Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20323632323837.roa
File:                     37372e38332e3235322e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          x94CcMo+9teo9s7cKmKnmge7254MI2oSz+IV536+SFg=
Subject key identifier:   2B:73:97:0E:40:B4:4A:A4:2E:2A:83:82:3B:D9:EF:A8:52:7E:07:BE
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       2D78683A69866C741A322214CAF223927B156579
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20323632323837.roa
Signing time:             Thu 23 Mar 2023 17:04:13 +0000
ROA not before:           Thu 23 Mar 2023 16:59:13 +0000
ROA not after:            Thu 21 Mar 2024 17:04:13 +0000
asID:                     262287
IP address blocks:        77.83.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:68:3a:69:86:6c:74:1a:32:22:14:ca:f2:23:92:7b:15:65:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Mar 23 16:59:13 2023 GMT
            Not After : Mar 21 17:04:13 2024 GMT
        Subject: CN=2B73970E40B44AA42E2A83823BD9EFA8527E07BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:89:bb:a3:1f:dc:56:ed:e7:19:82:71:31:
                    91:bc:de:05:19:19:f2:36:bd:ce:14:ba:0d:85:d6:
                    51:9a:a9:65:69:1e:87:ce:0b:16:d3:d3:a6:25:4a:
                    11:7d:cb:a2:ed:f9:81:29:0c:77:0d:2d:aa:0f:7a:
                    a1:a0:d9:d1:46:ac:ab:d6:8c:b2:e4:e6:54:25:d2:
                    4b:fd:53:f4:6a:52:cd:13:94:ef:dd:47:b4:d1:85:
                    95:8a:67:d5:01:0c:89:bb:18:9d:79:81:60:65:74:
                    8a:31:da:b2:82:94:23:13:e5:25:df:f8:62:f9:63:
                    02:79:7c:e3:fa:2c:20:4e:0f:76:aa:47:d2:ed:bb:
                    ec:79:76:34:df:63:aa:3b:37:98:c9:63:97:87:14:
                    f5:d4:5e:ae:34:cf:3c:58:a6:50:85:4c:47:a8:39:
                    85:5b:90:50:e4:ed:99:91:ac:0c:ae:51:fd:b9:ec:
                    77:d7:97:c1:95:ee:3d:17:dc:70:b7:68:6f:60:bd:
                    80:d6:d0:62:55:61:38:ad:59:2e:d0:95:9e:5c:a7:
                    2b:ad:cb:22:94:3b:6d:cc:59:eb:8e:56:c6:4a:90:
                    ea:38:62:a3:be:d4:4c:ee:da:a6:11:8e:5a:15:c8:
                    30:95:b5:f2:e1:f8:29:d5:e9:7d:fd:3d:cd:f1:38:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:97:0E:40:B4:4A:A4:2E:2A:83:82:3B:D9:EF:A8:52:7E:07:BE
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:91:46:c4:10:2a:ce:36:ea:bc:f4:56:61:c2:f0:7f:cd:
         07:f5:be:a2:31:3e:15:9e:ea:66:84:19:6f:cc:d4:ef:22:7f:
         1c:e3:7f:40:06:53:78:9c:15:ef:03:80:67:3b:67:7a:f7:11:
         74:3c:e4:02:e3:5b:f2:5e:40:fa:a4:14:f4:95:47:9c:21:91:
         fb:eb:5c:06:e4:ec:83:63:84:9f:08:1b:92:53:a6:bc:19:e4:
         f2:82:71:8d:ba:ad:79:10:36:c8:aa:6f:14:ef:c9:c8:0c:ad:
         b5:dd:51:02:c2:7e:3e:ba:7f:6b:d9:95:02:7f:f0:dc:55:e5:
         d7:cd:7f:32:18:42:1c:88:4e:f7:94:89:24:44:0d:d5:df:fe:
         72:dc:c9:9e:fd:bb:32:ec:18:ab:22:26:6d:26:37:8b:99:f1:
         5d:d8:f0:d3:0b:80:1f:ee:dc:69:bb:ab:f0:62:0d:a2:9e:15:
         38:fa:63:33:42:da:31:d2:ff:89:93:0d:df:43:73:12:18:d9:
         a8:7f:7a:b8:55:95:79:3b:1c:18:d5:fc:39:7c:8c:30:f5:46:
         cb:68:4f:b5:10:55:d1:4a:cb:86:17:de:c2:5b:a5:b5:e4:3f:
         6e:db:a7:19:ec:38:ed:51:8b:ba:5b:78:a9:11:5e:7f:b4:2b:
         f9:60:df:d1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULXhoOmmGbHQaMiIUyvIjknsVZXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yMzAzMjMxNjU5MTNaFw0yNDAzMjExNzA0MTNaMDMxMTAvBgNV
BAMTKDJCNzM5NzBFNDBCNDRBQTQyRTJBODM4MjNCRDlFRkE4NTI3RTA3QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wIm7ox/cVu3nGYJxMZG83gUZ
GfI2vc4Uug2F1lGaqWVpHofOCxbT06YlShF9y6Lt+YEpDHcNLaoPeqGg2dFGrKvW
jLLk5lQl0kv9U/RqUs0TlO/dR7TRhZWKZ9UBDIm7GJ15gWBldIox2rKClCMT5SXf
+GL5YwJ5fOP6LCBOD3aqR9Ltu+x5djTfY6o7N5jJY5eHFPXUXq40zzxYplCFTEeo
OYVbkFDk7ZmRrAyuUf257HfXl8GV7j0X3HC3aG9gvYDW0GJVYTitWS7QlZ5cpyut
yyKUO23MWeuOVsZKkOo4YqO+1Ezu2qYRjloVyDCVtfLh+CnV6X39Pc3xOCQ7AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUK3OXDkC0SqQuKoOCO9nvqFJ+B74wHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzczNzJlMzgzMzJlMzIzNTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
TVP8MA0GCSqGSIb3DQEBCwUAA4IBAQAuJ5FGxBAqzjbqvPRWYcLwf80H9b6iMT4V
nupmhBlvzNTvIn8c439ABlN4nBXvA4BnO2d69xF0POQC41vyXkD6pBT0lUecIZH7
61wG5OyDY4SfCBuSU6a8GeTygnGNuq15EDbIqm8U78nIDK213VECwn4+un9r2ZUC
f/DcVeXXzX8yGEIciE73lIkkRA3V3/5y3Mme/bsy7BirIiZtJjeLmfFd2PDTC4Af
7txpu6vwYg2inhU4+mMzQtox0v+Jkw3fQ3MSGNmof3q4VZV5OxwY1fw5fIww9UbL
aE+1EFXRSsuGF97CW6W15D9u26cZ7DjtUYu6W3ipEV5/tCv5YN/R
-----END CERTIFICATE-----