Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7uloY3uYZHjg-MVlwfPkn5vRioY.roa
File:                     7uloY3uYZHjg-MVlwfPkn5vRioY.roa (raw, json)
Hash identifier:          q4gK+JXPTd+CXgqPLzm1uHtH8go1oc810AWQ3vlqtKc=
Subject key identifier:   EE:E9:68:63:7B:98:64:78:E0:F8:C5:65:C1:F3:E4:9F:9B:D1:8A:86
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CA978D7B466169ADF1526339155395D30
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7uloY3uYZHjg-MVlwfPkn5vRioY.roa
Signing time:             Wed 27 Dec 2023 04:11:58 +0000
ROA not before:           Wed 27 Dec 2023 04:11:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:78:d7:b4:66:16:9a:df:15:26:33:91:55:39:5d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 27 04:11:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eee968637b986478e0f8c565c1f3e49f9bd18a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:76:d1:1c:2c:09:ab:48:de:32:53:ac:17:
                    bc:71:d8:f5:b1:21:3c:5b:18:5b:01:d0:01:67:e1:
                    d8:88:8f:6e:f3:09:88:9a:bb:a7:b0:a7:d3:d8:c8:
                    79:ba:ca:6a:7f:35:be:e2:76:83:73:eb:e1:79:62:
                    a7:e6:b6:30:a1:ee:27:ca:70:ae:e5:07:2c:d7:06:
                    85:d8:01:4a:7c:3f:1e:10:38:48:82:4f:95:a5:96:
                    9c:5b:75:fb:b4:8e:aa:d7:0e:6b:1a:8b:06:22:f7:
                    dc:f5:36:98:8f:0d:b6:ee:44:18:77:f2:c0:3c:1a:
                    c6:ea:50:1b:7e:e1:2a:d4:ce:27:a8:62:7e:24:09:
                    bc:be:00:15:2a:04:41:20:0a:d4:d6:ff:67:4f:7d:
                    06:56:4f:6e:44:c4:91:18:db:07:b6:4e:22:ea:97:
                    64:0f:39:16:4e:c7:f5:b9:fc:b3:9e:51:9a:bc:34:
                    76:19:e6:30:7b:18:76:3f:2e:f4:6a:74:96:8e:de:
                    b6:6a:e0:52:7f:34:7e:29:14:40:ca:c7:53:be:ae:
                    08:85:7e:9a:8b:cb:bb:f9:58:40:ca:87:28:f3:a3:
                    9c:b6:e7:5e:31:a9:7e:6f:a9:bb:36:bd:06:ab:2b:
                    ae:1f:7b:bc:1d:4a:71:b9:ab:d9:6d:14:2e:52:36:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:68:63:7B:98:64:78:E0:F8:C5:65:C1:F3:E4:9F:9B:D1:8A:86
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7uloY3uYZHjg-MVlwfPkn5vRioY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:47:e8:ea:a1:10:eb:c8:be:5d:d5:5b:b6:72:53:ce:a6:
         00:81:44:b6:e6:9b:1d:b4:fe:ea:e8:65:a5:40:77:8a:5b:73:
         50:b8:31:a4:d7:03:5e:bb:e9:6f:7e:32:92:4c:c6:fb:04:bd:
         94:af:c4:ad:60:90:66:8b:4f:27:6b:33:04:7d:b3:98:ed:52:
         c1:30:5b:c2:24:b1:19:f6:7f:5a:ed:42:c1:59:45:51:68:04:
         96:bc:62:dc:b3:65:78:6b:bf:8c:0e:32:c1:55:30:c4:bc:0e:
         9d:3d:d8:e0:61:f4:cc:c9:5f:6f:bb:34:0a:99:65:dc:37:52:
         06:f1:d1:d7:ae:09:fd:8b:f5:f2:6c:07:fa:51:72:9e:fd:ff:
         9f:79:b6:19:19:df:3d:44:11:ff:4a:39:45:fb:26:e3:cc:30:
         61:9f:5f:34:81:9f:51:8c:73:1e:4c:45:45:64:e1:ab:a6:c8:
         1a:22:4d:ab:00:0d:8c:cc:d5:1d:98:10:d8:b0:25:06:c7:53:
         43:8e:7c:93:69:61:46:d2:32:25:01:32:af:1c:a6:19:e0:f7:
         69:36:a6:e8:35:05:64:58:2d:d7:e5:c5:20:ed:19:8f:6a:dc:
         82:0d:43:bc:02:77:90:d0:70:75:2a:f5:b6:f4:03:cd:5d:f5:
         52:58:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----