Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa
File:                     tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa (raw, json)
Hash identifier:          jjLz6Nf+SJYvSgDJABDchetlZNJlU2RL2MwnRd8Ul04=
Subject key identifier:   B5:23:11:D9:8F:DF:10:02:1A:04:6D:6F:4B:12:1F:F7:93:C1:62:D9
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018570399054CF52A45A0F6C3E7BD11D9412
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa
Signing time:             Mon 02 Jan 2023 02:04:58 +0000
ROA not before:           Mon 02 Jan 2023 02:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44966
IP address blocks:        212.16.71.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:90:54:cf:52:a4:5a:0f:6c:3e:7b:d1:1d:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  2 02:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b52311d98fdf10021a046d6f4b121ff793c162d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:d4:83:db:2d:86:f3:74:a2:44:70:df:58:
                    d8:29:75:56:d4:52:7a:26:3c:91:b3:d2:29:c3:20:
                    15:25:e4:c2:fd:1c:a8:f8:13:8d:62:44:1d:eb:69:
                    a4:ba:9c:20:36:ff:d3:25:7c:1b:0e:81:02:82:07:
                    c3:cd:51:8a:72:89:f4:3e:3e:8d:5d:6a:c2:1c:36:
                    84:03:de:46:df:b0:e7:e1:88:59:49:06:67:be:81:
                    fb:8c:ed:88:1d:ae:57:3b:1f:3c:ef:83:4b:51:40:
                    18:1f:9d:1c:bb:7b:cb:18:79:61:5f:60:3c:d1:8c:
                    a7:b1:f3:16:9c:ac:12:53:7a:2d:e4:1e:9d:f4:3c:
                    c6:aa:4d:f0:7a:c7:0e:7a:de:06:94:89:91:0f:dd:
                    db:2e:c9:71:bf:81:d0:51:c0:bc:83:96:ed:48:98:
                    cc:ec:fe:86:0a:32:e4:f1:d7:c6:0d:45:0f:e9:a3:
                    cf:48:99:36:bf:b3:31:64:e4:75:39:68:53:2a:79:
                    c5:b3:b3:0b:d8:a0:b5:7c:03:08:37:5e:2d:72:c8:
                    49:69:6a:72:3d:52:22:74:52:a8:49:7d:de:85:57:
                    5c:06:32:89:b4:3f:4f:12:43:4c:0a:d1:15:4e:dd:
                    58:52:e1:18:87:f2:39:22:dc:12:ce:bd:db:96:18:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:23:11:D9:8F:DF:10:02:1A:04:6D:6F:4B:12:1F:F7:93:C1:62:D9
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.16.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:12:a7:52:9b:09:45:e2:21:77:04:3a:1f:4c:9a:a6:40:36:
         87:4c:c8:ce:45:c6:a0:da:58:31:9a:92:b4:28:91:54:22:27:
         9b:2a:28:65:05:e0:41:d2:5a:7e:23:83:aa:cf:c1:d3:2e:b7:
         72:3d:32:d7:c3:2e:f9:4e:e3:b9:ec:31:64:b3:df:6b:d4:97:
         76:b7:44:72:96:77:06:49:31:9a:63:56:63:0e:16:28:26:01:
         b0:49:01:d4:43:24:7f:eb:b3:e6:5f:42:0b:7e:2b:3d:f3:95:
         6c:48:b3:d3:22:d2:69:a3:df:bd:12:d1:c6:89:2c:08:c0:37:
         0c:63:23:64:df:96:f9:e5:7b:c2:7b:6a:7f:53:d7:b9:50:0c:
         3c:1c:da:95:68:1b:ec:10:8a:4f:ac:23:db:bf:0b:53:18:97:
         4c:b1:56:22:44:8e:6a:eb:22:31:61:2b:84:06:70:f4:d6:df:
         3d:be:ba:e3:fa:98:47:f4:e1:01:36:4f:43:18:dd:b0:74:5f:
         2f:a4:83:ac:4c:2b:45:5a:dc:6e:a3:f3:68:69:f0:b3:99:9c:
         c2:63:c1:c5:cb:06:3a:54:12:d4:64:13:64:d1:db:8d:fb:6a:
         42:af:57:dd:7a:f6:08:da:b4:77:f8:83:80:12:2b:5b:e0:73:
         1d:6f:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----