Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/w_IITsvC5JHh4LlL37G95b5bLh0.roa
File:                     w_IITsvC5JHh4LlL37G95b5bLh0.roa (raw, json)
Hash identifier:          g51fJzHZ3SLfzKIBkY2v8v7PWL+DRr9gWi8Ii+r7bvs=
Subject key identifier:   C3:F2:08:4E:CB:C2:E4:91:E1:E0:B9:4B:DF:B1:BD:E5:BE:5B:2E:1D
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       018611409CAE6DF0226C3D1B455EC22D45CF
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/w_IITsvC5JHh4LlL37G95b5bLh0.roa
Signing time:             Thu 02 Feb 2023 08:31:32 +0000
ROA not before:           Thu 02 Feb 2023 08:31:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209350
IP address blocks:        78.24.207.0/24 maxlen: 24
                          2a09:5e00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:11:40:9c:ae:6d:f0:22:6c:3d:1b:45:5e:c2:2d:45:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Feb  2 08:31:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3f2084ecbc2e491e1e0b94bdfb1bde5be5b2e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:68:5b:21:11:e4:15:d6:8f:6e:76:ce:c8:
                    21:e4:b8:89:6b:ba:ed:78:25:d8:6d:4f:e8:dc:1e:
                    21:e2:3b:34:55:c4:73:8b:c4:51:a5:66:36:88:ab:
                    92:ab:8f:03:e1:c7:b1:ee:5d:d3:70:c2:fe:2f:ca:
                    25:0b:18:24:f1:00:27:e5:1c:99:4d:6b:ef:06:8d:
                    be:d7:d2:77:c7:04:00:1f:a9:f6:14:89:e6:e5:43:
                    8f:fa:05:2a:c0:66:71:f8:35:e6:83:33:b8:74:2c:
                    39:3d:4b:d9:dc:e3:a2:c3:4a:7b:dc:61:49:c9:e2:
                    a0:02:59:0b:bf:17:e1:c5:4a:2a:82:5f:81:8e:57:
                    f0:11:ed:7f:c3:dd:d7:77:b1:3f:0a:77:e5:7d:61:
                    b5:84:dc:1f:41:a3:13:8c:22:fc:e9:c3:ee:e9:c5:
                    fa:a4:b2:72:47:bc:86:45:9f:08:40:78:cd:62:14:
                    44:a4:56:2a:04:b4:bf:58:41:57:c1:9e:ef:2b:74:
                    39:53:d1:be:35:93:83:8a:79:ad:2b:f6:c2:7f:57:
                    e2:33:cb:5c:36:8c:02:c1:81:5f:b9:9e:9e:ca:d5:
                    df:30:a0:8b:22:c3:a8:9d:af:ef:db:9e:c6:97:6a:
                    19:8e:bf:9e:2f:17:91:8e:3c:e2:9d:28:67:1d:3d:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:08:4E:CB:C2:E4:91:E1:E0:B9:4B:DF:B1:BD:E5:BE:5B:2E:1D
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/w_IITsvC5JHh4LlL37G95b5bLh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.24.207.0/24
                IPv6:
                  2a09:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:95:38:e3:1b:8a:5c:59:c7:23:1a:f4:e5:d4:b7:01:de:
         b6:5e:44:04:3d:57:77:1e:a7:9b:ec:80:2d:21:2f:4b:79:22:
         df:92:68:b3:6f:cb:c7:8a:5e:8c:e1:70:6d:d9:a4:4c:18:d8:
         d1:84:33:87:6e:9c:d1:dd:c7:61:a7:76:4d:d3:08:0d:19:f5:
         62:de:34:d7:f6:a0:ea:d8:75:e5:45:ad:bd:64:4f:2d:f9:74:
         ba:df:a9:b9:c9:40:70:a1:3b:c6:65:72:14:39:46:2f:ae:49:
         ae:2f:1e:84:75:4e:30:d8:6f:3d:e6:e7:e1:33:76:48:2b:5c:
         7f:d9:a8:d6:7f:94:62:27:5c:d2:cd:49:26:2f:ed:d5:c9:c9:
         db:86:02:03:da:10:24:09:d6:21:1a:14:e7:7d:10:bf:29:97:
         89:80:96:2a:e4:a9:e4:75:06:cf:c4:2c:56:fb:8b:e4:20:ef:
         ce:b4:14:8c:41:76:2d:2e:7e:ce:9b:11:66:bc:a7:f3:4b:69:
         df:3b:ca:36:00:d0:c3:a6:c7:1c:30:60:cf:51:9e:f7:e3:29:
         79:27:68:be:cb:42:1d:ce:fd:10:cd:b6:b1:75:5a:75:0c:d7:
         24:e9:37:b8:cd:0d:27:39:0d:3d:db:db:bd:b9:1f:4d:d3:7f:
         3c:75:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----