Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/jayk7JuSFStqWJUZ--QV6T9R-4U.roa
File:                     jayk7JuSFStqWJUZ--QV6T9R-4U.roa (raw, json)
Hash identifier:          WS6hASicUSvV8h8PBth/FlV/GWqKjKjc/DhgX93afF0=
Subject key identifier:   8D:AC:A4:EC:9B:92:15:2B:6A:58:95:19:FB:E4:15:E9:3F:51:FB:85
Certificate issuer:       /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial:       01856EB8EDAF7DA98A8FC49DDF31B61318F4
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/jayk7JuSFStqWJUZ--QV6T9R-4U.roa
Signing time:             Sun 01 Jan 2023 19:04:51 +0000
ROA not before:           Sun 01 Jan 2023 19:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39312
IP address blocks:        195.90.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:b8:ed:af:7d:a9:8a:8f:c4:9d:df:31:b6:13:18:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
        Validity
            Not Before: Jan  1 19:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8daca4ec9b92152b6a589519fbe415e93f51fb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:ce:18:9b:f3:e4:25:5e:0e:41:09:be:0b:
                    00:0d:55:14:4b:65:3a:26:9f:ba:92:ab:e1:b5:66:
                    2c:2d:e5:0d:3d:1a:7c:84:95:7e:4a:d0:fa:73:64:
                    34:ad:9f:42:38:55:d6:fd:37:db:8f:e2:00:93:16:
                    84:bc:62:a2:3e:e8:e4:21:46:e0:58:bd:8d:8d:b0:
                    3e:50:8c:44:6c:1f:e7:30:b6:45:68:ac:55:88:44:
                    51:a0:b8:ec:04:c7:a3:0d:e5:0d:ad:30:5a:a3:f2:
                    e3:43:48:ba:b8:9e:a7:3c:ea:96:5a:a9:4a:45:7b:
                    2d:71:c1:0c:b1:ad:2d:ee:f7:57:61:13:f9:e0:fe:
                    7d:bc:01:7e:8d:e8:4c:9f:d4:89:7a:94:40:08:62:
                    b5:d0:c6:6a:9d:84:95:8d:28:2f:3a:5c:b3:d6:22:
                    70:0b:f1:fd:fe:8e:06:43:65:c4:94:6b:ad:2e:bb:
                    44:ff:55:f9:65:bc:61:32:c5:b6:cb:ef:38:f4:b2:
                    21:88:9b:0d:3b:39:02:02:90:f8:60:8c:62:07:bf:
                    09:7f:b9:cb:2a:b1:46:98:b2:d0:2f:47:c7:39:ff:
                    c0:d5:3b:c9:ad:1a:b9:99:0b:f8:34:e8:1d:dc:f6:
                    85:74:b5:80:ae:03:d6:92:3f:6d:51:28:8d:10:e3:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AC:A4:EC:9B:92:15:2B:6A:58:95:19:FB:E4:15:E9:3F:51:FB:85
            X509v3 Authority Key Identifier:
                keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/jayk7JuSFStqWJUZ--QV6T9R-4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.90.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:43:a4:46:8c:3d:49:56:b9:08:62:f8:c5:59:2e:7c:51:
         16:1c:9f:84:58:e6:89:95:aa:ee:b2:2b:e4:75:7f:cf:2f:da:
         d2:75:49:9e:42:f3:34:ef:f9:f6:69:8b:46:bc:da:c4:39:d5:
         47:89:0b:72:69:25:ae:ee:66:41:ac:fd:e5:f6:47:77:e2:80:
         f7:40:81:2c:3d:a4:c0:db:a8:4c:5a:3a:bb:3c:83:ba:8e:8c:
         8d:b9:43:9e:be:ac:a4:7b:85:3e:43:38:8f:10:05:85:9d:d0:
         b5:42:26:a0:12:69:4d:60:1d:a5:f7:ce:8d:c4:31:67:e2:34:
         a8:02:b6:ad:81:f1:be:1f:f0:84:4c:a5:3c:53:ca:e0:b7:2d:
         12:af:18:53:1f:a0:f1:ae:8f:26:32:bc:0c:ac:27:cf:aa:4f:
         b2:eb:81:71:2a:0f:20:19:f7:b2:fb:34:13:7c:41:82:dd:dc:
         bc:56:c4:2d:59:fd:e1:56:de:41:5e:73:be:64:60:6e:91:07:
         e2:3f:e7:15:3e:92:f2:b2:4e:88:12:3c:98:b1:74:fd:79:93:
         55:a8:79:3f:65:be:75:53:94:c6:4a:03:31:70:55:42:2d:1b:
         ce:e2:d9:eb:b8:2e:bf:60:3b:55:82:db:94:62:0e:05:79:f5:
         df:ae:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----