Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ZhHfoighUxs6o7JmMIHZ6v4oz4U.roa
File:                     ZhHfoighUxs6o7JmMIHZ6v4oz4U.roa (raw, json)
Hash identifier:          +WDjDyU+mHuO+X/Bppj33mXYBnkQWeDppg6rimK5WPk=
Subject key identifier:   66:11:DF:A2:28:21:53:1B:3A:A3:B2:66:30:81:D9:EA:FE:28:CF:85
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       018CB6DC26AFF64E116DD7E3EDD58AFA7FED
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ZhHfoighUxs6o7JmMIHZ6v4oz4U.roa
Signing time:             Fri 29 Dec 2023 18:35:30 +0000
ROA not before:           Fri 29 Dec 2023 18:35:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b6:dc:26:af:f6:4e:11:6d:d7:e3:ed:d5:8a:fa:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Dec 29 18:35:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6611dfa22821531b3aa3b2663081d9eafe28cf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:57:c8:97:2c:1f:0d:b0:7a:6b:44:32:e4:
                    58:af:3b:b9:42:96:43:01:7c:4d:b9:1a:e4:40:b2:
                    7e:1a:fc:35:9c:92:34:6f:1f:27:93:05:4c:39:87:
                    83:88:e4:e5:12:c2:c1:53:86:d6:a6:5c:99:21:8a:
                    fa:9b:ba:12:4f:db:58:f0:e3:fe:70:86:d2:44:21:
                    b7:0d:c8:5a:55:8b:b5:08:2b:35:2d:c3:15:c0:ef:
                    62:2d:b1:6c:a0:d2:cd:05:5b:86:43:2c:ee:98:7a:
                    5b:93:c4:c3:4b:1b:09:19:84:5d:6b:a6:96:04:e0:
                    cb:22:4b:6f:09:03:ac:26:3d:9b:7d:24:aa:14:b8:
                    c2:97:b3:5a:72:cf:08:8b:c2:45:bf:cb:96:96:9d:
                    5e:37:05:7a:ac:9d:ee:31:d4:d8:d3:11:48:a4:81:
                    b4:bf:ae:0f:46:8a:0e:1a:3d:41:6b:e9:70:c7:80:
                    92:5c:3b:9c:b0:3c:d3:41:73:54:eb:fd:56:37:3e:
                    02:9a:40:2f:e0:d9:5a:6a:fb:88:ef:83:85:2a:aa:
                    fa:f4:fb:f4:08:3d:d4:c7:24:b7:d9:ef:8a:6b:84:
                    96:de:fc:f2:bd:f2:26:a2:d3:2e:69:54:25:f7:c0:
                    7c:6f:6f:bd:d6:6d:94:00:e8:6c:49:0f:68:ac:7e:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:11:DF:A2:28:21:53:1B:3A:A3:B2:66:30:81:D9:EA:FE:28:CF:85
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/ZhHfoighUxs6o7JmMIHZ6v4oz4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:34:63:15:3f:0b:b2:1f:8f:13:d4:ce:2b:03:dd:92:14:
         ff:d5:18:5c:7e:5a:41:da:0e:39:27:df:fb:cc:d5:03:ef:30:
         9c:d3:ad:ea:99:b7:4c:ba:81:15:48:b6:25:98:8b:b9:40:26:
         01:26:a4:36:1d:c6:25:2a:5c:c3:c1:fe:b2:d1:11:0a:20:3b:
         30:00:f0:1d:e6:ee:45:53:a4:cf:b0:c0:07:ff:af:7d:47:1b:
         a0:2c:c1:07:0e:85:41:69:40:23:71:64:c8:89:db:5a:3a:07:
         32:79:3c:04:ba:05:61:a9:48:13:f9:65:91:f5:6d:e6:b6:56:
         7a:94:42:9b:93:40:f2:47:ab:30:28:f0:dd:4d:8a:3e:dd:df:
         24:19:93:c7:e1:a1:b0:f6:74:75:cb:e9:e4:c6:fc:b6:b1:a2:
         87:2c:e4:a7:b0:3c:b0:21:ce:71:fd:41:09:ba:13:71:31:08:
         36:78:51:99:25:82:81:88:fb:18:2c:35:1f:52:db:ad:c3:f0:
         9e:a0:ff:4e:74:d4:32:84:a9:57:cc:c4:11:bf:6a:0b:06:6c:
         50:d4:23:93:c4:38:94:29:0b:59:a0:23:10:7e:48:a0:cb:b4:
         66:26:f9:d7:44:2a:8e:63:2a:d5:db:bc:13:f1:63:59:67:03:
         9b:55:79:25
-----BEGIN CERTIFICATE-----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