Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa
File:                     rzWYppoLAHYlJskKpV4KlyHyDK0.roa (raw, json)
Hash identifier:          IyaI8KFv6hLT4GjNwoxP9m5LE08k8NBQKUV5bB00VP8=
Subject key identifier:   AF:35:98:A6:9A:0B:00:76:25:26:C9:0A:A5:5E:0A:97:21:F2:0C:AD
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       0186E078EF64BA1E6A587192C50C11CF841E
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa
Signing time:             Tue 14 Mar 2023 14:14:27 +0000
ROA not before:           Tue 14 Mar 2023 14:14:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7155
IP address blocks:        37.46.18.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e0:78:ef:64:ba:1e:6a:58:71:92:c5:0c:11:cf:84:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Mar 14 14:14:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af3598a69a0b00762526c90aa55e0a9721f20cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:23:c2:30:b1:14:17:a5:dc:be:83:fd:c7:
                    4b:d5:07:17:0d:51:c6:ca:d8:4d:53:1b:a5:1c:db:
                    19:a7:8b:62:b2:1b:e9:41:45:f1:12:f4:07:66:83:
                    db:45:58:58:92:6c:64:54:0d:80:cd:d4:cd:78:91:
                    24:30:f1:66:2a:58:90:d1:86:16:a4:71:d1:75:87:
                    7d:19:37:fa:5f:31:61:d5:1c:89:69:84:80:51:f3:
                    ce:e8:d4:7e:3e:c1:9b:85:59:ed:d6:a4:a2:54:c7:
                    1f:7a:be:92:87:03:fe:34:73:ac:8d:80:86:bd:94:
                    c7:6f:06:ec:3d:ea:05:d1:a3:39:41:e5:94:85:15:
                    84:9c:da:9d:8d:6e:6a:cc:18:a2:ab:95:26:2f:a1:
                    9e:42:9f:0a:7c:e8:af:62:80:ab:4c:23:e2:9d:ec:
                    a5:26:f8:ef:a8:18:07:4f:16:41:36:1d:7b:ac:66:
                    21:53:4c:52:59:9f:9f:e6:5c:7b:7c:4c:eb:44:80:
                    e3:d7:6a:c4:fd:f2:06:3d:d8:36:c9:db:98:1d:72:
                    62:26:18:c7:b4:35:1e:48:71:99:af:d1:0e:33:f7:
                    21:13:e8:2b:2a:13:6a:74:73:07:f1:cf:41:07:ed:
                    ba:b6:ba:65:ca:27:9f:75:7c:7d:99:50:b9:13:21:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:98:A6:9A:0B:00:76:25:26:C9:0A:A5:5E:0A:97:21:F2:0C:AD
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.46.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:c1:04:b0:3c:76:13:f9:a9:3e:af:de:ab:af:d2:b1:05:
         10:e0:cc:41:31:a4:9a:9d:76:c9:95:84:b5:8b:d9:54:9f:f3:
         d0:3d:1c:a9:54:de:71:9e:18:9b:32:4a:31:eb:82:d3:37:8a:
         eb:59:d4:51:68:4d:a9:b1:0d:f4:86:e7:5a:9c:80:e7:1a:4e:
         db:b5:98:b5:be:db:da:a8:e9:cc:5e:e1:19:46:fe:1a:4c:24:
         d1:b6:57:85:69:6c:4c:14:c0:4d:e5:25:3f:e2:c4:0e:4f:d2:
         ff:97:45:7b:a7:b6:0e:be:4b:1f:f3:aa:68:80:8c:94:85:5c:
         54:61:fa:f9:0b:7c:fd:8b:e9:6a:14:58:3d:56:3c:97:49:25:
         28:5b:03:0a:94:c6:a7:4e:d9:c3:88:f6:b4:d0:b1:3c:80:11:
         83:86:a2:31:13:19:53:9b:32:39:e0:28:55:36:23:38:ad:6f:
         e0:20:f4:3b:8a:b3:bd:41:8d:20:94:b1:34:48:a9:b0:59:69:
         4f:0f:37:eb:eb:50:4f:ea:27:9f:75:99:76:83:6a:74:2c:e8:
         74:07:9f:92:e0:33:66:5a:5e:bf:bd:04:07:94:04:20:01:8b:
         89:02:76:9d:ae:1d:16:b7:f8:32:75:f9:15:87:b9:ed:c1:d7:
         89:11:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----