Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAt_OtUFw7zczqXcWsXuf1i0A-Y.roa
File:                     tAt_OtUFw7zczqXcWsXuf1i0A-Y.roa (raw, json)
Hash identifier:          q7Th2CWlSTVFvA+CTlmWV74yVyc5gAuJSLg/KlMR0Hs=
Subject key identifier:   B4:0B:7F:3A:D5:05:C3:BC:DC:CE:A5:DC:5A:C5:EE:7F:58:B4:03:E6
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CB5E47861106DA927E356F0476E5F5FF2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAt_OtUFw7zczqXcWsXuf1i0A-Y.roa
Signing time:             Fri 29 Dec 2023 14:04:58 +0000
ROA not before:           Fri 29 Dec 2023 14:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18c:b5e3:e95a/128 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b5:e4:78:61:10:6d:a9:27:e3:56:f0:47:6e:5f:5f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Dec 29 14:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b40b7f3ad505c3bcdccea5dc5ac5ee7f58b403e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b2:da:05:af:45:7f:7c:78:f4:b0:f1:d4:bb:
                    64:91:70:35:f1:dc:4f:47:64:80:c3:56:5b:48:7b:
                    6d:3b:b4:56:af:1d:63:b9:c2:e3:3d:64:ca:20:6f:
                    d5:8f:92:75:d7:63:e5:1b:c5:f9:27:56:b3:8b:ec:
                    af:23:5d:52:6b:6b:ae:6b:9f:e5:ee:bf:a2:fa:80:
                    44:95:b0:c8:95:8a:83:13:e9:e1:81:d5:e6:52:b2:
                    b4:3d:3e:ca:75:85:df:45:53:36:97:bc:60:0b:1a:
                    d1:3a:97:d9:c9:43:2f:c9:03:a7:43:ad:91:31:87:
                    00:16:63:65:b7:d0:09:f5:06:5b:9b:5c:6a:3d:50:
                    7f:ad:a8:d8:90:c6:0b:06:70:25:19:8a:2e:13:7d:
                    ef:5c:46:db:d3:e4:08:74:e7:46:8d:d8:73:ef:10:
                    49:5c:fa:c8:b9:ac:ae:fc:35:a4:24:8e:e7:10:00:
                    1d:86:53:5c:b3:a1:35:a8:b1:32:8b:35:c4:2c:0e:
                    9a:d4:72:33:31:ce:e6:07:76:da:9f:3f:d9:c9:7a:
                    a6:99:1b:7b:e4:b4:76:35:84:59:1b:65:de:8a:0c:
                    09:f2:8e:88:25:6c:a0:91:b2:7f:51:3f:84:fe:59:
                    ee:1e:e8:ea:55:8a:18:a5:07:50:9e:79:e4:5d:b2:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:7F:3A:D5:05:C3:BC:DC:CE:A5:DC:5A:C5:EE:7F:58:B4:03:E6
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/tAt_OtUFw7zczqXcWsXuf1i0A-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:92:22:0e:41:6d:16:d7:95:94:d9:fa:b1:d0:6e:03:50:
         92:f7:8a:6f:30:c5:35:ca:a0:ea:f8:b3:d0:5b:b6:66:1f:a6:
         52:ef:17:16:88:32:b5:99:93:22:cc:1d:d6:13:78:79:37:c0:
         ed:2b:fe:cb:b0:86:c0:b8:da:84:09:a8:f1:83:42:ee:8b:10:
         0a:93:14:c7:37:55:91:81:d2:da:2a:a2:56:1f:a8:d0:df:55:
         4c:12:e8:55:d9:01:f4:07:31:ea:13:d1:e9:e1:bf:59:39:b7:
         15:77:97:c1:7f:42:4c:8c:b1:1e:9b:60:b5:0d:67:f5:f8:31:
         3e:a7:39:99:5a:11:06:26:b7:fc:77:9e:bc:65:6b:3d:ee:56:
         11:a7:88:bf:b3:c4:8c:2a:45:77:7e:57:df:7f:01:1c:ac:1b:
         89:4c:8c:bd:c2:69:41:7f:e4:0b:19:73:5f:22:2d:fd:ec:00:
         d8:6e:cf:0a:28:0e:2c:4f:ae:75:8d:3c:75:24:a0:21:fc:26:
         40:46:cf:e6:96:2c:db:b0:60:4e:39:fc:5b:34:f4:f1:ce:1e:
         7d:5a:0c:a4:4b:9c:af:e7:14:fd:94:5a:dd:84:ce:3c:5f:9b:
         9f:68:1e:cb:49:c2:0f:3e:a5:72:b5:a8:f5:2c:0d:f3:42:93:
         4b:46:4f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----