Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/N8fD_dJKsnZoPN0tF2J8NsSPea4.roa
File:                     N8fD_dJKsnZoPN0tF2J8NsSPea4.roa (raw, json)
Hash identifier:          i3mlUfwrahq++ommCjzVKwWMt+gb15bW9e6acoheOSs=
Subject key identifier:   37:C7:C3:FD:D2:4A:B2:76:68:3C:DD:2D:17:62:7C:36:C4:8F:79:AE
Certificate issuer:       /CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
Certificate serial:       018570FB9F95B54ECB24A8C9B5E45EDE21BC
Authority key identifier: 07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/N8fD_dJKsnZoPN0tF2J8NsSPea4.roa
Signing time:             Mon 02 Jan 2023 05:36:56 +0000
ROA not before:           Mon 02 Jan 2023 05:36:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     28788
IP address blocks:        185.84.196.0/22 maxlen: 24
                          2a03:71e0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:9f:95:b5:4e:cb:24:a8:c9:b5:e4:5e:de:21:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
        Validity
            Not Before: Jan  2 05:36:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37c7c3fdd24ab276683cdd2d17627c36c48f79ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:78:fb:94:2d:22:ea:27:6b:60:67:05:3c:
                    e9:5c:46:ea:aa:f5:5d:de:c1:b1:2f:55:d2:a9:ce:
                    7f:30:9f:ff:81:92:ff:01:7a:ec:61:2e:6d:d2:01:
                    da:c3:5a:32:83:ce:cb:32:e3:d0:f1:01:38:3f:d8:
                    e8:29:b2:ff:45:d4:96:1c:52:dc:49:53:f2:a6:ee:
                    33:a0:c1:43:75:1e:f4:3b:f2:a9:43:01:4a:28:77:
                    66:a7:57:d9:85:41:90:8c:ea:df:65:19:55:9e:6b:
                    4b:6c:93:a9:b7:d8:17:6e:c6:5f:1d:d0:f0:1c:45:
                    a8:fe:b9:6c:42:94:55:76:30:bb:22:2e:e9:64:dc:
                    37:aa:a8:b0:8d:a1:e6:7c:8a:86:77:b7:07:5f:cb:
                    f6:06:94:01:1b:cf:b2:e1:e4:c7:3e:2e:64:b7:df:
                    3e:b7:f8:5d:3a:eb:bf:05:1e:b6:b0:88:94:18:47:
                    85:38:bc:bf:07:18:79:6b:a9:f8:86:6e:44:24:ed:
                    8c:ac:55:6e:6f:a7:2e:ee:25:76:1c:2e:96:74:b2:
                    6f:db:e8:49:21:2b:50:be:0d:be:93:d8:0f:ef:6f:
                    96:1a:de:72:31:04:87:45:fc:fc:09:dc:f3:aa:54:
                    63:f7:36:89:e5:49:32:ae:c6:dd:b6:9c:3e:5e:e1:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C7:C3:FD:D2:4A:B2:76:68:3C:DD:2D:17:62:7C:36:C4:8F:79:AE
            X509v3 Authority Key Identifier:
                keyid:07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/N8fD_dJKsnZoPN0tF2J8NsSPea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.196.0/22
                IPv6:
                  2a03:71e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:ac:1d:1f:7b:85:80:26:aa:5a:3f:53:65:6d:73:d2:86:90:
         44:ec:01:ab:6a:c2:2b:1d:03:5f:85:4f:4f:4c:5d:a5:e7:c0:
         71:db:cb:96:1d:e0:2e:d1:5e:72:37:9c:b9:4c:c4:e5:bf:bd:
         1e:4b:e6:21:8b:41:88:52:69:f0:aa:a8:f5:71:cc:f7:f4:1d:
         d7:7b:11:88:b3:3c:e6:eb:ee:6b:98:39:37:7e:8d:72:b5:67:
         93:84:b7:c4:99:74:b6:1c:8f:5d:dc:1e:1b:55:e2:19:0a:1f:
         da:45:8d:0c:5d:ea:81:91:13:d6:2f:d9:aa:f9:87:9b:23:cc:
         0e:98:ca:9a:4a:af:51:de:81:08:96:9e:bf:b2:e7:e2:1a:a9:
         b0:3e:85:93:26:6d:56:af:73:13:8a:73:68:d2:82:c9:99:31:
         66:fa:4f:92:71:7a:af:e9:21:2b:e6:05:4f:24:65:31:6e:b4:
         d3:c5:5e:77:7e:10:66:80:b9:f9:95:74:e0:6a:c5:ad:98:55:
         14:04:5c:07:56:aa:ae:08:f8:b5:a5:5f:56:17:57:ac:c4:68:
         4c:73:f2:80:0f:e8:d4:94:55:87:42:44:e8:a9:89:5f:75:bf:
         91:18:b2:76:3e:39:ab:3b:59:2e:d6:4b:e1:68:a4:5c:6d:9c:
         8f:b0:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----