Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C7CsjusE7KdmqegDHPF_CeCJDPk.roa
File:                     C7CsjusE7KdmqegDHPF_CeCJDPk.roa (raw, json)
Hash identifier:          w+FAmolCT7W2u2LgYM5e294XopTLDZxLc6ZEsNLF/lI=
Subject key identifier:   0B:B0:AC:8E:EB:04:EC:A7:66:A9:E8:03:1C:F1:7F:09:E0:89:0C:F9
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC74F171C2C133D4B1EDBB09C75E00813
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C7CsjusE7KdmqegDHPF_CeCJDPk.roa
Signing time:             Mon 01 Jan 2024 23:14:58 +0000
ROA not before:           Mon 01 Jan 2024 23:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:4f:17:1c:2c:13:3d:4b:1e:db:b0:9c:75:e0:08:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  1 23:14:58 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bb0ac8eeb04eca766a9e8031cf17f09e0890cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:62:f2:26:2c:66:9b:70:cc:9a:9e:30:fd:
                    ae:2f:ee:10:4a:ee:88:8a:8d:7d:61:6c:cd:0d:53:
                    d1:69:5e:b4:b2:7c:15:fd:20:f0:20:8f:00:50:74:
                    20:71:06:20:cb:a4:f7:2f:27:df:fa:46:cd:10:ab:
                    0b:f4:86:66:d6:dc:04:0d:ab:1b:d8:4d:65:75:0f:
                    eb:e4:e4:e6:68:ee:dc:4a:6d:b0:21:5f:b0:9a:b3:
                    82:0e:f6:a9:d2:f6:26:49:30:b7:0c:c8:61:37:6e:
                    08:97:b5:f5:6d:60:b3:36:52:79:dd:ae:6b:f1:94:
                    24:3c:c0:b4:ad:e6:ba:f9:43:51:af:02:75:e1:fc:
                    3d:53:e7:3d:9e:fb:0b:3b:b5:d4:8c:10:c7:30:1d:
                    91:85:33:09:ca:48:ad:2a:e5:36:69:c8:73:ea:2e:
                    f4:45:76:d8:79:ab:18:14:e3:1e:89:8d:4a:34:19:
                    4c:f0:b0:23:f2:75:96:da:54:52:f3:22:e3:b0:63:
                    4c:1c:d0:73:0f:92:8e:d8:68:61:15:a4:d5:14:d7:
                    95:50:dc:9e:78:1c:57:25:7b:6c:7d:2a:ae:26:90:
                    9d:cb:87:9c:c0:b9:c7:c5:6c:39:f1:5b:59:71:43:
                    63:2b:a0:b4:c5:fa:6c:17:2f:f4:f8:b7:dd:8f:92:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:AC:8E:EB:04:EC:A7:66:A9:E8:03:1C:F1:7F:09:E0:89:0C:F9
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/C7CsjusE7KdmqegDHPF_CeCJDPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:61:ae:dd:25:51:34:f5:aa:07:26:f1:ec:ea:73:c0:6b:
         25:79:31:c0:f8:4e:22:ea:65:04:3b:c7:09:f3:bf:c9:b6:bf:
         00:ed:1b:30:a6:5b:1b:87:c5:e5:f9:10:6c:f9:4e:00:2f:ba:
         4f:f1:ba:84:19:f7:1e:63:25:e8:1a:ee:7f:2b:0c:1c:b9:97:
         d7:d6:47:fa:5f:33:55:7e:fb:49:da:62:90:67:70:cd:35:e8:
         a3:96:b3:6c:7e:c5:d6:76:61:6e:bf:50:2b:3f:88:0e:8e:13:
         42:2e:c5:f0:f7:34:4e:0a:94:b6:ce:77:e6:7a:57:96:85:f4:
         ff:de:5c:bd:7b:04:9c:59:84:a8:48:3e:d9:f4:bd:34:15:bf:
         f4:6f:66:dc:33:0e:7f:e5:dd:5a:82:a4:aa:bc:5a:5b:65:a9:
         dc:d7:77:f4:d7:7b:b2:e0:32:21:a3:b3:16:27:fd:83:da:c6:
         45:9d:71:ab:3d:16:56:05:6e:ef:a0:69:c6:ad:81:6e:53:0e:
         d8:21:8a:3d:3b:ff:4d:79:8e:14:1f:f6:1b:a2:8a:d9:d5:1d:
         b8:52:5e:82:66:db:4f:69:90:4a:89:8c:7e:94:05:60:13:e0:
         4c:60:9f:51:d1:41:12:a4:09:46:87:97:8d:56:90:4c:cf:4a:
         fa:d0:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----