Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Xc9TRmJBNELIgogO4nGbeqAdxg.roa
File:                     3Xc9TRmJBNELIgogO4nGbeqAdxg.roa (raw, json)
Hash identifier:          dlOiGZvltCMQpOqmCHL8iRPixnXzs3nOtvUsn+gFxeo=
Subject key identifier:   DD:77:3D:4D:19:89:04:D1:0B:22:0A:20:3B:89:C6:6D:EA:80:77:18
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC5CDA7B234667DC5C8ADB4BFEBE45EB3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Xc9TRmJBNELIgogO4nGbeqAdxg.roa
Signing time:             Mon 01 Jan 2024 16:13:58 +0000
ROA not before:           Mon 01 Jan 2024 16:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:cd:a7:b2:34:66:7d:c5:c8:ad:b4:bf:eb:e4:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  1 16:13:58 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd773d4d198904d10b220a203b89c66dea807718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:13:92:53:c7:9b:02:c8:00:fa:da:e6:4f:
                    e4:6a:b9:db:38:f5:0f:79:2a:e4:bd:42:6d:df:69:
                    fa:e4:aa:65:93:d6:96:90:c9:4d:07:18:71:79:99:
                    98:7a:94:33:a8:84:a9:c5:1f:32:60:ba:f6:fc:a5:
                    38:e4:d5:0e:8d:6a:33:57:67:01:39:85:0c:a3:bd:
                    68:21:5a:c8:e3:2d:81:61:ad:d6:3e:dc:9e:cf:23:
                    df:f7:41:d2:fc:81:a4:31:47:69:db:ea:70:06:81:
                    35:09:6c:e3:25:5f:32:4e:60:d5:0d:71:79:af:b3:
                    cc:38:1a:4f:88:c3:a6:e0:9c:67:3f:26:14:27:d9:
                    0d:4c:f4:23:c1:96:8c:21:32:46:c2:7b:a3:81:c7:
                    20:e6:7f:bb:a7:2d:64:75:8c:e6:48:1c:79:e1:8c:
                    18:4d:04:17:36:e7:db:78:f8:fb:0f:c3:f7:ab:65:
                    d6:bb:9a:21:93:cc:02:1c:a2:dc:db:84:6f:70:03:
                    90:95:d2:eb:ee:9d:34:5e:05:f3:fc:c6:3f:e1:7c:
                    9f:05:8a:03:6c:c5:c3:e5:3c:5b:3e:48:f1:8d:a2:
                    fc:0f:a1:d8:ba:2c:a2:7f:9e:d9:79:98:dd:f6:77:
                    60:e2:5c:db:5f:27:53:68:a1:85:a4:41:1a:d5:83:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:3D:4D:19:89:04:D1:0B:22:0A:20:3B:89:C6:6D:EA:80:77:18
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/3Xc9TRmJBNELIgogO4nGbeqAdxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:6b:ed:83:a1:26:3a:00:0d:b9:7a:15:1c:7a:b4:23:93:
         c3:c2:94:5a:ef:5c:99:d0:a6:61:23:71:49:a1:da:96:53:8d:
         91:a8:d1:c4:8d:3a:c7:d2:0b:e1:29:d0:43:52:7d:d8:ae:58:
         6d:25:46:55:75:a4:01:05:88:c0:af:3a:8b:39:4f:cb:1a:38:
         68:36:c9:28:13:d2:8c:b0:ae:0d:fc:59:6c:69:88:d2:a3:9c:
         fb:35:94:3f:f6:cc:00:fe:93:de:e1:fc:2e:12:63:ff:5f:2a:
         80:7e:53:da:31:05:2d:26:06:30:fe:64:7a:19:b3:1b:74:6c:
         82:d1:75:a2:02:5a:ed:3c:a8:21:71:c1:cd:d6:03:48:e3:18:
         9b:33:af:51:cd:6f:64:db:8d:c2:31:2f:a2:4c:e2:1f:a7:31:
         eb:a8:1b:0e:9b:9f:3f:81:97:ae:4e:7f:b3:79:dd:87:a3:df:
         a4:63:73:eb:85:73:aa:2a:a0:f6:e2:7c:8b:54:55:97:f6:74:
         7f:71:37:73:23:fe:23:3a:01:11:8e:67:9a:2b:23:c2:26:74:
         b3:4e:eb:cb:21:19:14:60:61:d7:bf:81:ab:94:b0:05:bd:d9:
         5a:2e:1a:de:a8:b2:83:b6:7e:d1:a2:ea:49:3a:09:7f:22:64:
         f8:37:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----