Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa
File:                     EtmKReZ0oDv5I4tzp5OEsZoH34k.roa (raw, json)
Hash identifier:          3jcZGgoju9IKRWtPRrT1sLO1Unuo+MRRDqbEJnEiM34=
Subject key identifier:   12:D9:8A:45:E6:74:A0:3B:F9:23:8B:73:A7:93:84:B1:9A:07:DF:89
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       010C63
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa
Signing time:             Mon 05 Jun 2023 21:28:57 +0000
ROA not before:           Mon 05 Jun 2023 21:28:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     293
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68707 (0x10c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Jun  5 21:28:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12D98A45E674A03BF9238B73A79384B19A07DF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:cd:c7:e2:e9:09:99:69:e3:50:8e:dc:d3:
                    3a:61:0d:21:0f:d6:73:38:5a:af:3f:55:de:00:2f:
                    10:1f:2c:ca:30:71:3f:2f:40:98:f4:0c:bb:7d:6a:
                    35:56:6a:8f:7f:f3:ec:24:f3:3d:0b:47:d0:26:70:
                    91:72:12:8b:11:68:b5:c7:d5:19:62:16:ee:da:16:
                    99:4d:24:2c:ff:ed:e4:65:f3:07:70:ba:f3:35:0b:
                    27:5d:11:fa:68:3e:a6:03:5a:e5:ce:e6:96:d1:98:
                    4e:2c:26:de:23:01:b7:05:0b:04:dc:5d:f0:5c:7d:
                    2d:0e:5b:5f:5a:95:72:11:a2:12:b3:21:5d:82:8a:
                    39:a5:49:c4:27:b4:1b:96:b2:05:fc:1c:bf:f9:58:
                    89:b1:6d:48:ef:b5:84:b8:48:a4:f9:46:3b:f5:98:
                    03:50:a9:87:da:f1:94:3a:e1:3c:68:c9:e7:15:a2:
                    26:f0:0a:23:1a:94:1b:09:92:42:27:3a:70:69:e0:
                    e9:ef:b3:1f:cd:a3:5f:78:ee:f0:0f:55:24:00:b7:
                    e9:5c:28:3e:0e:03:29:11:d2:b1:c6:02:3e:24:68:
                    da:f6:1b:57:a4:76:5b:fc:f4:6a:2c:b1:09:85:fb:
                    28:2b:c0:b9:90:f5:c4:5d:08:4b:45:b8:00:76:6d:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:8A:45:E6:74:A0:3B:F9:23:8B:73:A7:93:84:B1:9A:07:DF:89
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/EtmKReZ0oDv5I4tzp5OEsZoH34k.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:26:76:ca:b9:b9:2b:c3:17:33:b7:a0:f2:5f:f5:e5:f8:c8:
         66:15:07:00:e3:5d:ab:de:7c:0e:f1:85:bb:10:4a:a1:d2:2f:
         42:21:89:34:a0:5b:12:3b:9f:6d:3c:0b:b5:fb:3d:65:06:ec:
         b2:04:d7:04:f9:3b:ea:53:60:1d:0f:49:fd:57:89:49:40:7b:
         de:8a:6e:f8:eb:47:74:91:78:ab:f6:a8:19:74:75:e2:c0:58:
         15:0f:a2:61:1d:2d:91:c1:1b:6c:d4:06:64:a1:b4:2d:45:ab:
         ae:c2:03:6e:da:09:ff:30:28:82:fa:65:23:8e:3a:e6:e6:72:
         ac:f4:e1:83:74:35:ac:5b:76:de:93:c9:31:e7:29:bf:a5:3a:
         80:49:f8:a5:b8:4f:73:40:53:c4:55:c7:88:97:ca:44:13:ec:
         3e:54:d4:7b:dc:09:2c:62:ef:cb:72:90:2d:ff:6d:a3:c0:da:
         89:1f:04:ef:68:38:52:e8:85:0f:ff:79:c8:b9:a0:43:21:bc:
         09:5b:a9:e5:e9:eb:50:a1:94:00:d3:68:75:36:29:a7:99:9c:
         30:61:32:9c:93:eb:e8:f1:f9:48:82:8b:b0:5a:c1:02:92:ff:
         e3:9e:ba:b3:d4:bd:a3:ab:05:16:88:71:65:39:b2:f1:a0:3b:
         e9:7f:f2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----