Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ocj88hUy22joAmGBLsf4LA4K01c.roa
File:                     ocj88hUy22joAmGBLsf4LA4K01c.roa (raw, json)
Hash identifier:          OIDSHEBfFskp+on+6ShMvDpc06yDAXdFLJ23Kl/Cq9o=
Subject key identifier:   A1:C8:FC:F2:15:32:DB:68:E8:02:61:81:2E:C7:F8:2C:0E:0A:D3:57
Certificate issuer:       /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial:       018571276BA14020A533109FFDDF4B468E55
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ocj88hUy22joAmGBLsf4LA4K01c.roa
Signing time:             Mon 02 Jan 2023 06:24:46 +0000
ROA not before:           Mon 02 Jan 2023 06:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        91.247.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:6b:a1:40:20:a5:33:10:9f:fd:df:4b:46:8e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
        Validity
            Not Before: Jan  2 06:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1c8fcf21532db68e80261812ec7f82c0e0ad357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:10:c8:8b:26:0b:ad:57:bb:dc:b0:d6:b0:
                    3b:23:a3:21:41:8b:46:99:ae:33:de:6e:bc:30:46:
                    a9:10:73:74:50:de:1d:b4:67:11:91:f3:83:65:c8:
                    8a:e3:f2:1c:b6:fb:52:01:d1:69:a6:1a:0a:fc:eb:
                    51:48:a1:05:a1:c5:b6:8f:cd:27:a0:38:c0:37:84:
                    0f:07:58:60:7f:46:65:31:c0:5a:08:b4:f1:b5:d1:
                    24:ce:96:9c:ed:de:e1:fa:8a:70:12:e8:bb:f1:4e:
                    2d:67:26:a4:f7:ee:de:8e:6a:93:99:cc:3b:a2:ad:
                    52:57:fd:34:30:f6:85:5a:63:49:1b:ec:cd:9c:53:
                    c8:f7:01:cb:b9:e1:51:3c:bd:b9:9a:bb:35:a0:85:
                    16:a4:2f:8b:3c:8c:41:b3:69:b1:be:4f:cb:29:a6:
                    92:f8:aa:c5:88:47:ee:61:76:43:34:86:05:37:63:
                    69:5c:3e:33:b2:ee:d6:95:d5:e9:fb:30:9c:b3:e3:
                    2a:e0:21:1f:b4:bd:e8:57:6a:d3:a6:05:e3:4f:91:
                    46:a5:b5:09:a2:3f:86:d9:dd:59:0c:fa:24:b1:b1:
                    76:f4:39:1f:8c:c0:d7:64:9d:f8:97:a3:e8:fc:d0:
                    65:51:95:d1:c6:5d:55:cd:8b:3a:fe:fa:80:eb:d4:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:FC:F2:15:32:DB:68:E8:02:61:81:2E:C7:F8:2C:0E:0A:D3:57
            X509v3 Authority Key Identifier:
                keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/ocj88hUy22joAmGBLsf4LA4K01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:04:c1:21:d9:f6:88:d1:ee:dc:35:a1:8a:d5:31:d6:d5:8b:
         32:7a:bd:a2:8a:df:de:d7:1e:19:d1:32:9f:44:6e:1a:37:fe:
         9a:fb:6b:80:ec:96:a4:33:f9:1a:15:d8:f7:92:46:29:77:52:
         8f:b6:d2:9b:c7:92:19:5d:c3:09:15:8b:e4:13:00:a7:7c:aa:
         a7:65:d8:6d:8d:96:d6:86:ec:17:de:ba:21:00:e2:96:2a:5d:
         02:d4:cd:ae:8e:ab:d6:7f:b5:b4:a2:6e:f8:d3:80:68:02:d9:
         f9:9a:d1:4e:71:10:f6:c0:e4:1b:a4:43:d4:9b:d3:8f:b7:56:
         c7:47:b0:17:25:0f:cc:3e:9c:75:29:91:d9:b4:3d:ea:7e:77:
         30:ee:3a:9e:c4:42:29:52:ed:ce:b0:90:64:67:b0:5e:4f:a3:
         0a:7c:20:b8:8d:10:93:70:ad:03:c0:38:08:c4:f9:b1:a5:83:
         12:35:33:52:20:37:bd:6d:33:00:86:48:2d:af:f9:7d:8a:ad:
         53:6e:4b:ac:75:c8:c0:32:ed:8b:bb:b5:a0:f0:cd:12:ea:86:
         81:01:57:ab:5f:df:5d:40:cd:d8:7e:63:c7:9c:1c:63:bc:d0:
         48:fc:a1:df:a7:17:57:19:75:9a:ff:b5:33:43:73:72:eb:47:
         bc:b9:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----