Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa
File:                     tJY2TIUWla659yWQ7pR8ia_CkyY.roa (raw, json)
Hash identifier:          ZoI0+XnzthdFN3w1SZZxrFk97YnzxRXmrIjAya2ZSrM=
Subject key identifier:   B4:96:36:4C:85:16:95:AE:B9:F7:25:90:EE:94:7C:89:AF:C2:93:26
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       018570B08B7AB2E49EDBBBD4B5EB93A43F6E
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa
Signing time:             Mon 02 Jan 2023 04:14:56 +0000
ROA not before:           Mon 02 Jan 2023 04:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43044
IP address blocks:        80.95.24.0/24 maxlen: 24
                          2a02:7900:ff01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:8b:7a:b2:e4:9e:db:bb:d4:b5:eb:93:a4:3f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Jan  2 04:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b496364c851695aeb9f72590ee947c89afc29326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:76:fe:22:af:eb:7c:f5:97:cb:17:71:f3:
                    58:b9:41:d3:86:65:81:b0:c5:4c:2b:04:72:36:09:
                    c4:01:44:96:12:dc:5a:22:49:dc:ca:45:79:95:0f:
                    6a:02:be:e1:53:47:48:5f:f4:f1:13:61:92:36:16:
                    72:b0:49:ca:62:d2:af:f6:39:6d:13:b4:18:86:ec:
                    3f:fa:3d:0e:e5:e0:60:60:b0:63:28:49:f0:f3:d5:
                    e0:f0:ac:0c:a2:e3:a1:a8:5e:44:57:2a:35:5f:31:
                    44:ac:ec:84:d0:ae:d3:7f:5d:6b:eb:f9:80:f7:48:
                    fa:8d:f0:a3:52:4c:de:1e:72:ff:bb:7e:71:87:0f:
                    e9:e4:fd:79:2a:2f:cf:5b:5b:d3:34:02:3c:71:d6:
                    9e:78:22:ec:de:51:a6:2e:15:07:f1:8e:c6:d7:c1:
                    61:17:cf:d6:e7:ff:82:9b:1b:a8:b8:68:5a:5f:b1:
                    73:e1:c3:05:78:69:6b:95:0b:73:51:45:c6:a8:3e:
                    c6:3c:0c:79:2b:90:d3:8b:e6:14:07:cd:29:2a:8b:
                    1f:ca:a9:cf:78:e3:16:43:98:c8:51:5d:42:71:35:
                    f2:eb:fd:ea:7b:4a:7d:58:5d:26:d4:c0:74:b4:41:
                    bf:a7:57:2b:39:ba:9b:ce:fa:34:9f:5d:31:ef:ac:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:36:4C:85:16:95:AE:B9:F7:25:90:EE:94:7C:89:AF:C2:93:26
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/tJY2TIUWla659yWQ7pR8ia_CkyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.95.24.0/24
                IPv6:
                  2a02:7900:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:57:b8:1c:0b:cd:94:7b:b8:d1:ee:10:6a:b9:af:71:26:2e:
         45:e6:f4:25:28:b2:6a:0d:c4:b1:d9:c7:49:48:fe:f7:3b:ec:
         83:7a:ff:04:69:9e:09:90:61:66:88:c4:53:ad:9d:9c:04:c1:
         03:85:50:06:19:04:50:1d:d7:da:03:2e:06:bd:b3:7e:c6:bd:
         6d:27:09:5d:23:d6:c8:6f:58:0d:2c:21:b6:a1:f4:86:bc:8f:
         ea:b8:5a:82:66:06:92:63:65:43:c5:6c:d5:71:ae:b7:6e:38:
         73:ce:14:e5:9e:3e:3c:5b:d7:a7:05:d4:25:b1:3c:cb:45:7f:
         96:a4:8c:1d:79:73:47:71:bb:e4:91:06:71:c4:bc:29:19:7f:
         89:ab:24:ba:67:d5:9c:2f:aa:bd:9f:6c:5e:ae:c3:26:ce:80:
         35:ee:3a:93:c9:97:6a:63:71:97:ff:a6:54:56:3b:09:ca:d2:
         44:06:4b:63:5d:fb:a0:d7:6d:72:71:be:be:f7:76:35:38:d9:
         8b:7b:23:ff:e5:3a:30:c6:0c:f7:34:5b:95:17:f1:57:79:ec:
         e5:94:96:b7:d1:63:a1:8d:4f:4c:f1:ca:39:82:38:1b:fc:11:
         4d:c1:b2:e4:bb:77:31:d9:31:bb:11:37:4b:e7:7f:84:56:e2:
         32:4d:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----