Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa
File:                     PZs9vVU-kQOQfjuSGWK8Veyjebs.roa (raw, json)
Hash identifier:          Ex5pWflFGMN/nqA9fQXqwLhhlI/56Oq7RB+bzu6KvzI=
Subject key identifier:   3D:9B:3D:BD:55:3E:91:03:90:7E:3B:92:19:62:BC:55:EC:A3:79:BB
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       01864407D03099675B37034D75C1EAAC223F
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa
Signing time:             Sun 12 Feb 2023 05:10:07 +0000
ROA not before:           Sun 12 Feb 2023 05:10:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25003
IP address blocks:        80.74.108.0/23 maxlen: 23
                          2a02:23b8::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:44:07:d0:30:99:67:5b:37:03:4d:75:c1:ea:ac:22:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Feb 12 05:10:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d9b3dbd553e9103907e3b921962bc55eca379bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:82:71:2b:61:85:dd:5e:d7:b2:cd:6a:ac:81:
                    b1:8d:e4:d3:ba:ad:6d:8a:fd:0f:68:ca:5c:bd:33:
                    7c:c3:6a:ba:9e:78:04:d9:6a:44:68:4e:79:4c:7c:
                    27:c3:8c:b1:0f:dd:47:1f:55:2c:42:2d:74:fd:29:
                    68:2d:14:5c:87:11:56:17:13:98:9c:97:fc:f3:14:
                    6c:53:7d:35:51:5f:a6:aa:82:19:0c:07:00:b1:87:
                    4f:bf:04:2b:c1:0a:a5:52:50:07:b4:ad:52:56:11:
                    58:a0:b9:91:b6:5f:a3:96:eb:7d:06:23:a4:21:69:
                    a1:16:33:49:75:66:f5:1d:8e:a5:96:c4:f5:3e:c5:
                    80:75:92:87:0b:0f:b5:b7:29:e4:5c:80:6e:47:c6:
                    95:aa:a4:7f:fa:09:b5:30:97:55:43:3a:54:a6:ba:
                    97:31:bc:b3:1a:da:75:1a:ce:a2:9c:73:f9:8c:57:
                    c6:72:a6:b8:f5:3a:13:78:74:a1:d2:14:90:d0:bb:
                    a6:a4:52:5a:a2:59:eb:b9:95:bd:d9:1c:24:5b:8c:
                    ed:ae:b9:f5:61:19:d4:86:ae:fe:8c:27:1a:62:97:
                    8d:5c:f5:c9:cc:8c:a3:6a:d3:ef:02:d4:4a:6f:2e:
                    28:52:cc:54:86:f3:57:0c:68:98:da:c8:17:13:79:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9B:3D:BD:55:3E:91:03:90:7E:3B:92:19:62:BC:55:EC:A3:79:BB
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.74.108.0/23
                IPv6:
                  2a02:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:61:14:56:40:a8:da:08:4d:e7:c0:5f:a0:e8:65:5e:5b:
         fc:bb:0b:fc:ca:69:ac:fb:a0:46:52:71:59:05:01:c8:8c:64:
         e3:d9:62:61:ca:45:c2:07:8a:ab:c0:29:8c:c2:a4:d1:85:36:
         b9:cc:0f:57:5a:6f:b2:91:d3:68:dc:cb:f4:3d:64:0b:4a:93:
         61:ca:e8:a0:a7:10:6c:3b:85:53:b4:12:32:2c:46:48:d3:07:
         d2:c8:d0:8a:ac:81:01:ba:c3:a8:00:3e:50:0c:bd:7a:40:3a:
         19:27:48:1a:2a:11:58:da:fe:06:06:98:5a:12:da:98:e9:ac:
         c5:e5:bc:a2:9d:55:6c:fe:7d:ca:ff:f1:98:5d:fb:b3:08:f3:
         6f:c1:69:26:14:02:5c:4c:f3:2b:c4:4c:da:83:93:a4:c6:99:
         3d:57:6f:8b:d4:9f:b6:01:0e:52:13:30:e4:5e:36:02:01:8d:
         21:d9:62:21:5f:54:b8:4f:23:7c:f9:a4:9b:11:76:07:dd:93:
         8f:0b:cf:23:1a:99:87:1a:36:ba:23:d7:a9:c5:b8:ac:d1:41:
         e8:cd:f5:9c:4f:7a:5d:df:b2:cf:71:cb:08:34:02:18:76:c3:
         61:88:50:5d:df:88:b4:75:11:f7:55:f0:3a:b1:a5:1b:ad:d6:
         be:9b:69:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----