Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa
File:                     a25CbXdcayrpWfySZ7PSdpox_oU.roa (raw, json)
Hash identifier:          rbbCatl/ukhAHQ9xyFF8ndQxVBFkeqrJu0+04SKvlCQ=
Subject key identifier:   6B:6E:42:6D:77:5C:6B:2A:E9:59:FC:92:67:B3:D2:76:9A:31:FE:85
Certificate issuer:       /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial:       018571958029FE7C171BC873A383295D3B58
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa
Signing time:             Mon 02 Jan 2023 08:25:01 +0000
ROA not before:           Mon 02 Jan 2023 08:25:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        79.110.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:95:80:29:fe:7c:17:1b:c8:73:a3:83:29:5d:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
        Validity
            Not Before: Jan  2 08:25:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b6e426d775c6b2ae959fc9267b3d2769a31fe85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:b8:23:39:10:6a:27:0f:90:21:8c:94:f8:
                    3e:10:17:89:a0:e9:82:d5:5c:19:46:c5:a3:9a:df:
                    04:6b:7e:19:60:e8:84:57:05:0c:5b:eb:ca:a0:d3:
                    c5:be:2f:6c:7c:40:3a:f4:b1:57:16:41:0f:25:52:
                    fa:6a:5b:ef:98:c7:99:3f:e5:dd:61:3f:1c:e8:a9:
                    3b:11:46:57:42:1a:e4:3f:e2:42:12:ab:bb:c8:5a:
                    f2:5d:4b:23:49:86:4b:d7:96:a0:66:87:e4:fb:8a:
                    53:11:f5:9e:bc:ce:90:8c:c2:5c:d1:c9:88:9c:69:
                    7c:2f:95:8d:7b:9a:69:11:4e:05:5c:e3:6c:af:52:
                    12:3f:31:b4:f0:1f:b4:13:95:dd:9c:f5:e0:51:59:
                    3a:61:53:31:1b:48:bf:bd:9c:86:25:bd:89:3f:53:
                    77:4e:a4:70:ff:61:e3:94:40:df:4a:8c:d8:d8:36:
                    ea:d9:fc:67:e2:90:95:00:e0:b1:dc:09:c2:bc:23:
                    32:d8:e1:02:b1:b4:e8:6c:ba:2f:44:42:32:49:89:
                    c4:fa:bd:76:bb:af:53:7b:c7:0f:1b:c3:88:66:22:
                    33:96:ad:69:0c:85:4b:80:d2:4e:8e:9b:e1:a6:ab:
                    fb:d1:4a:5b:58:37:3a:94:16:ed:74:ed:fd:6c:41:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6E:42:6D:77:5C:6B:2A:E9:59:FC:92:67:B3:D2:76:9A:31:FE:85
            X509v3 Authority Key Identifier:
                keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/a25CbXdcayrpWfySZ7PSdpox_oU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:5c:56:81:7a:c8:e2:61:90:af:c5:04:6e:9a:0d:5a:21:
         d6:65:05:7f:f4:fd:cb:4a:c2:bf:8f:f3:a4:78:3c:5b:25:ac:
         88:74:00:c3:6f:93:94:eb:76:a6:4d:9f:b6:3e:41:d6:33:0b:
         51:de:ae:2b:05:ab:2f:5e:22:27:57:47:f2:a1:1e:02:ab:46:
         84:d3:5a:38:e6:67:16:2a:63:97:04:70:88:c0:b4:9f:c7:90:
         f0:90:e0:cd:ff:09:18:8b:40:50:9b:b4:b6:14:46:f3:3c:c9:
         41:e9:38:ad:cb:fc:82:35:2d:25:55:d8:bc:08:13:ef:15:58:
         66:76:83:64:7d:ed:05:0c:7e:02:54:67:15:62:95:50:b8:d3:
         57:7d:a6:40:18:c3:5f:54:00:74:e7:b9:63:c4:d2:89:e5:7b:
         40:f3:6b:fd:69:56:64:a1:89:e3:6c:7a:03:f6:c6:50:aa:32:
         7a:2f:d0:00:19:d1:a2:fc:d9:fc:3a:34:fc:b7:1b:bd:19:bb:
         0c:12:b5:b2:01:03:8d:c5:29:32:e5:49:b0:c2:f9:98:03:52:
         74:03:79:28:47:c8:de:06:9e:4a:11:35:47:59:f2:19:69:0a:
         86:5f:b7:d6:33:03:c1:7e:6f:82:3d:77:60:83:70:e5:11:b9:
         35:29:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----