Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa
File:                     hSCECqmVs1QbZ4buv_dqqlGUqKY.roa (raw, json)
Hash identifier:          VMWBmrjDRsgKObbLAUmu6t6iy+QDy30NrewJJEexy7I=
Subject key identifier:   85:20:84:0A:A9:95:B3:54:1B:67:86:EE:BF:F7:6A:AA:51:94:A8:A6
Certificate issuer:       /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial:       0187B369B86F10E44C2ECC394A834D1EBCA0
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa
Signing time:             Mon 24 Apr 2023 13:17:42 +0000
ROA not before:           Mon 24 Apr 2023 13:17:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        80.67.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b3:69:b8:6f:10:e4:4c:2e:cc:39:4a:83:4d:1e:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
        Validity
            Not Before: Apr 24 13:17:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8520840aa995b3541b6786eebff76aaa5194a8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:36:64:f4:fd:ff:94:94:b0:93:47:ab:56:
                    78:c8:a4:aa:aa:92:c9:3d:f7:e1:c8:7e:53:9f:95:
                    2b:34:06:aa:4b:4a:f3:90:eb:e5:2c:10:c3:80:49:
                    04:17:60:6a:0a:d7:8b:1a:0e:74:09:46:b7:79:9d:
                    3e:21:aa:0a:62:7f:8d:35:74:15:b2:7d:90:39:d7:
                    a3:3c:e3:3f:fd:07:88:ee:64:8e:42:f0:30:b3:ca:
                    d8:96:e2:13:29:6c:d1:bf:00:a0:41:b0:9e:21:d9:
                    52:bd:31:b8:aa:93:c3:1e:fb:23:5b:32:2f:55:72:
                    be:33:33:17:11:59:77:e1:fe:03:7b:15:37:c5:c9:
                    5c:ba:c3:bc:88:33:a1:c7:67:e9:14:66:39:fb:06:
                    96:97:32:28:60:f2:5d:30:4d:1c:3b:f6:ea:80:4b:
                    56:97:38:2e:4c:a3:39:17:a8:c9:04:2f:fd:90:d6:
                    55:b6:63:9b:b2:5b:92:f8:83:a7:cb:c9:9f:41:f5:
                    1f:07:7a:89:6b:af:ba:fc:ba:e9:a8:ec:d0:44:4f:
                    c0:8d:02:bd:96:43:8d:8a:69:a8:70:b9:3a:72:64:
                    f2:f8:71:21:ea:e4:20:8a:de:b3:b5:66:14:59:35:
                    14:54:21:b2:a1:93:00:73:bf:43:e4:b3:c4:30:75:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:84:0A:A9:95:B3:54:1B:67:86:EE:BF:F7:6A:AA:51:94:A8:A6
            X509v3 Authority Key Identifier:
                keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/hSCECqmVs1QbZ4buv_dqqlGUqKY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:09:a6:4a:53:82:ea:73:d8:7d:bf:94:35:fb:07:7f:42:8a:
         63:b3:b5:02:c4:eb:c4:3d:b1:80:30:49:36:53:13:0b:cd:00:
         7b:47:f4:9f:02:d8:99:3b:c3:95:26:46:4d:df:c6:16:cc:99:
         23:ea:a0:77:d4:57:86:69:09:d9:5a:84:c4:15:40:28:e4:95:
         d2:76:17:82:d7:16:e3:f1:6d:be:ef:cd:6e:4d:4e:aa:d0:63:
         3c:ce:5e:1f:ec:30:2a:0b:58:ac:31:d8:02:94:19:36:8b:1a:
         93:98:b0:60:03:e0:01:6e:4c:61:6f:fd:0a:ef:e1:13:66:d2:
         79:50:3e:75:1a:9e:95:e4:5c:36:e8:f5:d8:50:97:6e:6b:2f:
         b5:65:96:fb:8e:e4:a4:ab:4e:01:1d:69:e3:74:4b:cb:23:1e:
         11:e5:15:ec:94:32:9f:be:da:e6:92:37:76:ae:34:9a:04:dc:
         c8:93:d1:84:61:68:00:4d:1f:41:62:92:85:9d:b6:4a:ad:f7:
         d1:65:f4:6d:ac:ae:7e:9b:81:5b:bc:48:5f:b0:88:c8:d7:a1:
         8c:28:3d:00:ee:74:31:cd:89:69:ea:48:e5:93:1c:32:a7:22:
         32:79:8e:a6:6b:ca:b5:12:4a:16:36:74:b3:92:e3:b2:58:63:
         f3:7c:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----