Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/7dTRjbMkW1ef_lcWW43kWP-LiP8.roa
File:                     7dTRjbMkW1ef_lcWW43kWP-LiP8.roa (raw, json)
Hash identifier:          HlQD2HomZWaXwUdp81OLO+hKOIGRvg4i8Y8q55R4PA8=
Subject key identifier:   ED:D4:D1:8D:B3:24:5B:57:9F:FE:57:16:5B:8D:E4:58:FF:8B:88:FF
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       018BDE366BE53298447B3D365C1F7FA0DD7E
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/7dTRjbMkW1ef_lcWW43kWP-LiP8.roa
Signing time:             Fri 17 Nov 2023 16:56:30 +0000
ROA not before:           Fri 17 Nov 2023 16:56:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22781
IP address blocks:        185.155.54.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:de:36:6b:e5:32:98:44:7b:3d:36:5c:1f:7f:a0:dd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Nov 17 16:56:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edd4d18db3245b579ffe57165b8de458ff8b88ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:29:67:82:3f:d0:88:7b:12:67:63:8b:ae:
                    44:05:9d:a2:78:61:49:9d:11:3a:88:a6:94:49:06:
                    25:62:cd:63:d6:fd:b0:b7:45:f9:e5:69:a4:88:8c:
                    7a:0f:bf:97:71:f9:b9:1a:2a:67:4b:41:7f:86:6d:
                    86:0b:22:3a:76:f1:d6:7d:6f:be:bf:77:2a:31:1f:
                    99:28:59:8a:31:29:f1:df:f2:b8:bb:6b:e1:0c:c9:
                    af:4c:82:9f:d2:c4:8a:ba:e9:05:39:f4:a3:80:4d:
                    01:73:17:76:1d:8f:1e:76:cf:11:1c:e6:19:3b:b5:
                    1c:73:69:a5:d4:ca:2b:be:b5:1e:75:83:eb:47:dd:
                    3e:9d:4b:11:09:5c:b5:e5:6a:a8:2c:d7:28:3b:f6:
                    17:8c:92:db:30:85:4d:17:f6:1e:2e:a9:dc:df:df:
                    e4:ec:50:80:c1:82:5d:3d:b3:5e:7d:c8:03:36:fe:
                    c1:8d:e5:11:57:e0:30:36:68:33:1e:d4:75:69:82:
                    f7:2f:7c:23:e5:33:ff:c7:c7:42:f7:21:b7:b0:ad:
                    35:01:ac:83:c8:78:cb:42:9c:0b:2e:e9:af:82:4e:
                    1d:c6:3d:5d:44:67:54:fa:81:8f:d1:ae:69:b0:37:
                    2d:b1:0a:c5:fe:76:8f:b4:73:d3:61:0a:dd:ae:53:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:D1:8D:B3:24:5B:57:9F:FE:57:16:5B:8D:E4:58:FF:8B:88:FF
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/7dTRjbMkW1ef_lcWW43kWP-LiP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:50:ef:79:ff:54:8c:4a:c0:80:c0:a9:1f:c7:88:48:e8:
         ef:94:94:63:00:e5:29:9a:3a:72:e9:18:38:fe:1a:fa:e7:fe:
         85:8c:0c:8a:6c:2d:cc:be:d6:14:5e:f8:7f:0d:08:62:e6:40:
         34:27:5d:96:5d:7f:bc:13:63:30:ea:29:a5:34:ca:df:58:db:
         09:ff:eb:17:7c:87:51:5c:01:bb:0c:96:fc:eb:08:99:89:81:
         64:dd:b7:7f:46:a0:f8:0f:e5:32:a2:c2:6c:3a:a8:99:bc:53:
         1e:4a:36:9e:51:93:d6:1c:f7:3b:71:21:ee:12:69:98:68:a5:
         57:5a:38:38:c7:7f:3e:90:07:2b:45:43:47:5f:36:32:7a:a5:
         2c:f8:60:c8:4b:ed:6c:00:95:fd:84:d9:54:5c:ec:f8:3e:89:
         5b:59:d6:18:f7:ac:af:ab:bb:de:38:67:8d:b2:96:92:56:76:
         0a:8f:4c:85:90:aa:03:4f:95:ab:1a:20:ac:5d:b5:61:21:3b:
         20:00:c8:33:55:c5:17:fa:80:54:6a:a6:46:7b:ca:0b:be:52:
         b0:31:a9:70:6b:cc:e1:51:7a:6f:9f:89:fb:c6:b1:a0:7a:f4:
         1f:67:7f:ce:ff:d3:fe:0b:0b:29:4d:52:46:42:cb:02:e3:8a:
         c9:ec:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----