Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/uNgUxIzC6cAOzss9aO3xkBPEwCU.roa
File:                     uNgUxIzC6cAOzss9aO3xkBPEwCU.roa (raw, json)
Hash identifier:          8OIGHNAQqc7ul5kaFEd9oyGjshrtd1Vz+y7JDYhqPLs=
Subject key identifier:   B8:D8:14:C4:8C:C2:E9:C0:0E:CE:CB:3D:68:ED:F1:90:13:C4:C0:25
Certificate issuer:       /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial:       0186C25766E5A4E7AA8075BF0BC8C4728F77
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/uNgUxIzC6cAOzss9aO3xkBPEwCU.roa
Signing time:             Wed 08 Mar 2023 17:49:13 +0000
ROA not before:           Wed 08 Mar 2023 17:49:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51400
IP address blocks:        77.87.240.0/21 maxlen: 24
                          2001:67c:2190::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c2:57:66:e5:a4:e7:aa:80:75:bf:0b:c8:c4:72:8f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
        Validity
            Not Before: Mar  8 17:49:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8d814c48cc2e9c00ececb3d68edf19013c4c025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:ae:d3:14:50:c2:21:78:60:7d:e5:41:78:
                    5d:72:f9:15:94:67:5d:57:f1:0a:f3:46:60:c7:69:
                    a8:3e:5b:29:66:7a:68:64:81:12:69:85:43:38:01:
                    56:eb:4c:bb:ee:11:ef:d2:f2:0a:92:53:f7:07:8b:
                    38:aa:9b:33:c4:c4:36:a9:2a:8e:7f:b4:a5:7f:7c:
                    8d:60:16:37:c5:da:f8:b1:52:11:8e:15:d8:6f:7e:
                    9d:57:48:be:55:1d:21:a7:de:1c:50:cd:ee:c1:f6:
                    fe:86:6e:0e:24:34:ec:71:7d:b3:79:b7:df:57:9a:
                    ef:a5:86:d4:43:5f:3c:1b:c8:38:b1:a2:a4:c4:8f:
                    99:af:d9:17:f9:67:a6:9f:40:bf:69:6a:99:d6:5c:
                    62:a9:dc:17:62:ca:a7:4e:0c:c3:aa:ac:6b:d1:5c:
                    d6:f8:7d:66:db:5a:73:5c:20:d9:ed:46:78:c9:66:
                    3e:d9:f8:e4:b1:fc:17:ef:a2:cc:9a:bb:c9:5e:be:
                    4e:8c:d0:c5:f6:34:19:d5:fe:d8:7b:5d:e5:76:ea:
                    16:1a:ce:72:b7:93:74:24:2d:9d:c5:6b:4e:8e:6d:
                    bd:54:68:b9:9e:ac:c9:21:31:56:c2:ab:c3:70:07:
                    aa:0b:ff:6d:35:4b:cd:b1:13:d4:ad:8e:ec:98:a8:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:14:C4:8C:C2:E9:C0:0E:CE:CB:3D:68:ED:F1:90:13:C4:C0:25
            X509v3 Authority Key Identifier:
                keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/uNgUxIzC6cAOzss9aO3xkBPEwCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.240.0/21
                IPv6:
                  2001:67c:2190::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:95:ba:65:f8:08:47:3d:b1:e5:94:f6:7a:e2:b5:56:e7:ef:
         1a:a5:0d:43:4c:bb:95:ac:10:5c:f6:b5:6b:25:22:b5:1f:e7:
         9f:9c:00:a0:f6:c3:33:30:86:ee:eb:a5:09:9a:6a:94:5d:b6:
         12:db:75:d2:70:82:6a:b5:af:87:cf:9d:11:a0:1b:a5:62:b5:
         16:e7:46:43:b0:ed:43:87:54:cc:b2:00:58:81:86:b2:6b:e1:
         84:df:80:10:80:db:49:57:07:7b:81:de:10:ad:3d:e2:c5:91:
         84:f0:5c:d2:66:a2:1a:ec:64:cd:35:14:7d:e8:a2:c4:1e:60:
         01:b7:63:3a:10:86:f2:00:49:e0:76:47:fc:35:f9:3e:ab:cf:
         b8:cb:ea:ed:b2:e9:3d:fa:4f:c8:5a:11:e0:6a:66:bf:d2:16:
         69:60:70:a0:a0:64:4c:fc:d0:25:98:3e:6e:2f:7b:68:d5:bc:
         4f:df:d8:7d:8d:0e:2a:9c:1c:71:ea:11:63:0a:f1:16:c7:ef:
         27:8f:f1:bf:7d:09:bc:93:45:39:53:3a:fd:79:35:f0:7e:28:
         83:c8:26:fe:da:19:36:22:fb:01:7e:ec:de:60:f9:b4:87:7f:
         8a:c3:21:8b:de:a0:65:fd:70:86:46:b3:33:8d:65:d2:75:ea:
         e8:47:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----