Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa
File:                     RS3Ak5Me683bUnUIHEpnCImLm7A.roa (raw, json)
Hash identifier:          NpZDCWnR+Amwv+xzPN8M8TU8LGf47SRRr9vO0kyLo7s=
Subject key identifier:   45:2D:C0:93:93:1E:EB:CD:DB:52:75:08:1C:4A:67:08:89:8B:9B:B0
Certificate issuer:       /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial:       01857227F3F1252FBBB932A42BCA794C1D7C
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa
Signing time:             Mon 02 Jan 2023 11:04:59 +0000
ROA not before:           Mon 02 Jan 2023 11:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16089
IP address blocks:        79.110.60.0/24 maxlen: 24
                          2a0c:3bc0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:f3:f1:25:2f:bb:b9:32:a4:2b:ca:79:4c:1d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
        Validity
            Not Before: Jan  2 11:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=452dc093931eebcddb5275081c4a6708898b9bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:34:52:61:2d:4c:f7:cf:d2:57:12:a2:13:8f:
                    21:19:b9:17:b3:1e:0a:b8:d1:b9:0e:05:ac:e4:ae:
                    8a:18:f7:ac:0f:73:0c:a7:c9:56:9c:e0:1e:9b:74:
                    b6:45:9a:9b:6b:8f:96:82:a3:79:98:9b:b0:50:78:
                    7c:70:90:64:15:12:bf:fa:76:97:27:a5:d9:e1:6a:
                    db:ea:37:77:1b:93:32:8c:94:b0:d5:ea:d2:8f:5b:
                    34:58:a7:23:60:eb:7f:82:ce:14:c8:e3:7c:bf:be:
                    d5:b1:fc:fd:f2:d2:0c:f1:0d:eb:66:41:70:6c:44:
                    85:e6:b8:39:e5:5f:c1:07:70:bf:cb:e9:aa:be:e3:
                    ca:03:4d:c8:c4:a9:f5:e5:92:9b:b8:dc:1a:c6:be:
                    0a:71:92:27:71:7e:d7:c0:88:b4:50:67:91:51:b4:
                    70:03:99:d4:d0:00:8f:ef:ed:29:35:fd:25:4e:f6:
                    0e:b0:8c:7a:e8:d4:36:07:da:29:5e:fb:bb:b7:d5:
                    97:cf:70:0f:1b:dd:12:41:45:8b:02:5d:d7:83:ec:
                    3e:c1:a5:8b:ef:5b:40:b2:25:ec:76:7b:99:92:a0:
                    71:2e:72:7c:54:42:30:f8:92:61:bc:f4:a1:1e:6e:
                    f5:bc:e6:f8:97:3f:57:75:51:0a:8f:f6:d7:26:40:
                    df:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2D:C0:93:93:1E:EB:CD:DB:52:75:08:1C:4A:67:08:89:8B:9B:B0
            X509v3 Authority Key Identifier:
                keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/RS3Ak5Me683bUnUIHEpnCImLm7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.60.0/24
                IPv6:
                  2a0c:3bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:82:1e:1c:61:0c:6b:0d:04:96:af:82:b5:f5:03:2e:d8:
         d8:da:4e:5d:d3:49:52:ca:70:5e:18:64:07:0b:d5:a9:1e:c3:
         d6:2a:1c:56:5c:24:13:b6:d3:36:f1:3c:34:e2:05:48:25:af:
         13:87:6b:94:b3:74:13:9a:9e:04:0d:49:8c:d8:40:4a:48:c3:
         40:fb:67:2d:2d:26:99:21:73:02:af:e4:06:ee:77:b8:cd:03:
         48:4b:d5:ee:ee:61:5b:32:4e:c8:37:1b:30:8b:99:a2:3d:5b:
         fd:75:d6:de:4b:a5:8d:d6:9d:d5:ca:0d:5d:39:a6:be:19:a2:
         68:1e:8f:a0:d4:f1:87:df:0e:fa:04:b3:1b:a9:f8:5a:32:34:
         9b:32:a9:a3:23:f8:2a:f4:90:af:58:91:c2:94:89:00:ea:a2:
         3a:f0:46:3f:91:4b:fe:50:ab:1e:65:91:95:33:31:b2:ee:80:
         ba:ba:a7:75:0d:74:d2:be:0e:ac:8d:9f:a7:c8:60:c9:b4:45:
         21:14:3f:8e:12:cc:8b:e2:e6:d9:7f:94:c7:a7:78:f6:46:03:
         a2:64:07:fb:46:7d:82:75:66:48:bb:2a:f9:8c:61:26:ec:76:
         ec:8c:36:16:d1:b9:30:f6:34:91:b2:69:18:2c:12:9d:c6:01:
         f2:2f:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----