Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NNB_AZB1zddb4s_XMS2q13Jp4xw.roa
File:                     NNB_AZB1zddb4s_XMS2q13Jp4xw.roa (raw, json)
Hash identifier:          lqUWfEHvT4+FIPR8EMQnorod0YV5/qO4G2eCyJ4T/0E=
Subject key identifier:   34:D0:7F:01:90:75:CD:D7:5B:E2:CF:D7:31:2D:AA:D7:72:69:E3:1C
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CCCA9A25B1AB3C68411AF54CCD206F2DF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NNB_AZB1zddb4s_XMS2q13Jp4xw.roa
Signing time:             Wed 03 Jan 2024 00:11:58 +0000
ROA not before:           Wed 03 Jan 2024 00:11:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:cc:a9:a2:5b:1a:b3:c6:84:11:af:54:cc:d2:06:f2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  3 00:11:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34d07f019075cdd75be2cfd7312daad77269e31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:ba:e0:39:c7:a0:35:03:0c:77:f1:37:d9:
                    10:2f:66:7f:d5:4c:6d:18:06:31:36:6a:ee:10:11:
                    d3:f9:1c:48:51:e9:9e:8b:b0:4b:e3:45:a3:56:1b:
                    9d:22:b6:e1:17:94:1e:13:8c:5c:12:dc:13:87:f8:
                    dc:a4:f3:fb:e2:5e:c5:e7:df:cd:65:fa:70:58:2a:
                    8b:f8:d3:0a:aa:a3:b6:f0:b7:56:04:2e:b3:8a:44:
                    a6:ef:f7:51:7a:c8:d6:a8:6e:2a:4c:0b:ce:36:78:
                    64:0f:37:66:15:e1:c5:95:b8:6d:e5:71:7a:41:78:
                    6f:be:45:ee:52:37:a7:f6:9e:ad:13:33:cf:90:b1:
                    bc:a2:a1:12:a6:88:ac:4b:e0:6a:d8:e9:a6:68:9d:
                    de:fd:48:1e:55:a9:c1:e5:86:25:bd:08:2e:a5:5b:
                    94:48:50:73:35:35:7d:25:c0:89:a0:23:a3:0d:b0:
                    04:2c:3c:de:96:f9:0f:1b:61:99:3d:84:61:31:73:
                    7d:a4:71:1b:3c:62:ef:e9:53:86:d5:77:89:94:1a:
                    41:17:a8:8c:4b:e0:70:46:bb:dd:d8:cd:c5:fc:3b:
                    fa:6c:b3:f5:a9:30:cd:20:39:ed:e7:86:34:e5:23:
                    44:7e:a6:5c:b6:25:67:e5:f0:15:32:3a:6b:90:e1:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:7F:01:90:75:CD:D7:5B:E2:CF:D7:31:2D:AA:D7:72:69:E3:1C
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NNB_AZB1zddb4s_XMS2q13Jp4xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:03:72:33:31:9a:30:2b:f1:95:9a:2a:20:f4:e1:67:e5:
         e6:ab:00:7d:61:a9:5c:1c:68:69:38:60:cd:02:51:5f:73:6c:
         58:30:43:20:90:f6:f4:30:ca:96:84:c8:12:84:14:ac:61:f8:
         07:9f:5e:ef:f2:ad:1a:a1:83:c9:d5:84:a5:da:66:d4:ba:f3:
         41:fd:c3:e3:bf:ce:a0:42:56:80:0d:50:20:c0:62:31:65:e6:
         9b:04:7b:60:30:22:f2:e0:bc:ed:80:c2:d2:15:a1:6b:45:8e:
         5f:dd:53:98:80:36:c5:4b:df:bd:fb:35:dd:fb:87:64:65:72:
         2a:73:5b:02:ed:fc:5d:41:ac:7c:21:11:18:22:a8:78:85:9c:
         f3:10:57:62:d5:3e:60:c3:ca:11:03:a2:65:42:2b:f9:6a:25:
         9b:dc:8d:ec:49:c3:e5:58:ef:f4:91:2d:d0:6a:50:27:4b:e2:
         ca:fb:bd:a9:79:06:a7:77:cc:b6:19:c7:be:83:8b:93:83:ac:
         70:e5:01:b9:1c:9f:68:1f:16:57:16:62:f9:e7:fb:60:14:f4:
         01:db:b3:fd:62:70:f8:0d:e4:fa:74:e5:66:fb:56:36:e9:96:
         35:ba:b3:8a:e9:63:27:34:c2:fa:65:3f:3f:8a:f6:87:a1:bb:
         9b:1d:3b:a3
-----BEGIN CERTIFICATE-----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