Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_E3CEuTCqM4uwsDFcKqgGf2ctbA.roa
File:                     _E3CEuTCqM4uwsDFcKqgGf2ctbA.roa (raw, json)
Hash identifier:          d193LNqfh4hdzsXxyT1F7+Jq5pioID6WSyZc5WfKPec=
Subject key identifier:   FC:4D:C2:12:E4:C2:A8:CE:2E:C2:C0:C5:70:AA:A0:19:FD:9C:B5:B0
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC63A9A800235FBF1A9B6C8EAC2708FBF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_E3CEuTCqM4uwsDFcKqgGf2ctbA.roa
Signing time:             Mon 01 Jan 2024 18:12:58 +0000
ROA not before:           Mon 01 Jan 2024 18:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:3a:9a:80:02:35:fb:f1:a9:b6:c8:ea:c2:70:8f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  1 18:12:58 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc4dc212e4c2a8ce2ec2c0c570aaa019fd9cb5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:f2:9b:40:bb:67:29:45:ea:03:f6:ff:e3:
                    78:44:17:a4:f3:74:e7:97:c8:26:27:0e:3a:78:23:
                    9b:7a:0c:ef:3a:e4:b1:d7:40:1f:ee:90:91:64:ab:
                    8e:2b:f6:b8:9b:88:42:4d:4a:5a:d0:6a:42:a9:90:
                    3e:39:fb:e5:1d:03:4c:f5:b8:cf:7b:ac:a9:06:bf:
                    a7:ad:9d:ff:f1:03:3a:a5:8c:30:65:fb:75:2d:e5:
                    8f:b5:2e:82:da:6d:2e:84:17:fd:21:a1:9b:20:d8:
                    2e:fb:21:4c:6e:ee:a3:77:9b:ed:f7:36:0d:35:db:
                    b4:d2:d4:33:30:94:2f:a8:8b:18:6e:74:dc:1b:4f:
                    25:29:58:31:76:a3:04:3a:c5:a3:f6:95:2d:c4:c8:
                    16:09:b7:30:97:01:68:a8:ba:f4:77:bb:87:2f:8a:
                    53:9b:ce:c6:08:cb:d9:fb:d2:03:c7:2f:d3:b5:78:
                    ec:00:f4:f6:28:e9:ab:33:04:55:a1:b9:e2:6b:f8:
                    79:30:4d:81:89:1d:ad:32:ff:dc:87:7a:53:bc:97:
                    d1:96:f9:2c:76:41:f6:21:88:d9:dd:84:d8:2a:18:
                    31:2f:61:f0:71:84:07:3f:30:a8:b9:18:16:f9:ca:
                    ad:2f:ed:25:95:70:bf:12:0b:d2:03:b9:cb:15:cc:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4D:C2:12:E4:C2:A8:CE:2E:C2:C0:C5:70:AA:A0:19:FD:9C:B5:B0
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_E3CEuTCqM4uwsDFcKqgGf2ctbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:89:b0:c1:cc:8c:6e:23:e3:30:6f:e9:60:fc:bd:c3:a3:a1:
         07:26:ab:49:4c:e5:48:4b:93:c6:25:32:48:43:18:7d:45:f3:
         95:5b:e9:4e:aa:9b:b8:c8:24:4b:b5:a2:ca:d1:09:cd:4e:39:
         eb:b8:24:c0:fe:96:88:ca:e7:f9:7a:67:26:58:47:08:4c:77:
         b6:34:5e:bd:86:b7:72:c2:8a:b3:46:e7:f4:cf:5f:cd:0f:0c:
         86:3b:68:1b:dc:12:2b:f6:d4:c6:31:68:fb:94:ea:e5:f8:ef:
         8b:dd:b8:da:77:1c:be:9e:66:5b:aa:04:9a:91:06:b9:dd:22:
         14:52:6e:99:04:66:05:09:23:28:7e:35:66:8b:ee:00:eb:6b:
         d1:a9:0d:9e:7d:f2:13:19:00:52:65:cb:2b:8a:88:df:67:af:
         66:ca:2a:c1:51:3f:bf:d9:2c:82:f4:f2:2b:96:ba:a5:9a:b5:
         33:16:3c:10:48:92:d6:d9:01:92:be:28:ef:15:77:5e:d2:7a:
         7f:37:52:6e:e9:3f:98:77:5c:9b:67:ed:e6:e1:9e:f2:9c:96:
         32:c8:39:ec:78:fd:e8:81:97:d9:9e:47:d6:d4:35:a9:a4:d5:
         c9:d1:09:12:f5:86:dc:43:e5:1b:9a:b4:a9:7f:f8:47:90:3e:
         75:36:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----