Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hd5u55_h-N3fiNpf68sHWd3T0JQ.roa
File:                     hd5u55_h-N3fiNpf68sHWd3T0JQ.roa (raw, json)
Hash identifier:          LXHUAvXMx6kHBEAm76dcMFKgs7tEqj2Ae0kRAvTbhxc=
Subject key identifier:   85:DE:6E:E7:9F:E1:F8:DD:DF:88:DA:5F:EB:CB:07:59:DD:D3:D0:94
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CADFB52E080C7184078BE07E5888D2D2C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hd5u55_h-N3fiNpf68sHWd3T0JQ.roa
Signing time:             Thu 28 Dec 2023 01:12:58 +0000
ROA not before:           Thu 28 Dec 2023 01:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ad:fb:52:e0:80:c7:18:40:78:be:07:e5:88:8d:2d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 28 01:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=85de6ee79fe1f8dddf88da5febcb0759ddd3d094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:10:6d:9f:f5:e6:0e:2c:08:82:c2:46:64:bd:
                    e2:56:82:b6:50:3e:7c:98:d6:73:83:8e:81:fc:4e:
                    3d:8a:cc:8b:48:58:b7:40:d1:13:56:38:a2:11:55:
                    89:20:7c:53:41:28:4b:2a:22:41:75:81:a1:c8:83:
                    f6:46:78:62:64:a2:ef:c9:9e:bb:fc:d7:54:5a:65:
                    2c:1b:19:9a:22:8e:dc:45:7e:5a:6b:90:82:95:cd:
                    2a:02:a5:d5:01:50:cf:12:65:7e:c7:96:c6:e6:86:
                    7c:08:5c:34:9d:fb:29:d3:aa:8e:94:54:63:76:66:
                    7c:27:fa:91:f1:3d:5b:0c:fb:ff:41:09:3d:06:a2:
                    e1:d2:e9:3d:ce:b6:f9:3e:c8:94:73:b9:dc:61:93:
                    85:9d:0b:a0:5a:33:a3:8c:e2:ac:b5:4e:32:04:1c:
                    83:60:b6:f4:c4:ec:22:14:de:30:8e:63:5f:90:cb:
                    d1:af:c9:b1:9a:81:16:82:19:68:6d:0f:f8:fb:4a:
                    dc:4c:d3:c6:4c:b4:ce:3e:16:01:ae:58:e1:0c:a8:
                    43:54:e9:15:33:07:de:87:cf:8e:ab:84:ef:0f:a7:
                    ec:08:73:2f:3b:6f:b1:6e:eb:ec:83:c4:ae:5c:40:
                    61:03:02:71:89:5f:02:3f:0a:7e:9c:ea:72:7f:81:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DE:6E:E7:9F:E1:F8:DD:DF:88:DA:5F:EB:CB:07:59:DD:D3:D0:94
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/hd5u55_h-N3fiNpf68sHWd3T0JQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:63:ec:48:08:8f:33:dd:5b:c2:55:a0:41:26:fe:22:b0:f9:
         a4:b1:f4:00:44:cf:98:94:77:bd:7f:94:e3:02:b0:fa:56:b8:
         53:c5:e2:37:1a:38:81:5e:9e:38:d6:5a:b2:6c:c2:92:d5:0e:
         fa:99:ee:f1:04:d9:68:38:bb:2a:a6:0c:4b:ca:f4:9e:57:4d:
         b0:b4:a7:55:8d:f0:0e:92:ec:2a:2d:b2:81:2e:8c:11:d9:50:
         22:00:7e:8b:b4:5c:d6:b7:0e:f7:67:c7:58:a9:ed:7b:ba:c2:
         8b:55:bb:a0:8a:5d:fe:84:d1:e0:2b:4b:3b:e7:e7:eb:f0:c5:
         79:63:8a:73:37:ad:0a:41:95:6e:7b:63:c2:07:c3:64:00:64:
         d3:49:ae:34:44:38:e0:53:4b:db:0d:60:91:f3:cd:1b:0d:dd:
         4d:80:9d:53:94:f8:43:e1:7f:1e:53:dd:79:8d:4f:bd:23:51:
         3b:8e:44:6a:bb:dc:19:3c:05:14:1d:bf:26:26:59:00:59:6c:
         4a:2e:db:b1:f8:1d:df:96:ac:a0:c9:97:5e:f9:f2:da:36:94:
         3d:57:74:1c:46:37:ff:4b:2e:30:eb:bb:ea:25:22:95:56:9d:
         39:74:8a:b4:4b:43:51:aa:16:6e:4f:c2:c3:c7:ac:e7:1b:23:
         3d:9b:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----