Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uj2gmO-6-hNMAwLiqnxzdoSROGo.roa
File:                     uj2gmO-6-hNMAwLiqnxzdoSROGo.roa (raw, json)
Hash identifier:          Jsw7o4ip7lXE5gMfMLgSS3AnA813wj6U6pHc7DyvPV8=
Subject key identifier:   BA:3D:A0:98:EF:BA:FA:13:4C:03:02:E2:AA:7C:73:76:84:91:38:6A
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CD2776119B539CEFDE669A458949A749B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uj2gmO-6-hNMAwLiqnxzdoSROGo.roa
Signing time:             Thu 04 Jan 2024 03:14:48 +0000
ROA not before:           Thu 04 Jan 2024 03:14:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d2:77:61:19:b5:39:ce:fd:e6:69:a4:58:94:9a:74:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  4 03:14:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba3da098efbafa134c0302e2aa7c73768491386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:d8:84:39:22:ea:6a:10:a3:a0:4a:ac:d4:
                    b9:66:27:ef:80:83:bf:9b:6b:56:43:73:44:bf:3a:
                    17:c7:f7:95:4b:6c:56:0f:e9:0a:ee:6f:2f:ab:47:
                    d3:79:d2:a8:0a:9a:08:d8:38:6a:e0:dc:02:76:1a:
                    32:94:c2:43:41:3f:b0:0d:52:e6:d1:6e:7d:c5:46:
                    e5:9f:54:16:d5:1b:5c:2b:04:10:ba:31:59:d0:33:
                    fb:43:f7:59:09:76:fb:a9:38:c7:07:e2:8d:c7:b3:
                    bd:ac:17:85:66:e0:68:5a:ed:e7:97:1b:fd:45:ed:
                    8b:bf:04:c4:25:f6:ac:91:53:28:65:b8:75:83:17:
                    1e:23:72:e6:d7:8d:4e:61:e1:b0:1f:f3:65:4f:cc:
                    89:8f:46:15:6b:54:0a:1a:7c:dd:df:ed:50:9b:9a:
                    61:a6:21:0a:2d:49:f5:7a:c1:fa:c9:3f:2b:67:54:
                    c0:1a:39:00:4f:b6:59:a1:6d:f4:e5:03:1f:5c:a1:
                    d0:3f:1a:d2:1b:a3:f4:24:aa:e2:b6:fc:32:da:a7:
                    dc:b0:61:e0:75:92:18:4a:d3:cf:7f:a1:60:da:26:
                    64:f2:e2:03:fb:9e:07:81:b8:ce:2c:02:76:e8:1a:
                    92:78:33:38:b0:d8:93:64:64:fe:ae:9b:ac:f4:44:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3D:A0:98:EF:BA:FA:13:4C:03:02:E2:AA:7C:73:76:84:91:38:6A
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uj2gmO-6-hNMAwLiqnxzdoSROGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:32:28:ab:f0:28:6c:d3:a7:bd:50:10:7a:9d:fb:c0:65:87:
         78:87:b1:85:d2:43:7e:f9:cd:70:29:02:a8:b4:e3:23:57:15:
         d5:bc:11:80:1a:ec:a0:cb:a2:18:b6:9a:31:c8:22:b9:a4:c6:
         c1:1c:36:3b:bb:76:df:4b:ab:f9:e5:4c:94:3b:63:a5:9e:83:
         ba:bb:27:24:f5:bd:21:b1:70:5c:68:2e:03:b1:5f:20:da:1a:
         4d:d8:11:0d:c3:89:15:5b:c6:2c:54:22:a2:1b:00:48:4d:e4:
         3d:7a:4a:c6:b0:d5:f5:12:64:ee:78:3d:2d:0c:e1:9d:ea:2b:
         33:22:2a:b2:b7:65:72:9f:58:c7:7c:ee:89:12:7f:df:f9:c9:
         ec:7e:a7:6b:08:a2:c0:e9:6d:04:f2:e0:26:be:7c:ec:14:87:
         3c:e0:a0:e2:c2:f3:64:ef:d5:c0:6c:b2:5c:14:fb:f6:19:b4:
         96:1d:eb:90:8b:61:a2:25:72:54:94:f8:9e:68:5f:17:5f:b9:
         5d:d3:24:29:7e:d9:e0:a6:ce:3e:67:24:bf:b0:f9:aa:05:0f:
         7e:68:db:46:a6:80:30:8e:04:b6:ec:2b:53:e4:6f:2b:c2:e9:
         55:4c:83:18:58:89:36:be:7a:3a:8a:7b:6e:45:00:bd:cb:c5:
         5f:10:88:bd
-----BEGIN CERTIFICATE-----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