Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/b28HUNFgUXwyofSUVMa7Wshf0xQ.roa
File:                     b28HUNFgUXwyofSUVMa7Wshf0xQ.roa (raw, json)
Hash identifier:          Xy71pxRm02ziHBxfE3GrUVzBbOGrrTGA3dkN4wrGdJE=
Subject key identifier:   6F:6F:07:50:D1:60:51:7C:32:A1:F4:94:54:C6:BB:5A:C8:5F:D3:14
Certificate issuer:       /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial:       0187B7C6A3E718F1C67B6CDF5AE69E79DA01
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/b28HUNFgUXwyofSUVMa7Wshf0xQ.roa
Signing time:             Tue 25 Apr 2023 09:37:41 +0000
ROA not before:           Tue 25 Apr 2023 09:37:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.216.13.0/24 maxlen: 24
                          2a13:6300::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:c6:a3:e7:18:f1:c6:7b:6c:df:5a:e6:9e:79:da:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
        Validity
            Not Before: Apr 25 09:37:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f6f0750d160517c32a1f49454c6bb5ac85fd314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:cb:0d:d7:c7:ef:12:a6:02:df:58:f2:8b:
                    dc:fe:f3:ce:70:c1:dc:c9:67:f3:02:27:69:b5:ca:
                    49:fe:c1:77:37:d6:70:83:f7:78:51:b6:5f:da:ac:
                    e8:66:0a:5f:91:22:f8:0d:5b:6c:53:6b:44:93:db:
                    1d:ea:96:f2:28:65:a2:36:bd:aa:f7:a7:13:0c:11:
                    a1:fb:a9:bb:1f:dc:35:e9:7c:f0:93:90:77:9a:42:
                    c9:1e:bf:36:e0:ce:d0:d3:53:4b:d5:64:ce:89:cc:
                    ea:99:07:8f:c9:7b:f5:17:28:eb:04:c4:97:ae:c3:
                    62:8e:03:db:66:8e:a0:36:30:be:78:35:b1:ca:92:
                    fb:84:38:b2:06:64:20:39:83:79:1f:4e:1d:80:89:
                    24:81:32:87:de:17:5f:d0:07:3b:9c:24:59:58:78:
                    39:82:a7:f1:d4:89:c6:af:0a:7d:bb:eb:ec:e7:35:
                    1b:89:e1:2a:4c:2d:14:e7:60:38:3a:19:47:ac:63:
                    3e:c9:44:c2:3f:f6:2a:26:45:f3:6a:02:c2:1f:10:
                    32:a1:55:ce:6e:71:ff:da:9e:49:d4:0f:88:79:1a:
                    f1:01:40:5e:61:95:4d:56:b5:44:fd:e7:f8:fc:30:
                    d6:6b:36:8b:42:2c:77:44:e7:57:9b:a4:c8:61:90:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6F:07:50:D1:60:51:7C:32:A1:F4:94:54:C6:BB:5A:C8:5F:D3:14
            X509v3 Authority Key Identifier:
                keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/b28HUNFgUXwyofSUVMa7Wshf0xQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.13.0/24
                IPv6:
                  2a13:6300::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:8e:fe:8a:6d:ac:9c:e2:19:35:36:8a:1a:e1:40:e1:13:
         c7:eb:27:34:8d:6b:2d:09:13:64:0f:6d:16:72:97:d9:7b:24:
         5c:bd:70:8c:9e:d5:f6:e7:91:93:56:09:5e:87:e6:14:2f:cd:
         a4:09:13:cf:8b:6a:2b:40:48:36:cd:f6:06:a7:2c:f3:6e:6e:
         27:df:d4:23:28:82:f1:d2:d4:26:61:77:4b:e8:57:50:68:24:
         13:bd:6d:36:17:72:9e:0a:5e:7f:ba:65:36:f2:8b:aa:3a:d1:
         59:be:be:fa:ef:0d:6b:53:35:d8:de:57:73:f3:3d:9f:00:f7:
         e6:10:e6:5a:6d:1c:6c:a8:a4:77:b9:48:52:20:22:23:e5:31:
         9b:d7:02:d1:41:52:75:1f:b0:39:71:0d:f5:90:ba:8b:e5:53:
         a9:c4:d0:dd:34:c5:0c:f5:7e:32:28:fa:87:ef:a7:f8:e4:a3:
         40:7f:09:10:43:a5:75:4a:64:0e:56:23:cd:c5:05:33:4f:f1:
         93:89:c8:95:85:e9:98:8d:27:87:63:f7:53:d8:ea:e5:e7:bf:
         76:26:5b:2b:94:52:47:61:58:1a:31:02:86:da:a7:57:ea:35:
         9b:6d:2e:f6:b1:02:b7:42:2a:7d:63:e1:41:ad:3b:07:c4:60:
         2b:39:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----