Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/YKvBHlP1D0iAe3KLE5lCriQ51ug.roa
File:                     YKvBHlP1D0iAe3KLE5lCriQ51ug.roa (raw, json)
Hash identifier:          56f3hfK+1P1F3CT2FbzfzeFLNvkGZ9LZqkgj7X4mjS4=
Subject key identifier:   60:AB:C1:1E:53:F5:0F:48:80:7B:72:8B:13:99:42:AE:24:39:D6:E8
Certificate issuer:       /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial:       0185707058C28DA3A0381C6E47DF0EC4EB67
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/YKvBHlP1D0iAe3KLE5lCriQ51ug.roa
Signing time:             Mon 02 Jan 2023 03:04:48 +0000
ROA not before:           Mon 02 Jan 2023 03:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209578
IP address blocks:        160.20.96.0/22 maxlen: 22
                          2a07:cf40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:58:c2:8d:a3:a0:38:1c:6e:47:df:0e:c4:eb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
        Validity
            Not Before: Jan  2 03:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=60abc11e53f50f48807b728b139942ae2439d6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:e4:37:3f:aa:1e:a2:51:05:33:77:2b:84:
                    30:22:ae:0e:2a:10:ac:e9:c0:57:8e:db:bd:7a:9d:
                    a0:e7:66:70:25:f0:2c:ce:0b:88:33:30:e4:61:a6:
                    48:21:de:49:eb:ea:c6:d8:47:4e:30:ef:c0:a4:5c:
                    8a:8c:c2:88:6a:dd:7e:e2:3f:7a:8f:cc:df:bf:9a:
                    8a:04:d9:40:f2:ea:dd:4b:cc:00:09:bc:4e:72:d5:
                    59:2a:85:02:a1:16:e5:88:de:22:6b:32:a8:95:71:
                    b1:0f:07:1c:14:64:7a:69:ea:61:66:ac:bd:e3:ba:
                    94:a8:22:94:50:4f:cc:07:c1:72:a1:ac:81:6d:b8:
                    8f:2a:39:27:ef:9e:a0:46:50:22:d3:2e:89:05:e8:
                    e7:5c:b7:13:37:0f:ef:1f:51:98:01:0a:9b:96:aa:
                    00:1b:be:a9:e3:b1:7f:09:47:aa:a4:1b:0d:05:f3:
                    65:a9:16:98:5f:1a:0c:c1:95:3d:9c:10:9a:8d:97:
                    b2:5e:09:14:19:85:5e:94:ed:a1:8f:f9:92:5b:b4:
                    84:ad:4f:49:a3:0f:b1:bc:17:80:fd:21:3e:ee:43:
                    f8:dc:19:ef:e0:69:75:95:30:88:51:d6:35:69:bf:
                    c9:76:01:da:2c:bc:1d:b5:cb:06:8d:73:02:cc:e4:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:C1:1E:53:F5:0F:48:80:7B:72:8B:13:99:42:AE:24:39:D6:E8
            X509v3 Authority Key Identifier:
                keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/YKvBHlP1D0iAe3KLE5lCriQ51ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.96.0/22
                IPv6:
                  2a07:cf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:7a:25:cc:0e:a9:9a:75:9c:98:c7:ea:de:94:e7:7f:cc:
         4d:a9:21:50:f3:a4:b1:fe:95:79:e2:53:39:29:17:a5:c5:32:
         bb:16:3b:52:3f:7f:c9:19:f2:f1:72:cd:31:b8:4b:0e:b3:7a:
         30:be:75:ee:f9:97:5b:fa:6c:08:e7:c3:a1:98:21:4c:65:81:
         6a:d0:4a:18:88:d2:a5:c2:9e:20:62:d6:45:3c:c4:6d:ed:98:
         42:66:45:2d:b2:a9:2d:03:42:63:3f:e5:d1:00:d4:3b:4f:02:
         de:16:ee:4d:09:06:be:43:75:d5:c7:92:79:af:b6:64:9b:b0:
         15:85:63:f2:87:48:b2:ba:c9:c3:a9:d3:89:ed:7b:62:f5:c5:
         02:37:05:73:df:d4:8d:b5:ce:0f:4a:ec:eb:96:3a:38:24:c9:
         95:6c:27:42:15:c3:91:85:b6:51:1b:f9:ab:56:5d:3f:3c:f6:
         00:07:eb:f7:48:f8:6b:e0:91:c3:3f:e2:7b:5d:29:59:8d:6d:
         3d:b9:a6:39:7a:a3:81:bf:6d:cd:41:bb:c7:15:02:c3:94:c1:
         06:05:9c:7f:5b:c3:53:c2:08:60:cf:b5:6b:28:d5:50:ba:5c:
         78:b2:c2:b9:90:5d:2c:ec:aa:af:aa:e4:0e:d9:d9:29:d8:a1:
         4a:b5:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----