Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nX6-7R59ZUPyMGAMhRc8yjBPhF0.roa
File:                     nX6-7R59ZUPyMGAMhRc8yjBPhF0.roa (raw, json)
Hash identifier:          nN/BRtgmhxvyVc/nCmEQ1CnrDCFTbCYaWXBmqIILpl0=
Subject key identifier:   9D:7E:BE:ED:1E:7D:65:43:F2:30:60:0C:85:17:3C:CA:30:4F:84:5D
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       01878E04F1A1FC447EC9F5F3D2BC5F55D659
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nX6-7R59ZUPyMGAMhRc8yjBPhF0.roa
Signing time:             Mon 17 Apr 2023 07:01:41 +0000
ROA not before:           Mon 17 Apr 2023 07:01:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42532
IP address blocks:        188.64.12.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8e:04:f1:a1:fc:44:7e:c9:f5:f3:d2:bc:5f:55:d6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Apr 17 07:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d7ebeed1e7d6543f230600c85173cca304f845d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:55:29:b5:3c:ff:b0:53:89:82:73:0c:6f:
                    ec:ca:25:4c:76:c7:b9:cc:a3:d7:02:32:cc:10:1a:
                    14:fe:e4:f7:30:45:76:c8:f4:7f:d8:cc:04:01:17:
                    31:a7:11:4a:e4:44:c8:22:5d:22:07:47:28:29:fc:
                    b4:36:84:7f:96:ac:7b:25:7c:e6:cc:cd:fb:57:11:
                    e3:23:48:93:54:de:cc:7b:0f:8f:1b:4a:aa:1a:d4:
                    d1:80:34:a8:11:5f:ce:d2:29:28:5b:e5:71:e7:3e:
                    ad:07:a5:35:44:82:21:58:05:70:d3:1b:56:b5:26:
                    1e:96:86:e9:54:33:94:9c:5c:28:97:ea:0a:cc:0d:
                    43:6f:8f:b0:1f:7e:cd:f4:36:60:58:6a:ab:40:1f:
                    e5:3e:b3:10:14:43:01:22:88:ae:7c:8c:f5:a8:95:
                    c6:50:29:24:67:e1:ed:dc:7b:ec:f1:3a:a5:5c:bf:
                    ef:1f:3b:cd:6c:7e:4e:8d:35:45:a8:bb:cb:0b:56:
                    d5:c1:b3:f6:f9:66:2e:e8:a2:59:a5:26:42:87:27:
                    21:13:73:d8:e6:6c:81:70:2d:21:89:5f:be:b2:96:
                    f8:20:72:b7:98:39:9d:90:a0:f1:9f:83:97:41:e7:
                    70:b5:a8:aa:74:d7:27:0d:1d:6e:16:81:4f:22:b8:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7E:BE:ED:1E:7D:65:43:F2:30:60:0C:85:17:3C:CA:30:4F:84:5D
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/nX6-7R59ZUPyMGAMhRc8yjBPhF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:12:b1:b1:ce:60:d2:f2:c5:fa:63:89:fc:77:70:aa:22:
         2f:75:d8:5b:f7:37:90:44:98:73:4b:1d:3d:33:82:ab:c5:dd:
         f4:8e:44:7e:68:c6:5b:b5:3a:6b:4a:1e:0b:ef:cb:a4:9e:ae:
         a1:f2:81:cb:37:33:84:7d:fc:97:61:fa:dc:9b:85:11:89:b5:
         3f:7a:67:af:b7:54:58:17:aa:31:55:31:60:2c:1d:68:2e:e4:
         c1:54:f6:84:cc:ae:8a:f7:15:d8:12:f8:04:0e:ba:50:0d:af:
         dc:dc:5d:19:20:33:73:be:5e:94:6f:c7:81:99:5f:b2:1f:d0:
         18:6d:0c:43:aa:b3:5a:76:0d:2a:cd:91:79:f4:31:44:85:c4:
         c4:f0:de:44:9e:92:ab:d8:61:a0:d0:50:b9:00:db:7e:d3:57:
         7c:3a:a2:c1:05:40:17:c5:4e:96:fe:3a:87:58:a0:03:7a:64:
         09:2a:3c:e4:67:47:2e:59:05:5c:f6:17:f0:bb:1b:8c:51:9d:
         d4:6f:9e:86:f3:46:bd:06:8e:08:18:2b:61:1c:4a:3e:a7:98:
         9a:8e:07:90:62:21:d2:b9:b8:9d:2a:8e:60:a3:6c:f6:57:77:
         ef:71:01:5a:59:03:7e:d1:3b:8f:72:08:ca:3c:89:66:53:59:
         4e:2f:30:fe
-----BEGIN CERTIFICATE-----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