Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-utFkbt7XrHFE2_QZiBIyKIxYvc.roa
File:                     1-utFkbt7XrHFE2_QZiBIyKIxYvc.roa (raw, json)
Hash identifier:          hXykOYxuzEmoVJDVbCwffdABUP5206BvCztjKvVPbZA=
Subject key identifier:   FA:EB:45:91:BB:7B:5E:B1:C5:13:6F:D0:66:20:48:C8:A2:31:62:F7
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       018571309B283F7BAE6F824D33E7CA3B8BD6
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-utFkbt7XrHFE2_QZiBIyKIxYvc.roa
Signing time:             Mon 02 Jan 2023 06:34:48 +0000
ROA not before:           Mon 02 Jan 2023 06:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31500
IP address blocks:        95.140.80.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:30:9b:28:3f:7b:ae:6f:82:4d:33:e7:ca:3b:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jan  2 06:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=faeb4591bb7b5eb1c5136fd0662048c8a23162f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:58:ec:e7:5a:1a:7d:48:a3:ab:e4:b0:62:5c:
                    f1:99:08:38:01:18:b8:12:4f:7e:89:f9:23:8d:77:
                    d8:e1:79:3f:9d:3c:dd:c2:41:33:d1:7c:22:50:80:
                    d4:0d:48:f9:c3:5f:29:fa:80:37:8b:4d:a2:eb:74:
                    4d:f2:24:0c:14:20:7e:c6:08:73:14:f1:de:0a:ce:
                    8b:05:0e:84:f0:1e:74:83:9a:bb:a0:1b:65:85:cc:
                    45:e3:42:64:f5:0d:ab:5c:88:b7:bc:5e:85:53:07:
                    7f:e3:af:0c:45:70:4f:28:cb:21:45:30:d8:d7:fa:
                    f0:2b:f2:35:5f:be:cd:a7:28:39:d8:15:c8:70:a4:
                    c1:b9:a8:d2:97:88:0d:46:9e:12:f8:46:32:24:12:
                    1e:e6:f6:33:a2:0b:a6:84:84:de:75:74:87:0b:95:
                    13:3e:2d:bf:62:c7:80:6e:a7:ae:d3:eb:ac:f1:0e:
                    f7:c1:ca:38:0d:36:32:c0:98:d8:7c:3e:0e:47:9b:
                    f5:c5:75:1a:4c:41:fc:ad:93:e0:87:43:19:99:55:
                    00:89:01:3c:f8:e4:5b:94:f3:bc:50:ea:c8:f1:a4:
                    3a:65:f0:6e:fb:82:66:25:ef:f2:8f:c4:21:cb:e2:
                    bf:79:54:a8:ce:47:7b:2d:55:dc:8e:c8:01:ed:08:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EB:45:91:BB:7B:5E:B1:C5:13:6F:D0:66:20:48:C8:A2:31:62:F7
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-utFkbt7XrHFE2_QZiBIyKIxYvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:2f:a8:2f:6b:f7:68:7d:9b:20:2f:11:58:60:4b:21:e8:
         bd:db:f9:2b:82:0c:55:8e:e1:4f:e1:62:30:13:04:4a:0d:3c:
         68:ea:7c:dc:e3:ea:a4:eb:df:d3:9c:16:b5:eb:91:51:36:65:
         75:81:2d:f7:ee:d4:69:e4:8f:8f:1d:f1:f9:af:0d:4c:00:13:
         0b:8f:6c:66:74:64:cb:4c:43:5c:51:e3:26:84:bc:eb:f1:34:
         73:b1:d5:1a:20:7c:33:8a:9a:95:f0:c6:8f:ec:be:ad:4c:5e:
         fc:43:01:9f:03:bd:bb:6b:d5:e1:94:a1:ba:43:c7:ae:04:4a:
         bc:3f:3a:c8:2e:1f:cb:c6:a7:bf:f4:cc:a2:3b:ab:55:03:48:
         7d:dc:c2:51:f3:e7:d1:4a:4b:f8:49:42:04:8a:64:83:da:98:
         90:fb:b7:c3:5f:a6:9f:75:42:17:44:b6:b4:e6:d7:8c:36:d8:
         0d:9c:9c:16:9f:fa:28:20:54:44:c1:e0:be:c3:42:cf:68:f1:
         49:6a:87:9b:ba:b3:0e:17:0f:d0:2f:3a:78:06:f1:69:7d:97:
         d6:a4:b3:6a:cf:2c:39:ed:a6:d7:fb:62:61:d4:85:6e:f8:4e:
         43:08:b1:fc:aa:9a:d0:3c:6d:1b:ed:1c:a7:0d:d8:8e:74:c3:
         2a:8e:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----