Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/6LaOEQ60JSFUY2rU2_Pn4WrUwYM.roa
File:                     6LaOEQ60JSFUY2rU2_Pn4WrUwYM.roa (raw, json)
Hash identifier:          CqoZZyWtD5wPIxuwOWFuts0EL/XHNWC8qO5D2GBF4dM=
Subject key identifier:   E8:B6:8E:11:0E:B4:25:21:54:63:6A:D4:DB:F3:E7:E1:6A:D4:C1:83
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       01872E67387126E52B1664A157B2A1C28276
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/6LaOEQ60JSFUY2rU2_Pn4WrUwYM.roa
Signing time:             Wed 29 Mar 2023 17:25:29 +0000
ROA not before:           Wed 29 Mar 2023 17:25:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212933
IP address blocks:        193.200.233.0/24 maxlen: 24
                          2a0f:c1c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2e:67:38:71:26:e5:2b:16:64:a1:57:b2:a1:c2:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Mar 29 17:25:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8b68e110eb4252154636ad4dbf3e7e16ad4c183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:e5:6d:9b:bf:1e:cd:9d:cd:cf:ff:30:02:
                    8b:9a:a9:be:0c:34:50:81:84:f5:fc:ef:40:e9:12:
                    7e:83:b7:75:0d:55:90:b8:7c:81:cf:9e:77:a4:48:
                    3d:e1:2a:b5:10:86:ae:01:0b:8b:fc:03:dc:e8:69:
                    c4:8b:54:06:44:5b:bc:f2:47:c0:77:e0:c7:35:80:
                    05:21:ff:fb:4b:be:3d:d0:c4:87:9f:f5:e0:f7:2b:
                    46:e8:b6:34:3c:1c:ad:db:3b:84:f6:ee:5f:78:69:
                    9a:6a:2e:5e:1f:98:56:0e:1e:55:bd:ab:36:3b:58:
                    26:10:76:a4:9b:88:0e:e2:ea:6c:78:d1:b6:6b:fe:
                    da:14:0d:7b:bf:96:a3:d4:a4:a7:79:bc:34:fb:e6:
                    b8:da:29:81:3e:3b:24:05:5a:d8:f6:35:f1:c0:10:
                    6f:1f:b2:ac:f2:70:41:96:27:b5:5d:d3:6f:00:2d:
                    cb:fa:31:b5:9f:08:9d:50:ed:ea:cb:6b:0d:c4:b2:
                    a9:d4:55:56:0b:0e:45:5c:fe:89:0b:34:59:8c:81:
                    3a:ad:33:22:4b:35:99:04:7c:5a:31:5c:74:d2:eb:
                    61:5e:56:ab:18:8f:a8:7d:0d:1c:8b:64:dc:ab:a2:
                    6e:75:61:23:23:25:e5:99:dd:11:a9:c6:fe:8e:67:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:8E:11:0E:B4:25:21:54:63:6A:D4:DB:F3:E7:E1:6A:D4:C1:83
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/6LaOEQ60JSFUY2rU2_Pn4WrUwYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.233.0/24
                IPv6:
                  2a0f:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:00:d0:26:a3:91:ba:2e:ae:f6:b4:e0:1b:0a:0e:87:dc:
         ac:0e:86:d7:6d:6f:4b:a0:7a:46:f9:a9:1c:0b:9a:29:2c:e7:
         55:4d:e6:2e:99:c4:2c:9c:ec:c3:1e:0e:12:8a:24:f3:0a:b5:
         2f:d2:21:f5:be:d4:ed:8b:49:75:7d:c6:56:82:f5:52:ba:af:
         6f:4e:57:34:d6:fb:80:00:52:51:de:ef:d6:4f:2c:06:14:13:
         a9:1e:8a:5b:e6:c9:dd:2a:83:85:80:d0:2b:51:bb:bd:51:d1:
         5e:12:30:91:bb:90:52:41:ae:40:d6:29:7c:9c:ee:53:07:21:
         a7:3d:7a:df:e5:b6:7a:fd:f5:4b:5f:ff:60:11:f3:26:51:15:
         80:e4:3b:8b:fd:25:4e:a6:ea:69:8e:72:81:97:29:cf:1b:82:
         4e:ee:73:98:8c:28:a3:7b:b4:92:e2:c7:5e:40:92:70:64:01:
         c7:b2:04:13:7b:cc:de:31:18:bd:c0:96:4f:d8:8b:cd:79:d8:
         14:47:95:0e:bb:3e:12:30:03:a9:7a:98:fb:ee:35:9e:2f:1e:
         26:e0:8a:89:54:d0:2c:41:fa:d8:88:4b:68:09:2c:f6:a0:80:
         12:5f:49:b7:d7:2e:de:e8:18:f9:03:78:a9:83:76:f7:77:7e:
         6d:ef:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----