address blocks:        37.17.224.0/21 maxlen: 21
                          2a00:5fc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:28:8a:a3:eb:87:df:39:c4:cf:ac:1a:4b:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
        Validity
            Not Before: Jan  2 11:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8210c27384fc61f63d33da32399f94975be37421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:87:2d:23:2c:7a:7f:cc:33:8e:5d:f2:4f:
                    27:51:f6:be:f7:17:73:43:a1:2e:3e:c0:32:37:a0:
                    98:69:ab:43:8d:1f:74:fe:2b:41:33:da:db:6e:f4:
                    31:76:86:69:2c:a1:14:97:67:a9:9c:d6:5e:e6:67:
                    fe:ce:18:aa:28:1e:51:f0:14:fe:f5:06:96:47:9c:
                    fd:b4:d1:13:63:88:64:1f:c2:9f:1b:c0:0c:84:65:
                    79:06:32:fd:b3:86:41:1f:b8:58:64:30:f2:72:e1:
                    bd:e2:50:91:e5:9d:42:21:14:fb:cb:7c:21:14:b3:
                    55:40:40:a7:ab:c5:a5:a2:cc:24:40:3a:c0:e0:ee:
                    19:d3:9d:6e:71:b8:f5:f6:31:84:6e:d0:be:60:13:
                    9d:7d:50:18:85:a7:99:20:fa:a5:bf:dd:81:52:c9:
                    28:ba:ed:59:f7:4b:a3:7c:cc:2c:b7:74:93:ce:52:
                    61:79:a2:82:54:ff:fc:a9:7a:73:03:dd:e5:dc:88:
                    4a:68:26:2e:61:fd:25:59:4e:2c:bc:e3:cc:76:06:
                    f5:c6:2a:e0:a1:8c:55:36:49:45:6f:e8:7c:c0:8b:
                    37:ee:87:af:f7:70:b0:bf:0f:e8:44:ca:d9:0d:b6:
                    60:1f:08:00:26:b7:c9:fa:a2:04:83:9d:0e:c7:f0:
                    4b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:C2:73:84:FC:61:F6:3D:33:DA:32:39:9F:94:97:5B:E3:74:21
            X509v3 Authority Key Identifier:
                keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/ghDCc4T8YfY9M9oyOZ-Ul1vjdCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.17.224.0/21
                IPv6:
                  2a00:5fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:99:37:65:34:a1:a2:e1:cd:2c:51:ca:bf:68:2b:6c:6c:
         3e:7d:b9:1c:d3:62:10:96:f6:c3:31:d5:ee:23:27:0f:b6:1a:
         76:98:0e:86:43:25:74:a6:59:cb:04:28:0b:a3:53:1c:82:13:
         e1:61:82:dd:29:6c:c5:a6:2c:20:9f:17:d1:4e:49:90:7c:dc:
         30:ec:1c:de:5e:6a:98:8e:38:33:7b:0e:a6:f5:50:ab:bc:76:
         12:26:61:d0:72:c0:35:e5:a4:04:93:d0:48:57:aa:b5:02:0a:
         c9:2d:83:d9:00:7e:d0:f0:de:3b:cf:38:5d:32:d4:64:69:24:
         e1:06:ae:29:1c:ec:04:91:f8:00:e2:5d:66:22:d5:28:e2:8f:
         cf:41:41:ef:97:f0:0d:23:09:cc:c3:70:bc:89:3e:64:04:bb:
         d9:c6:37:e2:e5:6d:49:6f:52:19:07:06:f3:35:02:70:51:7a:
         92:89:ee:0a:1e:9a:2e:e7:8b:f8:d4:cf:62:b0:5f:61:62:39:
         c0:d4:8e:c2:7f:d5:2f:b8:db:1a:14:8e:c2:65:3e:12:83:34:
         84:64:9e:31:82:04:d2:6c:6f:26:4b:8b:31:38:e2:ca:99:6b:
         8b:49:35:d4:14:c8:f9:ba:26:85:9d:e5:2d:aa:f9:3e:ea:51:
         d6:41:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----