Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cq_q98eRPWwizpvvKTTUJdqBduc.roa
File:                     cq_q98eRPWwizpvvKTTUJdqBduc.roa (raw, json)
Hash identifier:          GPWtxYoW5cjUkF9mA1P3iugRFmHGki9iKsTbrenhiYM=
Subject key identifier:   72:AF:EA:F7:C7:91:3D:6C:22:CE:9B:EF:29:34:D4:25:DA:81:76:E7
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CC2CBB1C0C0D84401DE46EBA4A2890F51
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cq_q98eRPWwizpvvKTTUJdqBduc.roa
Signing time:             Mon 01 Jan 2024 02:12:58 +0000
ROA not before:           Mon 01 Jan 2024 02:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:cb:b1:c0:c0:d8:44:01:de:46:eb:a4:a2:89:0f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  1 02:12:58 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72afeaf7c7913d6c22ce9bef2934d425da8176e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:67:26:0f:b5:b6:b9:bd:45:67:b0:ea:69:
                    66:fa:fb:23:f9:bd:fe:82:91:be:54:80:56:71:11:
                    a1:b1:8d:d9:8f:c8:f5:bc:ee:c6:db:31:d2:84:bd:
                    9a:79:62:f1:c4:a4:4d:2a:a6:b1:aa:01:64:32:24:
                    40:c1:b7:22:61:dc:5d:b5:99:6f:3f:ff:81:5d:3e:
                    fc:0e:6a:da:71:ea:01:11:53:91:08:09:73:d3:64:
                    bd:0d:9d:b6:1b:7b:5d:64:06:1f:d9:37:a3:a4:07:
                    36:5f:12:93:c9:3d:1a:d0:63:4b:3d:a0:e1:91:11:
                    bf:9a:e9:bc:83:bc:e0:ae:8e:05:32:81:11:69:0c:
                    2b:81:65:e5:04:4d:49:47:a9:b6:82:dd:42:6f:83:
                    6f:a6:7d:cf:b1:09:99:bd:55:bc:b4:5c:c9:1e:63:
                    0a:3e:20:5e:ba:df:54:e4:e6:58:93:5f:c1:8b:82:
                    b1:0c:da:50:34:f0:bf:19:59:50:4c:72:77:95:9b:
                    5f:18:91:98:75:bb:f5:b0:53:fe:e6:be:16:38:70:
                    08:d7:ff:c0:e4:3c:c1:cf:cd:25:fb:57:d7:6f:f5:
                    c5:a0:b1:32:42:b2:cb:4e:d9:68:77:0a:71:6e:1b:
                    c1:c5:1c:ae:63:96:bf:de:15:7b:61:5e:dc:c2:63:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AF:EA:F7:C7:91:3D:6C:22:CE:9B:EF:29:34:D4:25:DA:81:76:E7
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cq_q98eRPWwizpvvKTTUJdqBduc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:cb:c4:45:ba:15:97:d1:e9:f8:fc:2e:3c:54:06:6d:2a:
         07:4a:4a:7f:75:f4:d5:2c:aa:72:fb:36:6f:ae:0a:1a:36:b0:
         6b:90:02:e1:88:51:fc:40:00:16:ee:5c:6c:05:6b:1a:a2:42:
         be:c5:08:a6:37:0b:b9:03:a5:f8:90:64:66:04:a0:2f:24:28:
         5d:1c:22:f2:6a:c1:18:c2:34:fd:07:a4:f6:6e:23:38:d8:e8:
         f9:a6:2d:d1:a4:55:c1:71:8d:ce:ef:44:0d:a5:0d:86:cf:0b:
         f4:a2:1d:5f:0d:73:7f:df:dc:fe:4a:19:6b:2b:f7:63:3a:de:
         5a:8c:39:d6:62:52:71:33:f5:c6:63:ff:4c:53:28:36:b5:d5:
         3d:0c:00:30:32:b4:81:6a:14:da:3d:c1:1c:a1:48:6f:f4:c4:
         4f:0e:63:5a:f6:1d:82:47:81:21:6c:d5:68:f8:10:50:f2:18:
         b7:4b:5b:bd:40:aa:57:6e:d1:a3:34:28:ce:08:12:12:ee:9d:
         48:25:48:53:5c:ce:d3:7c:d3:37:99:72:f3:43:9a:c0:18:99:
         23:0a:01:e9:30:a5:4f:49:b8:af:6f:ed:48:6b:bb:9d:96:04:
         75:31:52:42:13:28:24:f4:40:c0:a4:7e:7d:03:b0:c9:4a:40:
         82:72:83:91
-----BEGIN CERTIFICATE-----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