Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/FtsV2b0FeR5apCjFfbCkoESOmLc.roa
File:                     FtsV2b0FeR5apCjFfbCkoESOmLc.roa (raw, json)
Hash identifier:          QBbSFtQcsEW1rzd3gRtiHUlOO3iCCSpDp3bVgFSHESQ=
Subject key identifier:   16:DB:15:D9:BD:05:79:1E:5A:A4:28:C5:7D:B0:A4:A0:44:8E:98:B7
Certificate issuer:       /CN=0046f78f5f3410eb0e56dc17003667e030711baf
Certificate serial:       0186E42D6F0B590102A9432162F15D8423C7
Authority key identifier: 00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEb3j180EOsOVtwXADZn4DBxG68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/FtsV2b0FeR5apCjFfbCkoESOmLc.roa
Signing time:             Wed 15 Mar 2023 07:30:28 +0000
ROA not before:           Wed 15 Mar 2023 07:30:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51479
IP address blocks:        77.72.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:2d:6f:0b:59:01:02:a9:43:21:62:f1:5d:84:23:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0046f78f5f3410eb0e56dc17003667e030711baf
        Validity
            Not Before: Mar 15 07:30:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16db15d9bd05791e5aa428c57db0a4a0448e98b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:55:4d:b8:68:15:65:29:ec:07:cd:87:b9:
                    da:cc:e1:90:cf:af:0b:af:ed:f7:38:d2:24:b4:c1:
                    72:36:b9:c7:cc:89:fc:bf:e7:47:37:fc:3a:a6:f5:
                    a9:99:1f:10:e4:77:58:6e:cb:01:3d:bf:ae:18:84:
                    de:41:54:7c:47:95:d1:aa:9e:ba:7d:31:1d:06:f8:
                    50:d3:a9:3d:a0:a7:1f:6f:67:dc:6b:4e:49:ca:ef:
                    b4:0a:5f:4d:eb:a0:56:94:56:0e:a5:60:0e:f7:ca:
                    3d:5d:3b:8a:2b:97:49:f8:1c:da:e0:af:9a:c6:ca:
                    d8:88:17:c2:d8:c2:d1:df:72:d7:7b:06:8a:8a:44:
                    b2:26:d9:d0:65:7f:63:86:3d:b1:e2:cc:5a:b3:19:
                    89:43:2d:6b:73:cd:27:4c:3f:ce:5b:a1:e2:57:89:
                    1c:58:97:72:7d:d7:c1:ed:c2:5c:18:ce:ab:51:33:
                    bf:ab:3b:df:94:12:c4:11:eb:f5:13:9d:ce:b7:e9:
                    9e:57:99:dd:75:1e:e2:3a:bc:53:ad:5d:d2:82:1d:
                    d7:04:28:57:40:1f:72:3b:e2:dd:5b:9b:aa:ec:bc:
                    46:78:b6:31:05:ee:29:fc:27:33:2a:36:b6:33:2b:
                    2b:aa:76:3e:0c:8f:79:9f:bd:6e:47:8d:bf:c8:b4:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DB:15:D9:BD:05:79:1E:5A:A4:28:C5:7D:B0:A4:A0:44:8E:98:B7
            X509v3 Authority Key Identifier:
                keyid:00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEb3j180EOsOVtwXADZn4DBxG68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/FtsV2b0FeR5apCjFfbCkoESOmLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:61:e3:49:0c:87:d9:57:bd:63:bb:f0:94:fe:98:73:73:fc:
         a6:2c:9e:f9:9b:46:10:0c:2b:3f:c1:ea:2f:39:2e:f1:7c:c0:
         3c:b5:4a:b3:f0:81:6a:a5:9b:5a:23:cd:3d:c9:25:de:a2:eb:
         c3:14:2f:5b:05:f3:a8:2b:40:b7:fe:a4:c8:b4:cb:e3:84:75:
         8e:dc:10:44:8a:66:66:24:0a:ef:38:6a:16:6a:6d:fc:d7:e0:
         96:ff:25:41:9e:0c:51:21:d3:ef:10:c5:c0:74:d7:46:0e:e6:
         51:e6:1f:cf:e5:0c:31:8d:7b:9a:ca:73:cd:e5:1b:79:49:e5:
         fa:e4:d1:bf:71:a9:24:32:18:b2:bb:f8:60:b4:26:83:7b:7a:
         73:f7:47:98:a1:3c:43:1b:0c:18:a8:26:87:ea:93:44:bb:08:
         af:15:e1:2d:55:b6:1e:d7:bb:b0:8f:96:ad:3b:02:cc:5a:1d:
         19:bc:c0:35:b0:65:50:76:f8:56:0e:fb:72:9a:bf:4b:cc:57:
         dc:ba:ba:1a:78:69:57:ed:7e:fd:b8:50:6a:4e:8c:00:12:8d:
         b7:b3:65:1f:2b:db:39:71:ce:ac:f9:00:1f:b5:f6:43:41:70:
         ff:32:ad:9f:52:31:eb:23:e0:68:06:87:79:c6:7c:32:38:d8:
         ab:12:38:a0
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 21 08:47:44 2023 by rpki-client on console-ams.rpki-client.org