Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/d1qj3xnICkp38C7MdoJbrh4A5tM.roa
File:                     d1qj3xnICkp38C7MdoJbrh4A5tM.roa (raw, json)
Hash identifier:          fgdxizC2ASDOn5jQ/6Pu01u2f8v9zBoQRFDCLp8w5Zs=
Subject key identifier:   77:5A:A3:DF:19:C8:0A:4A:77:F0:2E:CC:76:82:5B:AE:1E:00:E6:D3
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       01859382D51729076F96CC8769AFDCD2340E
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/d1qj3xnICkp38C7MdoJbrh4A5tM.roa
Signing time:             Sun 08 Jan 2023 22:31:43 +0000
ROA not before:           Sun 08 Jan 2023 22:31:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48927
IP address blocks:        178.215.228.0/22 maxlen: 24
                          2a0d:5440::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:93:82:d5:17:29:07:6f:96:cc:87:69:af:dc:d2:34:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Jan  8 22:31:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=775aa3df19c80a4a77f02ecc76825bae1e00e6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:77:06:3c:b5:5d:bf:7e:68:0e:5f:63:b3:
                    4e:66:c7:d2:d1:8e:79:29:79:28:4a:dd:c5:4d:2a:
                    62:9c:d5:e8:98:a2:25:09:66:d6:4c:3c:2a:ac:aa:
                    9b:a3:59:3e:62:47:d5:a3:63:eb:a4:07:d3:d0:f0:
                    74:61:bd:ab:37:3f:00:f1:53:49:42:2b:24:c7:76:
                    dd:56:3b:13:84:7e:8b:2e:71:6d:6e:7d:e3:0c:a3:
                    9e:8e:fa:36:62:4f:65:d0:8c:68:af:74:e6:a9:db:
                    bb:68:96:57:db:a5:3a:80:53:10:18:07:1f:0f:1d:
                    2d:93:97:3b:99:73:07:7f:bc:70:8d:2c:05:38:ac:
                    01:3f:db:fa:5e:95:17:dd:30:d5:62:21:70:05:f4:
                    ed:70:57:72:c0:4f:9d:7d:95:89:63:b1:32:bd:cc:
                    c1:51:d7:61:37:38:6f:d0:9a:09:ba:74:c3:42:db:
                    65:fb:69:8c:d2:ef:30:b8:d9:e9:dd:b3:cf:c7:07:
                    07:6c:11:de:b5:20:27:b2:9c:c1:83:a2:97:07:1d:
                    de:ae:44:2e:a1:9d:2e:19:45:ed:3b:3d:38:a0:a4:
                    6e:7d:cd:29:7e:4b:10:cf:9f:a3:20:b1:13:55:23:
                    f9:aa:8a:17:7b:b6:9b:d5:f1:83:03:a0:2a:a7:2c:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:A3:DF:19:C8:0A:4A:77:F0:2E:CC:76:82:5B:AE:1E:00:E6:D3
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/d1qj3xnICkp38C7MdoJbrh4A5tM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.215.228.0/22
                IPv6:
                  2a0d:5440::/29

    Signature Algorithm: sha256WithRSAEncryption
         c5:2a:06:69:d2:69:e3:98:a8:17:46:9d:5d:f2:2a:3a:0d:8c:
         0a:a3:f6:c3:6a:dd:46:c6:e5:b3:2c:04:ec:f8:10:9e:ee:42:
         26:97:c4:71:da:dc:8a:b9:02:d2:33:cb:a4:af:34:39:5b:a5:
         45:26:79:c6:44:9a:f4:ab:52:02:50:0e:0e:62:fd:19:98:c7:
         af:1d:2c:21:d1:c5:4f:ca:f3:ab:62:4a:15:95:5d:06:af:dc:
         52:f6:bb:ea:5c:e3:61:60:5b:59:3c:8d:e6:cc:fa:42:cd:3c:
         13:db:65:e9:27:9e:ab:ae:6d:b9:e2:24:f0:03:8a:d9:6c:d8:
         6b:02:43:18:c6:09:38:61:b8:c4:d0:30:ec:9c:d7:75:92:8d:
         e2:b5:6c:22:8e:7d:e4:0b:76:1f:25:7f:a9:78:38:9f:68:db:
         86:f6:f2:94:75:b4:f7:73:a9:fc:71:0e:fb:46:aa:dd:94:29:
         00:c9:af:90:0d:1b:19:a5:0e:8b:ee:e2:06:8a:04:fc:d9:cc:
         01:2d:04:de:05:77:fd:23:4c:cf:f2:6f:e5:4e:06:18:25:a0:
         51:b4:2b:69:dc:31:00:d6:53:17:73:42:5c:ea:d9:dd:bf:5d:
         de:04:de:7e:3d:d0:94:dd:d9:8b:f8:bc:17:28:af:32:03:e6:
         bb:d3:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----