Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/eZoBeqyAAk19iF3vZldmhFhxOEw.roa
File:                     eZoBeqyAAk19iF3vZldmhFhxOEw.roa (raw, json)
Hash identifier:          LhCkJBt9Yobwh+IskCqpDfwqQTJyS1Snj/TMES14LAA=
Subject key identifier:   79:9A:01:7A:AC:80:02:4D:7D:88:5D:EF:66:57:66:84:58:71:38:4C
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       01856DDD6962CF15470736855E67EBAADC03
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/eZoBeqyAAk19iF3vZldmhFhxOEw.roa
Signing time:             Sun 01 Jan 2023 15:05:05 +0000
ROA not before:           Sun 01 Jan 2023 15:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        93.177.84.0/22 maxlen: 32
                          2a0d:6440::/29 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:dd:69:62:cf:15:47:07:36:85:5e:67:eb:aa:dc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: Jan  1 15:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=799a017aac80024d7d885def665766845871384c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:92:14:ef:a7:e8:4e:64:a8:04:e3:a3:e4:
                    c6:f8:eb:74:5b:52:43:13:70:a1:6f:71:3f:91:06:
                    53:e0:b2:a4:a8:4e:a4:f4:8c:d6:fb:d2:b7:ed:bb:
                    aa:42:69:d7:71:41:60:d4:02:36:6f:52:3f:41:88:
                    cc:2c:2a:f2:cd:31:ef:5d:bf:47:a2:14:40:6a:f1:
                    02:92:a9:8b:50:5c:0b:32:d0:9d:b0:e9:b5:d2:a2:
                    4a:24:d5:03:ce:5e:a9:01:ab:68:36:d6:5c:ed:4b:
                    af:a2:b3:a3:19:51:9f:e1:f7:f2:de:9b:53:87:af:
                    68:d5:76:1f:6d:de:2b:8f:92:0d:b1:4d:e9:8f:f8:
                    f6:e6:98:c2:c3:a2:4f:ae:30:3b:34:61:d9:c1:31:
                    b3:7d:36:22:f1:0b:4e:08:cf:67:28:f0:0b:ab:95:
                    56:04:04:79:56:96:d3:d4:9c:f3:0e:03:4c:5b:ce:
                    e4:9c:df:7c:fc:e6:05:cb:17:1e:35:a2:a4:aa:e7:
                    ef:a2:06:fc:91:30:fa:d8:9a:7d:67:53:80:a4:67:
                    ee:53:a1:5b:35:67:4d:e0:cb:c5:8d:d0:49:ce:a4:
                    92:d6:d2:a3:6e:13:fe:38:3c:27:c4:13:41:94:f5:
                    4b:4a:60:f5:d3:7d:ca:01:cc:67:e2:2b:ce:47:f2:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:01:7A:AC:80:02:4D:7D:88:5D:EF:66:57:66:84:58:71:38:4C
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/eZoBeqyAAk19iF3vZldmhFhxOEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.84.0/22
                IPv6:
                  2a0d:6440::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:19:fd:93:45:ef:02:97:ad:ec:90:f2:52:e9:05:16:cb:
         f6:b0:1c:b8:ed:14:2d:3f:4a:e6:c2:68:56:67:fd:a6:aa:35:
         a3:8e:2b:1c:c2:ff:ff:e3:c1:9b:1c:54:14:d2:4f:d9:42:b5:
         d8:cc:eb:02:52:82:6f:3a:5d:33:d4:29:5e:ca:95:a7:cb:2c:
         e8:24:b5:66:52:2f:52:42:92:95:10:76:51:ef:e5:8a:ea:16:
         7b:81:99:f7:11:25:43:1d:55:1c:be:5d:f1:72:30:7d:ee:7b:
         23:c1:90:2a:9c:53:76:7d:20:00:4c:e6:fc:8d:e4:f5:65:e8:
         d5:3d:c2:e9:56:92:7a:e7:7b:71:88:b5:1b:8e:0f:61:66:ee:
         00:16:b1:a3:ec:7c:ca:88:f4:1a:f1:e4:65:94:0f:f3:69:40:
         96:8d:5d:8f:41:a6:31:7d:9a:11:1d:46:0b:c0:38:98:1a:32:
         14:69:04:49:02:34:21:ed:e6:ea:7f:8d:61:5f:cd:c3:ef:ed:
         70:05:a1:e5:d9:23:6a:42:32:4b:da:ac:ee:40:a8:00:e5:03:
         0e:40:46:e6:d1:96:16:ff:21:6c:30:25:2c:7e:5d:7b:d3:2e:
         78:c9:b5:32:64:58:a4:d4:51:ff:36:49:f3:60:74:19:e2:0a:
         a3:d4:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----