Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/VqPMRovMpOeTuJLaHjt0UjsO9GM.roa
File:                     VqPMRovMpOeTuJLaHjt0UjsO9GM.roa (raw, json)
Hash identifier:          16BZuH3Y5ua/2+SVxHAFNW4a9HACGnaa3NVkCZ6pNzs=
Subject key identifier:   56:A3:CC:46:8B:CC:A4:E7:93:B8:92:DA:1E:3B:74:52:3B:0E:F4:63
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       018940EA954B371AA82107F0E40C7403F64E
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/VqPMRovMpOeTuJLaHjt0UjsO9GM.roa
Signing time:             Mon 10 Jul 2023 17:47:42 +0000
ROA not before:           Mon 10 Jul 2023 17:47:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23393
IP address blocks:        178.255.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:40:ea:95:4b:37:1a:a8:21:07:f0:e4:0c:74:03:f6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Jul 10 17:47:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56a3cc468bcca4e793b892da1e3b74523b0ef463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:76:86:e9:37:cf:9f:b0:33:21:ca:bb:7c:
                    9d:f1:94:0f:da:52:0b:ba:0a:63:78:de:75:42:e6:
                    31:1f:79:fd:1d:6e:b0:87:9d:97:2c:d6:31:94:73:
                    d1:c9:c4:22:86:16:bd:af:5e:5a:bd:9a:68:71:a3:
                    26:6e:c5:54:6f:e6:72:c7:49:f9:7e:03:93:39:17:
                    d2:fd:f2:8c:8f:b5:3f:40:35:05:e8:56:05:88:11:
                    8e:8a:15:f8:39:12:ae:cc:10:91:33:4c:bf:99:4f:
                    95:d7:a5:e6:a3:7e:14:2e:a6:83:41:d6:5f:b5:02:
                    39:15:d3:6a:b9:c5:ef:64:8d:3e:c5:1c:f1:94:19:
                    74:36:af:72:90:26:11:9e:66:b3:bd:f1:d2:41:0b:
                    92:92:b6:e1:0b:35:de:71:59:bb:5e:b5:98:fd:39:
                    30:4b:cc:f4:30:45:2c:40:4d:78:3b:a3:63:1c:53:
                    7d:21:a7:0b:35:30:ef:10:e3:9b:7c:09:ef:71:a5:
                    8f:43:87:71:80:6b:84:b0:c9:c8:10:b2:5a:08:fb:
                    45:09:78:0a:77:c2:14:09:f5:a7:77:27:df:7b:bf:
                    d0:91:4d:1e:97:9f:fc:78:88:40:16:fb:ea:44:7e:
                    d7:53:bb:99:56:08:3f:d5:12:88:26:98:d2:ad:35:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A3:CC:46:8B:CC:A4:E7:93:B8:92:DA:1E:3B:74:52:3B:0E:F4:63
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/VqPMRovMpOeTuJLaHjt0UjsO9GM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c8:e2:94:17:46:61:59:11:91:d5:75:3b:4a:45:2e:64:e8:c3:
         5e:25:1d:a8:03:3b:2d:01:aa:30:71:d6:ed:e0:04:61:e9:6c:
         13:0d:8d:67:41:17:cb:83:4d:05:29:00:76:55:24:a5:39:76:
         89:f0:3b:3c:5c:42:22:6e:d5:d7:23:81:15:98:35:d0:a6:f3:
         30:ad:3d:5b:54:3c:74:3a:b5:bb:8c:15:88:a2:2f:52:4c:44:
         23:9b:68:06:55:4d:94:c3:6b:c4:c2:66:ed:5f:14:4f:e3:76:
         50:63:45:bc:23:48:0f:26:12:1f:fe:1c:9a:d2:00:a7:a5:ec:
         f0:1f:73:de:db:73:9f:04:d9:35:78:af:f6:2f:cc:4d:b9:d5:
         92:9e:37:61:5b:be:65:14:b0:08:17:09:da:86:23:40:0b:7a:
         09:4d:64:1b:6a:b8:5d:4e:fe:05:5f:2b:4e:b6:d4:3c:f9:e7:
         7b:07:e5:0d:b3:8b:45:85:49:bf:dc:82:0b:a1:f2:a1:66:39:
         f4:31:48:c6:8a:ed:ca:9c:fc:0f:c9:c9:ef:f2:8a:34:a5:82:
         90:f4:ba:7d:77:f7:8e:03:57:80:1c:26:68:71:48:e4:18:54:
         6d:a5:f1:62:ad:7c:6a:76:fc:92:52:b0:c6:7f:17:64:81:04:
         cd:28:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----