Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/AcuKiYaeFMEY7DwESNQjWaY1C7w.roa
File:                     AcuKiYaeFMEY7DwESNQjWaY1C7w.roa (raw, json)
Hash identifier:          o2F+wTVyBvJnWsKSlM+CdA88M0JqH6ZfIoiPbSwQgBE=
Subject key identifier:   01:CB:8A:89:86:9E:14:C1:18:EC:3C:04:48:D4:23:59:A6:35:0B:BC
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       01865F14164F3EF529A3496EFD2C000888AF
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/AcuKiYaeFMEY7DwESNQjWaY1C7w.roa
Signing time:             Fri 17 Feb 2023 11:13:17 +0000
ROA not before:           Fri 17 Feb 2023 11:13:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207021
IP address blocks:        2001:678:20::/48 maxlen: 48
                          2a02:850:ffe0::/48 maxlen: 48
                          2001:67c:1bc::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5f:14:16:4f:3e:f5:29:a3:49:6e:fd:2c:00:08:88:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Feb 17 11:13:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01cb8a89869e14c118ec3c0448d42359a6350bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:fd:d0:34:51:45:eb:aa:1c:ce:c0:21:98:
                    30:d0:15:01:1b:8f:66:20:25:e2:61:10:c2:1c:e2:
                    a9:fb:c6:f8:51:2c:a0:1d:f9:ef:ad:93:f7:25:7b:
                    ce:2d:76:0d:7f:2c:f3:99:f5:e5:ff:93:11:0c:c4:
                    23:95:bc:9d:3b:1c:e0:67:81:e9:12:66:82:48:12:
                    32:f2:4b:f3:11:82:91:67:ba:00:a0:ff:19:ab:fe:
                    96:24:05:04:96:df:af:5c:09:b4:c6:4f:27:a2:e7:
                    a7:47:8d:04:7e:ad:11:13:b1:5f:3e:10:a4:66:af:
                    dc:10:dd:da:93:8c:2a:6a:07:61:51:a2:bc:8f:0c:
                    15:16:76:cb:ae:af:df:1e:1d:61:c5:7c:57:49:3c:
                    28:b3:12:f4:b5:58:07:da:5d:a2:2c:e5:0b:c1:f5:
                    d0:2c:b5:4a:e2:06:2e:7b:8a:32:37:4f:1e:e2:b6:
                    0d:37:ac:48:42:ea:de:6e:1c:66:12:ea:f0:5e:ac:
                    2c:04:5d:28:fd:f8:02:5c:3c:7f:c0:3b:3c:4e:d5:
                    e6:68:9e:c3:03:99:45:08:ff:7c:68:e3:bc:04:54:
                    58:01:81:5c:09:d5:22:b6:3c:5e:07:84:b6:d9:c6:
                    fc:12:77:cc:ca:50:a3:4b:1f:73:ab:68:82:2e:28:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:8A:89:86:9E:14:C1:18:EC:3C:04:48:D4:23:59:A6:35:0B:BC
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/AcuKiYaeFMEY7DwESNQjWaY1C7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:20::/48
                  2001:67c:1bc::/48
                  2a02:850:ffe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:6b:93:33:51:80:b1:3c:39:40:82:fc:14:9b:2f:d4:aa:
         43:eb:24:eb:fa:4b:ef:3b:a6:1f:a7:62:ec:9b:51:40:ca:a0:
         84:67:ba:29:d9:0e:34:13:85:51:1a:1e:b8:30:f8:4a:97:19:
         22:c0:b6:ab:63:96:24:ae:71:5c:13:4a:4e:6c:6d:1f:9e:7c:
         43:16:06:26:ba:53:c1:6a:95:3c:27:b8:b8:11:06:a3:b6:91:
         2a:0a:58:d1:5e:dd:06:a4:5d:24:d2:2c:79:41:f4:dc:e2:f8:
         fe:86:80:73:56:ca:2a:cb:0e:47:7f:49:a1:62:53:3e:f9:1b:
         b8:16:c6:41:93:c9:5f:d6:40:2b:92:76:0c:41:e6:a4:8a:55:
         e0:20:95:84:80:50:ab:a4:b0:8c:d0:bf:a7:b0:8d:d5:3f:f4:
         9e:35:6c:1b:2c:5d:3a:09:f3:ef:9f:21:8b:b0:cb:58:99:48:
         26:4d:de:61:22:29:ad:e1:55:45:13:fe:4b:68:06:75:19:89:
         01:0a:b8:28:69:a7:5a:4c:4c:aa:7f:b9:24:2a:f7:b5:e0:ca:
         ea:f6:f5:ab:24:a0:a2:b1:43:ad:87:ca:eb:38:03:a1:bf:c0:
         0d:d5:b9:a6:2b:22:ab:c3:de:6c:65:79:a9:70:2b:56:80:5f:
         48:d2:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----