Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e2UXHOjNAtpduY_PMA0q-IlKkuM.roa
File:                     e2UXHOjNAtpduY_PMA0q-IlKkuM.roa (raw, json)
Hash identifier:          S9iFdhdaPxHAGAy5IFrOaGKEhY8HulAdQqQonCmAO0E=
Subject key identifier:   7B:65:17:1C:E8:CD:02:DA:5D:B9:8F:CF:30:0D:2A:F8:89:4A:92:E3
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018570FBC8842D495AF502A19DD8E216DFDC
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e2UXHOjNAtpduY_PMA0q-IlKkuM.roa
Signing time:             Mon 02 Jan 2023 05:37:07 +0000
ROA not before:           Mon 02 Jan 2023 05:37:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205597
IP address blocks:        80.77.27.0/24 maxlen: 24
                          2a01:367:ff0f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:c8:84:2d:49:5a:f5:02:a1:9d:d8:e2:16:df:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  2 05:37:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b65171ce8cd02da5db98fcf300d2af8894a92e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e4:fb:93:3a:be:b1:cf:6d:1c:f9:70:49:02:
                    33:48:07:cb:5f:ae:f8:b4:10:8e:85:54:c9:a4:31:
                    3c:d7:79:90:af:d0:34:36:f5:32:c3:53:ee:50:a1:
                    dc:37:9e:bb:87:e0:78:a3:eb:cd:4d:0c:c2:5b:fe:
                    e9:6f:a6:55:30:0e:4a:ce:fc:9f:72:69:f7:40:5f:
                    58:4e:8e:f2:c5:24:fd:10:c5:a8:d5:d2:22:12:31:
                    29:41:ae:34:80:c8:22:61:11:46:c4:81:a2:c8:5c:
                    7b:08:9f:ed:63:d2:4d:16:70:30:4c:86:ef:2e:73:
                    53:2a:61:38:c8:24:b1:8c:c5:6f:7f:54:03:d5:41:
                    65:da:48:b3:82:00:1a:31:bf:f4:1a:75:53:0a:f8:
                    3a:5b:cf:80:99:7d:09:1f:57:51:6a:93:a4:82:88:
                    35:14:5d:1f:04:6b:33:f3:c1:61:5b:38:5b:f1:cd:
                    14:70:c0:46:f3:a3:f1:47:de:1c:16:f4:83:49:e3:
                    1e:71:b0:2e:3b:8b:e9:3f:4c:3e:f8:09:27:1f:c0:
                    96:2e:84:b6:68:27:06:25:c4:31:63:e1:74:6e:f5:
                    70:8a:9e:54:56:c7:c4:67:d5:37:cc:ee:1f:4d:83:
                    02:34:5f:42:e6:d0:3e:f9:79:16:e3:48:f3:f4:12:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:17:1C:E8:CD:02:DA:5D:B9:8F:CF:30:0D:2A:F8:89:4A:92:E3
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e2UXHOjNAtpduY_PMA0q-IlKkuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.77.27.0/24
                IPv6:
                  2a01:367:ff0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:af:70:bf:e1:b8:6e:88:38:00:43:5f:54:f1:fb:d7:d2:
         38:8f:e4:7d:62:01:9d:ce:5a:86:67:68:74:69:02:50:f0:7e:
         53:53:e9:36:82:e2:7d:15:43:a5:e1:2a:db:9d:55:da:43:b6:
         3f:6c:3f:fc:47:e6:f5:e8:0e:5c:a0:08:8b:64:c2:26:eb:d1:
         cd:e2:32:20:a9:4f:4d:93:8b:94:07:54:36:52:cb:b5:41:3e:
         2d:3e:98:be:eb:d6:93:87:e2:23:71:6e:10:e8:7c:b5:ac:75:
         6a:df:78:18:3e:3f:a4:df:72:ac:b2:c1:17:a3:28:6c:1c:15:
         0c:4c:9c:a3:18:c5:e2:c8:7a:0c:07:f1:f6:36:2e:4e:68:3d:
         f7:1e:1a:f3:76:52:7b:96:e3:c6:d8:e6:2a:16:eb:c4:04:25:
         c1:2b:02:dd:06:6a:f6:94:3a:a5:ff:43:d6:5b:1b:ec:a3:f8:
         69:96:7f:b5:1a:64:ee:5e:b3:01:95:37:9a:1b:53:b8:ac:d7:
         6a:3d:e2:c3:a0:df:da:4f:d3:38:2f:46:4b:79:35:bd:8e:8a:
         eb:4e:64:f1:cc:98:4c:32:ac:ad:f5:61:f0:0b:ab:a5:5c:ef:
         c3:5b:03:41:a7:6e:e5:22:10:3a:5f:48:d9:51:f0:4f:eb:de:
         92:0c:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----