Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K930kO-tf8N4YbX-P96da-ITZ0c.roa
File:                     K930kO-tf8N4YbX-P96da-ITZ0c.roa (raw, json)
Hash identifier:          jf/yP3Wm5s1ShlKoJ2XX5ENfRXoObaWOAdQzYP9whqE=
Subject key identifier:   2B:DD:F4:90:EF:AD:7F:C3:78:61:B5:FE:3F:DE:9D:6B:E2:13:67:47
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CB95AB3B1D4B318A0B6E194ABAEF3A8C7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K930kO-tf8N4YbX-P96da-ITZ0c.roa
Signing time:             Sat 30 Dec 2023 06:12:58 +0000
ROA not before:           Sat 30 Dec 2023 06:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b9:5a:b3:b1:d4:b3:18:a0:b6:e1:94:ab:ae:f3:a8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 30 06:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2bddf490efad7fc37861b5fe3fde9d6be2136747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:f4:b3:80:85:a2:a8:6d:8b:f8:02:f7:3a:
                    7f:83:21:45:e7:90:77:37:34:ce:1e:ac:b0:60:40:
                    40:85:8a:e2:da:60:11:4e:50:e6:7d:51:ec:a3:97:
                    90:4c:f7:b8:be:ab:af:d1:27:25:35:eb:3a:31:aa:
                    dc:62:64:0c:e9:b0:23:45:8f:2a:02:3e:d2:c5:b5:
                    d1:8e:f6:a2:f3:82:82:e7:46:58:5f:9f:f1:28:e1:
                    fe:3e:4b:56:d1:44:26:a2:75:74:55:96:61:c4:4b:
                    8f:3c:3c:0e:09:4f:30:28:0c:02:1d:b7:44:f1:c3:
                    f4:b3:5a:dd:0b:3c:eb:bb:77:94:b3:4e:4e:28:7a:
                    cb:7b:20:82:26:d8:ae:1e:3d:0a:7f:63:6a:7f:a3:
                    4d:57:7a:b5:a0:49:66:a4:53:8b:66:b1:80:4d:df:
                    27:fa:b2:35:ce:b3:a3:0f:01:0a:a8:9e:05:ef:c5:
                    f1:d8:84:be:f6:71:eb:be:99:c1:7f:b7:24:3e:26:
                    39:7c:71:f5:3d:73:03:31:a7:3c:da:58:55:c9:c9:
                    a2:55:40:28:6b:b6:0c:4b:52:65:39:f0:f5:c9:62:
                    06:05:b5:64:0c:f6:38:6b:ef:a2:1a:85:12:7c:82:
                    4c:de:25:1b:00:79:ad:b5:a0:80:45:87:83:0c:82:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DD:F4:90:EF:AD:7F:C3:78:61:B5:FE:3F:DE:9D:6B:E2:13:67:47
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K930kO-tf8N4YbX-P96da-ITZ0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:fc:5d:fc:e0:19:90:c2:f9:bb:cf:62:64:78:24:bb:05:
         64:1e:4b:77:e2:e8:69:77:87:cf:5b:3e:0f:d2:c6:d9:93:3e:
         96:e2:18:6a:50:bf:29:44:9d:69:96:a1:0d:e3:6b:1f:e9:7e:
         54:1d:20:c0:78:b9:22:99:7c:27:5e:67:b6:88:7e:19:72:1e:
         f0:53:80:c5:be:66:57:6c:6a:bf:9e:1b:24:1a:f0:90:94:77:
         51:11:34:fa:36:00:30:e9:7a:b2:b4:cf:8c:ea:f1:6b:5b:bf:
         74:01:17:24:b1:42:5d:af:56:ed:2d:f4:10:9d:da:5b:e6:36:
         f0:a1:44:e1:4d:ab:ba:91:d3:88:5c:8d:b6:09:b6:29:76:1f:
         47:5c:a4:32:67:f1:cb:bf:07:0c:8b:9c:aa:44:43:34:2a:47:
         70:ed:ae:0e:92:05:7f:3c:8a:58:d7:9d:b9:ab:74:cb:9c:ec:
         7d:bc:a4:8b:0f:29:78:e4:2a:1d:f3:d0:cf:1b:a1:cd:38:2d:
         9c:a6:c7:61:ce:1d:62:a7:4d:65:1b:13:67:20:bd:fd:cb:a2:
         e0:70:e2:c8:a1:32:52:41:28:77:f3:7a:29:b2:70:20:b9:80:
         b2:96:22:37:df:e6:8f:c4:36:5b:89:7c:97:ed:29:d7:63:c2:
         79:58:93:36
-----BEGIN CERTIFICATE-----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