Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MLWgqp-LwMDT8SN8i8tFEfcuF_8.roa
File:                     MLWgqp-LwMDT8SN8i8tFEfcuF_8.roa (raw, json)
Hash identifier:          wrj9H73kDRMmfT39avItx3w7ABzihArWzvEy2taBQCs=
Subject key identifier:   30:B5:A0:AA:9F:8B:C0:C0:D3:F1:23:7C:8B:CB:45:11:F7:2E:17:FF
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0189815964D0B2E7D649893A8A13A8E1745D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MLWgqp-LwMDT8SN8i8tFEfcuF_8.roa
Signing time:             Sun 23 Jul 2023 06:04:26 +0000
ROA not before:           Sun 23 Jul 2023 06:04:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        178.253.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:81:59:64:d0:b2:e7:d6:49:89:3a:8a:13:a8:e1:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul 23 06:04:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30b5a0aa9f8bc0c0d3f1237c8bcb4511f72e17ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:4c:42:cd:1d:93:bc:da:f6:b6:b4:21:2c:
                    3e:43:03:35:f9:55:0c:3f:b8:c7:31:ff:44:dc:e8:
                    bd:4b:0c:b6:78:ed:d1:e3:79:02:f7:89:f9:b4:c7:
                    67:37:a3:dd:c9:e7:aa:53:c1:0c:70:8d:44:a1:dd:
                    a3:21:b7:c6:aa:83:b4:81:19:1e:b1:8a:97:83:27:
                    3f:43:23:8c:8e:09:96:97:3b:6c:e8:25:3a:9c:dd:
                    8d:ed:17:3b:26:10:99:19:4f:ce:57:b5:98:8d:77:
                    0c:df:be:3e:11:67:03:1f:2d:4b:0f:64:22:9a:a6:
                    10:93:1d:c3:2f:1e:6d:fd:8d:88:1a:8e:75:ef:77:
                    24:aa:18:e9:50:d7:0d:3d:8b:bf:e7:3b:eb:28:67:
                    09:b9:28:b6:a7:9d:01:51:52:e4:e7:72:84:5d:37:
                    30:46:7c:c7:ca:a6:5a:d1:70:07:36:ae:cb:b7:22:
                    1a:1d:5d:59:90:81:6a:8d:ca:43:c0:2b:76:0c:d2:
                    db:0d:8f:d4:43:04:fb:73:06:05:42:d5:97:0c:9f:
                    34:13:0a:53:f9:2f:c0:36:32:1f:3d:0c:09:c5:ed:
                    51:cb:03:4d:7d:4e:98:af:ec:b7:e5:1d:7f:2c:a4:
                    5e:e5:fc:59:14:6e:a9:bd:bd:15:74:a0:24:54:21:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B5:A0:AA:9F:8B:C0:C0:D3:F1:23:7C:8B:CB:45:11:F7:2E:17:FF
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/MLWgqp-LwMDT8SN8i8tFEfcuF_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:68:56:1f:89:6a:47:a5:9c:43:f5:04:30:d4:f4:af:25:5b:
         6d:20:01:22:36:61:8f:3f:f6:9b:38:bf:e7:da:1c:17:5f:ea:
         3c:1b:d3:3e:01:95:3f:80:22:09:ec:ca:76:c6:0e:f4:c9:ec:
         78:3f:16:75:8c:e1:72:46:28:08:1a:b1:5d:00:0d:ca:c1:10:
         f2:3f:dc:48:43:0c:0e:79:a7:fc:81:a9:49:98:d7:dc:c3:8d:
         ee:2c:48:27:5e:d0:c4:66:94:2a:d9:f8:39:df:be:f1:13:c7:
         b0:19:06:fd:6d:a1:b5:b9:02:5e:6b:c7:db:37:f5:b4:bd:2c:
         2f:38:82:b8:b1:13:7a:8e:5f:f3:1a:f5:13:54:bb:26:40:c6:
         70:91:7c:72:04:13:b6:e4:e8:76:56:c5:e5:de:50:48:68:40:
         7e:e2:4f:82:b0:41:a0:47:98:a0:a8:26:e8:87:4b:fe:9d:1f:
         b5:c6:b8:c7:11:00:5e:13:2b:12:f1:c6:2b:1c:45:d4:19:76:
         d2:98:58:2e:43:26:ea:a7:35:2d:ee:35:ee:33:c5:0c:05:3b:
         0b:fc:ca:73:d0:35:41:32:cb:00:5e:5d:da:1f:00:4b:3a:de:
         37:28:27:74:38:1c:07:36:eb:1d:db:b3:47:69:03:5d:b1:be:
         f0:3b:37:8c
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 27 16:43:44 2023 by rpki-client on console-fra.rpki-client.org