Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa
File:                     JDqqSJU28B4fWPLaMUIIUtoOLSc.roa (raw, json)
Hash identifier:          FU6uJwf4QgQS618qZDYCN9BEouUzJfsAjVYCI6OjitI=
Subject key identifier:   24:3A:AA:48:95:36:F0:1E:1F:58:F2:DA:31:42:08:52:DA:0E:2D:27
Certificate issuer:       /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial:       01856D53CC735D4889DE5A86E3FDA4448FB8
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa
Signing time:             Sun 01 Jan 2023 12:34:46 +0000
ROA not before:           Sun 01 Jan 2023 12:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59480
IP address blocks:        95.215.220.0/23 maxlen: 23
                          2001:67c:1038::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:cc:73:5d:48:89:de:5a:86:e3:fd:a4:44:8f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
        Validity
            Not Before: Jan  1 12:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=243aaa489536f01e1f58f2da31420852da0e2d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:cc:aa:e9:ba:84:8c:1f:29:a4:6e:7f:3f:
                    b9:59:7d:3e:08:54:4c:f9:3c:e6:fd:f9:a1:a4:03:
                    af:d1:b0:7c:30:16:06:c8:c1:43:5d:7e:4f:a2:cf:
                    80:b8:32:cb:71:dc:6b:7b:29:08:68:39:df:c6:05:
                    e1:d2:35:87:a5:4d:27:b5:bc:e6:3e:3c:c3:d1:52:
                    3f:0d:3b:03:78:15:2a:97:44:95:3d:98:49:28:5c:
                    c7:da:0b:08:b3:19:80:a1:98:99:47:8a:13:bf:92:
                    a2:5f:d8:9b:15:c5:cf:38:89:2c:30:37:c9:c4:b3:
                    c1:e9:8f:dc:69:9e:03:f7:1c:e8:dd:ca:6a:39:f5:
                    5d:ce:5f:91:f0:5d:a2:b7:28:55:39:ab:63:8c:cc:
                    54:92:8b:61:7d:52:91:8c:1f:75:d4:dc:4a:23:71:
                    3e:71:21:d7:42:89:7b:ea:ab:20:0c:86:dd:1b:f7:
                    4e:0a:b9:69:e3:51:25:84:a3:25:c1:d3:66:2f:26:
                    fc:7e:6b:a8:41:62:34:e0:0b:0b:b2:04:fc:6a:57:
                    64:b9:fc:7a:8e:79:ff:4c:a6:31:c2:9a:15:14:76:
                    81:11:d6:dc:a3:34:d2:6c:ce:75:db:2a:b5:75:77:
                    3d:9e:ce:f2:d3:bb:b5:76:16:93:b5:c4:89:28:59:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:AA:48:95:36:F0:1E:1F:58:F2:DA:31:42:08:52:DA:0E:2D:27
            X509v3 Authority Key Identifier:
                keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/JDqqSJU28B4fWPLaMUIIUtoOLSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.220.0/23
                IPv6:
                  2001:67c:1038::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e7:a2:a4:b2:66:2d:d8:f1:11:39:65:d8:d1:21:95:c5:f3:
         e6:5b:b8:88:7f:b5:9c:e6:6a:5e:26:23:5b:4f:2c:b4:42:50:
         ca:16:d3:b7:06:0c:ed:71:8e:dd:71:73:6d:b0:cb:bf:63:c5:
         8b:b6:5e:df:32:c6:70:4a:db:6e:f4:7c:fd:e7:42:2f:c8:88:
         62:42:e9:a7:a1:84:79:a7:b8:2e:af:4c:f4:80:a8:e2:2a:15:
         fc:da:00:f7:06:ad:0e:78:0f:b3:5d:f0:e4:1e:8e:ce:d6:88:
         d0:ed:f3:05:f2:8e:91:e3:cf:21:e4:0c:a2:db:eb:52:c1:78:
         52:07:8a:21:0f:6a:5e:72:6a:bd:0f:f0:47:68:53:a1:70:69:
         bf:87:4a:9d:76:df:0d:ef:f0:bb:30:4a:54:9e:e6:f1:25:72:
         29:5a:b0:a3:a6:c9:c8:22:c5:07:a7:f3:67:0a:b0:3b:ad:6e:
         06:30:54:a9:6f:13:33:43:ec:51:cb:b1:46:8b:2d:32:f4:63:
         5b:4e:c7:0e:29:74:79:65:16:94:06:51:bc:5d:b5:18:34:fa:
         a7:4c:6a:30:86:59:bf:03:96:d5:12:6e:f9:92:d6:5c:e5:42:
         39:1b:5a:a8:14:95:ac:f3:61:95:62:4f:58:ca:1b:b5:6f:cf:
         62:37:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----