Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/FS8F8rd-1YzgxI9cG27bCro21Vw.roa
File:                     FS8F8rd-1YzgxI9cG27bCro21Vw.roa (raw, json)
Hash identifier:          C3gTQ/SLhu9Awjgw3Vxf3rtSprTsW10ab4ksqkU4b7g=
Subject key identifier:   15:2F:05:F2:B7:7E:D5:8C:E0:C4:8F:5C:1B:6E:DB:0A:BA:36:D5:5C
Certificate issuer:       /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial:       0186C62CD9835A7ADB7E6D8ABF993037BD4A
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/FS8F8rd-1YzgxI9cG27bCro21Vw.roa
Signing time:             Thu 09 Mar 2023 11:41:13 +0000
ROA not before:           Thu 09 Mar 2023 11:41:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1759
IP address blocks:        77.247.196.0/24 maxlen: 24
                          2a12:b440:100::/48 maxlen: 64
                          2a12:b440:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c6:2c:d9:83:5a:7a:db:7e:6d:8a:bf:99:30:37:bd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
        Validity
            Not Before: Mar  9 11:41:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=152f05f2b77ed58ce0c48f5c1b6edb0aba36d55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:a3:0c:f2:fd:79:94:8f:a5:d5:11:4b:64:
                    2c:bd:db:d3:5a:db:07:68:c3:cb:4d:51:2f:b8:69:
                    5b:fc:f3:8e:da:57:0e:b8:c6:f0:85:f4:cb:4b:5d:
                    f3:d4:d6:9b:e1:31:f2:10:76:97:42:09:cb:8e:9c:
                    9a:84:d6:a5:14:f9:97:78:dd:c4:1d:79:ce:cd:95:
                    9f:cf:74:bd:00:0a:8a:d2:28:15:3c:c8:ae:08:50:
                    2c:a5:be:57:51:41:08:e4:bf:7a:13:40:10:73:80:
                    64:70:be:af:a1:27:87:31:80:48:01:4d:31:e5:e0:
                    77:15:f2:41:93:1d:12:0f:d3:8b:6c:4c:96:df:ac:
                    dd:37:24:de:bd:96:29:f9:29:03:cd:f2:a3:ae:42:
                    75:19:24:83:a8:b2:c2:c8:c8:ec:c3:f2:28:3e:6a:
                    36:d9:ed:6d:07:9b:21:f4:1f:3c:41:86:d2:3b:ec:
                    40:5f:f2:71:6c:39:21:64:eb:3f:f6:66:19:69:57:
                    3b:3a:c4:a0:a0:5c:9d:cc:a7:53:e6:e4:95:ef:c4:
                    8b:58:6c:eb:77:e2:93:4d:08:3c:9d:56:90:cf:38:
                    09:3e:82:f7:42:c2:36:81:d6:1d:47:5e:5f:c9:aa:
                    6e:a1:bc:2e:42:8b:a8:c4:5b:46:21:7e:cf:be:55:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2F:05:F2:B7:7E:D5:8C:E0:C4:8F:5C:1B:6E:DB:0A:BA:36:D5:5C
            X509v3 Authority Key Identifier:
                keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/FS8F8rd-1YzgxI9cG27bCro21Vw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.196.0/24
                IPv6:
                  2a12:b440:1::/48
                  2a12:b440:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:9c:c7:91:79:db:c7:8f:c0:54:40:db:3d:b9:21:3d:9b:
         3c:4b:cd:d0:ae:66:8f:9f:2c:6b:90:0d:23:11:98:2b:4b:b1:
         8b:57:92:10:57:64:97:ed:22:97:03:0e:da:58:0e:91:a3:94:
         40:a8:23:3a:84:b7:ea:3f:0f:d1:d7:51:7f:4a:45:ea:50:60:
         48:83:bf:93:1c:f9:30:14:82:78:70:62:d1:cb:fb:8b:20:16:
         b3:54:70:9f:66:39:29:75:9c:5f:22:1c:4b:68:d4:ea:0d:98:
         f2:34:aa:5e:84:71:83:75:76:19:18:ab:33:32:57:37:52:e2:
         d3:ba:87:c5:dd:9d:ee:55:79:c2:49:e2:22:71:ec:f1:f5:e7:
         12:c8:df:d5:68:ac:87:b6:21:b2:22:0b:3a:64:95:ac:aa:45:
         45:bf:97:5c:02:48:e3:9e:db:11:bc:55:94:62:51:1e:45:02:
         a6:2c:ad:26:d9:e0:dd:aa:39:31:e8:f1:f5:43:67:8a:ec:a4:
         8c:0e:52:d1:a0:40:2a:28:86:fc:ee:9c:3b:25:b0:6a:5b:ac:
         64:92:c9:ea:a7:e1:ec:a0:44:03:98:54:95:a7:65:86:c0:4e:
         62:de:cf:07:ba:b7:8e:47:59:b3:89:0c:63:5f:3c:a0:c7:2a:
         2a:c8:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----