Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa
File:                     gVkoostddTcIbJpGaZSSJy6eoMs.roa (raw, json)
Hash identifier:          tLdsv032zwBN3SG+EOm1yO9b3nUVIa+qdYtUAzEB2D0=
Subject key identifier:   81:59:28:A2:CB:5D:75:37:08:6C:9A:46:69:94:92:27:2E:9E:A0:CB
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       018CC26D61C0EDBEE6CBB456BB634FBCB0FA
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa
Signing time:             Mon 01 Jan 2024 00:29:57 +0000
ROA not before:           Mon 01 Jan 2024 00:29:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35758
IP address blocks:        147.78.2.0/24 maxlen: 24
                          2a11:840:30::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 21:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:61:c0:ed:be:e6:cb:b4:56:bb:63:4f:bc:b0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Jan  1 00:29:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=815928a2cb5d7537086c9a46699492272e9ea0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:67:de:ff:c6:09:67:4d:ee:7f:ba:d9:ad:
                    fc:40:7a:f1:09:e6:0c:2a:cc:f9:c1:33:6e:5e:89:
                    a0:dc:d2:f1:cd:ea:a4:7f:91:5f:68:e4:cc:c0:97:
                    be:9c:e8:9c:a5:57:73:3e:fd:19:b0:c6:17:30:b9:
                    13:f5:6c:ff:f3:b0:96:fa:e3:62:41:af:b7:f9:02:
                    bb:c6:64:79:81:19:d7:a3:30:4f:d2:b6:23:77:ef:
                    45:50:2a:9c:39:75:c6:01:f2:2e:d4:d6:95:6c:98:
                    0f:32:be:47:2c:38:da:8b:4b:14:46:ed:c5:b5:dd:
                    20:6e:19:4c:39:c1:ad:0d:d3:ee:1e:a3:ac:8d:a5:
                    d7:ff:d7:41:b8:60:54:40:d5:fb:df:30:b7:37:d8:
                    2b:53:08:87:18:21:f2:54:43:aa:49:f0:44:32:74:
                    0c:e8:b1:e2:93:b4:82:55:1a:16:e9:90:35:90:13:
                    0a:15:90:66:54:c7:a7:86:18:a0:87:12:43:44:79:
                    e3:a3:ba:93:4a:f3:b8:4b:46:a0:00:7d:e9:ad:5f:
                    90:4a:22:81:54:18:62:8e:e5:71:c2:57:0b:76:2c:
                    57:7d:fe:a5:f3:12:fe:c1:f8:51:40:da:ac:c9:92:
                    0b:50:1c:3e:bc:e8:65:80:a5:f0:2a:85:6e:b1:a2:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:59:28:A2:CB:5D:75:37:08:6C:9A:46:69:94:92:27:2E:9E:A0:CB
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.2.0/24
                IPv6:
                  2a11:840:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:f6:78:97:1b:90:4b:2b:75:7d:f9:24:02:4f:66:22:68:
         7d:06:9d:96:15:98:15:07:ce:d4:53:6e:e9:2b:ba:2b:04:7d:
         dd:00:64:8f:e0:2c:4b:f9:21:40:04:ab:4d:00:32:66:5c:90:
         92:b3:54:47:a5:a1:51:1a:64:a7:18:d4:f8:42:1c:48:3b:06:
         36:cc:b2:26:b2:1f:c1:d8:79:1a:77:46:2e:ce:e6:12:bb:f7:
         23:e2:8b:06:2d:c6:ff:bc:d9:b0:28:aa:ae:6a:dc:b8:5f:37:
         23:02:02:42:e1:e9:3b:ee:47:65:e5:d1:7b:d9:d9:2f:cb:cd:
         7b:ff:e2:f7:d9:03:b3:ef:c1:a8:c7:c8:c2:57:95:65:27:b6:
         66:b7:2f:d8:14:f0:37:81:fa:5d:2e:a8:bb:37:59:cc:15:d4:
         80:b0:3d:8d:2f:f4:15:bc:bf:fa:7e:06:8c:3e:29:4a:03:0c:
         74:9c:6c:ff:51:f9:55:87:72:4a:1c:5d:d9:76:a8:a9:4c:7b:
         81:8a:41:40:9a:2b:38:26:6e:ab:35:5d:b0:d7:2a:a0:61:3d:
         cb:68:b7:ec:49:c4:34:24:56:ef:ac:aa:19:ad:45:4c:14:1c:
         6a:5e:48:4f:4c:6e:49:a4:14:35:54:26:21:bd:55:25:78:2d:
         0b:d7:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----