Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNc1PirENLf6nnbh_WVwU2wQtGc.roa
File:                     yNc1PirENLf6nnbh_WVwU2wQtGc.roa (raw, json)
Hash identifier:          AFpzca0uyVCQC1lMqwl0sau/NEXnW1iqhQKRks3klhA=
Subject key identifier:   C8:D7:35:3E:2A:C4:34:B7:FA:9E:76:E1:FD:65:70:53:6C:10:B4:67
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CD0BD2F2CC3C94ED905C62C88122DB50B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNc1PirENLf6nnbh_WVwU2wQtGc.roa
Signing time:             Wed 03 Jan 2024 19:11:48 +0000
ROA not before:           Wed 03 Jan 2024 19:11:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d0:bd:2f:2c:c3:c9:4e:d9:05:c6:2c:88:12:2d:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  3 19:11:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c8d7353e2ac434b7fa9e76e1fd6570536c10b467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:35:f6:9a:c5:e6:28:14:f8:e9:d6:71:59:
                    c0:e9:e8:4f:b1:ad:d4:ad:15:7e:30:a4:e9:c7:1f:
                    36:a4:96:a0:4f:0d:5b:c7:8b:49:74:ef:f8:02:46:
                    a0:1f:2d:64:87:f1:20:c1:84:97:28:87:98:87:30:
                    21:5c:b3:c8:d5:44:4b:95:d1:da:37:a7:f3:36:85:
                    11:4f:dd:00:43:b1:2d:54:2d:3c:17:03:f7:1e:a8:
                    4f:ac:fa:f9:19:82:32:e2:e5:df:68:c5:09:4c:c0:
                    9b:31:0c:86:1f:af:1e:d3:86:ab:f0:a1:e5:60:49:
                    93:aa:17:0f:17:ec:fd:4e:70:fd:2c:b3:e1:69:8d:
                    63:b7:3a:a6:b0:c5:5b:c2:7b:83:0b:5f:8c:65:dd:
                    09:59:7f:1b:18:d8:b0:18:3f:92:e6:51:63:5e:78:
                    6a:ea:be:6d:ec:86:81:eb:40:62:af:c3:11:80:8f:
                    0c:4c:25:08:99:6c:35:fa:95:ee:c1:81:75:91:6a:
                    09:24:81:7e:56:6f:7a:5a:97:60:f1:f8:3a:d1:74:
                    b9:2d:61:0e:4b:28:bc:f8:69:dc:f0:43:1d:b9:30:
                    ec:bd:04:f1:82:9f:4c:91:33:9b:91:f1:91:46:a7:
                    36:e2:2e:97:27:69:9f:ff:44:c7:17:75:e2:01:9c:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:35:3E:2A:C4:34:B7:FA:9E:76:E1:FD:65:70:53:6C:10:B4:67
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yNc1PirENLf6nnbh_WVwU2wQtGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:12:85:6f:fc:4f:a1:c7:8f:b7:37:93:e3:e7:8f:0f:41:7e:
         2b:38:0b:f7:0c:e8:12:95:46:4c:31:01:eb:cc:60:d5:fb:1c:
         4c:3f:10:a7:8a:46:30:51:07:ef:9d:7a:6f:f0:b9:43:9d:78:
         ce:75:66:6e:bf:4d:a7:8b:79:96:69:99:5f:76:5b:f1:d0:f8:
         f7:ca:04:5c:e6:48:0c:15:5d:c7:1d:70:ba:21:dd:5a:9d:0d:
         52:f0:d0:43:de:e3:0f:31:22:df:9b:d3:3a:f9:93:e8:c5:46:
         47:06:27:ed:32:85:6f:21:9c:00:64:9e:9e:70:34:c0:39:b4:
         70:a9:c7:d4:2b:e1:5e:f4:7e:2b:c6:54:c0:9e:e9:a7:25:bd:
         89:a2:bb:8d:3b:a1:42:df:8c:7b:d4:db:56:66:0a:c1:88:2f:
         65:60:2b:84:5e:ab:d5:35:c0:69:0a:8c:1e:20:55:98:9d:e2:
         fa:07:11:b9:6b:07:14:f6:df:c3:d8:da:9b:39:31:41:a7:a8:
         58:40:5c:9e:15:77:13:fb:87:f0:e3:13:e3:66:11:ad:7d:fd:
         b8:b9:2c:d8:a7:1a:26:54:0e:35:92:5f:dc:3b:32:42:cb:47:
         37:09:52:ae:76:48:8f:0c:61:cf:9a:10:c1:54:3f:72:c2:9d:
         db:d1:db:13
-----BEGIN CERTIFICATE-----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