Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Z3vxzFIo0x6o_zcsu0Cqhr8THNo.roa
File:                     Z3vxzFIo0x6o_zcsu0Cqhr8THNo.roa (raw, json)
Hash identifier:          7iahlJUcd/hG9xJDRzgKFsdqjHumtP2XIPcjIQmrUUc=
Subject key identifier:   67:7B:F1:CC:52:28:D3:1E:A8:FF:37:2C:BB:40:AA:86:BF:13:1C:DA
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       018ADD591F31E40C73A978C87255944F7D24
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Z3vxzFIo0x6o_zcsu0Cqhr8THNo.roa
Signing time:             Thu 28 Sep 2023 19:51:59 +0000
ROA not before:           Thu 28 Sep 2023 19:51:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39505
IP address blocks:        185.75.48.0/24 maxlen: 24
                          87.247.250.0/24 maxlen: 24
                          93.93.8.0/24 maxlen: 24
                          178.249.170.0/24 maxlen: 24
                          87.247.248.0/24 maxlen: 24
                          87.247.249.0/24 maxlen: 24
                          78.40.136.0/24 maxlen: 24
                          78.40.137.0/24 maxlen: 24
                          78.40.138.0/24 maxlen: 24
                          87.247.254.0/24 maxlen: 24
                          93.93.12.0/24 maxlen: 24
                          87.247.255.0/24 maxlen: 24
                          93.93.13.0/24 maxlen: 24
                          2a00:6580::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:dd:59:1f:31:e4:0c:73:a9:78:c8:72:55:94:4f:7d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Sep 28 19:51:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=677bf1cc5228d31ea8ff372cbb40aa86bf131cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:ed:5e:6c:85:2b:20:1c:6b:28:57:48:d8:
                    e2:91:cd:57:ba:b2:cf:8c:ea:9b:27:63:4c:05:3f:
                    c6:18:20:63:2f:2a:a2:80:ba:6a:45:9f:c7:2e:b6:
                    81:dd:1c:d3:87:73:26:11:0c:8c:ec:fb:4a:ac:a1:
                    8b:ac:d9:28:7c:a8:f2:20:88:67:f9:ab:b2:30:61:
                    23:91:5a:f8:5f:d8:9f:d9:f8:28:b2:ea:c6:f9:ce:
                    30:e2:01:ac:4d:eb:81:b9:41:bb:35:e2:f0:ee:8d:
                    e3:fd:01:72:ee:64:36:fa:45:17:ea:e6:5e:fb:15:
                    bd:35:13:d3:f8:0a:66:fd:bb:9f:d7:2c:f6:af:f1:
                    2a:b7:97:cd:b2:00:9e:79:90:ee:68:6f:9d:11:b0:
                    d6:fc:e2:53:1b:1c:b4:cf:45:aa:f6:ba:8d:06:84:
                    90:43:6e:7b:ac:58:89:21:a9:73:23:cc:61:23:f1:
                    2b:07:f4:ff:ba:e2:a0:e3:ad:e6:3b:90:5d:da:b1:
                    b7:55:37:7d:bc:e2:c5:aa:05:14:dd:aa:d5:12:25:
                    95:9d:c4:c8:25:0a:25:a4:13:27:fe:09:d1:43:f5:
                    50:db:ad:18:9f:9c:6c:b3:23:67:2b:8b:62:ee:35:
                    24:d2:0f:72:e4:d7:fc:9f:f8:0e:df:16:76:64:0d:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:F1:CC:52:28:D3:1E:A8:FF:37:2C:BB:40:AA:86:BF:13:1C:DA
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Z3vxzFIo0x6o_zcsu0Cqhr8THNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.40.136.0-78.40.138.255
                  87.247.248.0-87.247.250.255
                  87.247.254.0/23
                  93.93.8.0/24
                  93.93.12.0/23
                  178.249.170.0/24
                  185.75.48.0/24
                IPv6:
                  2a00:6580::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:ef:2c:35:c1:c5:ad:f6:93:0f:81:0b:d2:d7:d0:ec:50:
         f8:ec:60:37:b8:a0:1e:f3:c9:25:ea:d2:ed:1f:cc:f5:ce:b6:
         06:09:13:a5:4e:4b:49:b5:d5:2d:9d:8c:04:4e:67:53:5e:98:
         50:78:13:cf:a3:40:09:39:0e:b7:2f:63:7d:9d:db:4b:80:f4:
         ba:96:d8:36:19:cc:0c:99:fb:15:37:72:75:8b:99:5d:03:6e:
         b5:1c:26:ac:08:fb:ab:4a:20:66:09:12:81:fb:b4:b4:52:0c:
         93:47:6d:bf:2e:69:c4:ac:b4:98:18:48:d7:84:d6:a4:18:53:
         c0:b9:9c:17:aa:c1:3d:dc:f4:f7:21:af:15:8b:e4:57:2b:c2:
         a9:ed:5f:44:57:f8:53:7d:48:5d:05:c3:26:1d:5e:e3:23:83:
         56:20:02:e2:ca:52:fd:ce:b3:8a:a5:64:6f:30:0a:f3:1e:f7:
         70:8f:2d:4b:25:de:8a:2e:e5:66:eb:ec:f6:a9:6b:85:9e:3c:
         61:d5:3c:5f:eb:9f:94:7b:1e:ef:e9:57:dc:34:08:f2:bd:46:
         af:91:8c:0c:9f:1e:a5:cf:71:0b:1e:7e:ab:df:53:35:bf:29:
         bb:d8:6a:c4:b5:0d:33:67:25:67:40:22:f9:5b:ca:71:77:e8:
         41:01:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----