Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/XCrrWLRH8Ugmo65RfC1kPicOHiI.roa
File:                     XCrrWLRH8Ugmo65RfC1kPicOHiI.roa (raw, json)
Hash identifier:          YGs+29hEL02YSscY6Yjutw4R2WRFbzW7BTFXysR9Vhk=
Subject key identifier:   5C:2A:EB:58:B4:47:F1:48:26:A3:AE:51:7C:2D:64:3E:27:0E:1E:22
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       018BB371205A1FD2D27B03A4F4D1E8C60E38
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/XCrrWLRH8Ugmo65RfC1kPicOHiI.roa
Signing time:             Thu 09 Nov 2023 09:36:57 +0000
ROA not before:           Thu 09 Nov 2023 09:36:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     174
IP address blocks:        2a0a:2f80::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b3:71:20:5a:1f:d2:d2:7b:03:a4:f4:d1:e8:c6:0e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Nov  9 09:36:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5c2aeb58b447f14826a3ae517c2d643e270e1e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:7e:3a:a2:23:55:00:e7:7b:51:84:e0:f2:
                    f2:ba:21:58:06:36:28:39:ec:f1:a3:c3:11:89:19:
                    be:03:70:81:bd:5a:9d:e8:75:ee:8d:15:87:ef:25:
                    56:50:90:1b:76:ee:35:ea:3a:f2:07:29:fd:ea:71:
                    37:85:b9:c2:a1:ff:fd:3c:ae:03:50:72:57:66:1d:
                    69:a7:a7:5f:00:49:d7:6b:be:1f:fb:43:09:38:98:
                    05:d3:9b:08:c9:b1:56:fe:c3:a1:dd:a6:df:58:3d:
                    83:09:8d:c0:01:c0:9c:47:5e:bb:ce:1f:ad:ab:f2:
                    47:31:19:d9:55:aa:7b:1b:b7:08:f6:6e:44:fc:92:
                    78:43:01:ce:7f:6c:1b:d6:24:71:c5:38:70:4c:27:
                    5d:cd:d7:5b:ed:00:0c:88:4b:0f:4d:9e:9c:e1:2e:
                    99:5a:92:32:1d:0f:3e:42:ff:a1:94:1d:20:22:db:
                    75:fd:ce:11:c3:3f:15:99:d9:46:ee:73:72:d2:6d:
                    8d:91:86:3c:00:53:1f:6d:f2:26:bb:e2:dd:fa:c5:
                    34:69:7f:f1:73:cb:25:50:e4:54:ab:47:12:2b:22:
                    02:2d:b7:93:5b:b2:d2:b5:1b:1f:8f:aa:ed:99:63:
                    93:9f:11:16:85:cd:5d:7b:c1:96:56:b7:91:e7:b6:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:EB:58:B4:47:F1:48:26:A3:AE:51:7C:2D:64:3E:27:0E:1E:22
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/XCrrWLRH8Ugmo65RfC1kPicOHiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:11:44:71:a8:7b:20:6e:88:90:3a:f0:89:dc:02:56:34:ed:
         0e:d3:90:24:16:60:8d:3a:fd:aa:42:50:7b:de:41:a0:86:c5:
         63:82:0b:57:bb:93:de:a2:d1:bd:24:5d:b2:6d:57:1a:ec:15:
         37:c1:4d:2b:0e:0f:f3:78:72:e5:5a:ce:0a:a1:e7:ad:f3:d1:
         6b:81:d2:a0:f6:cf:49:25:45:6b:39:63:5c:36:53:e1:cf:09:
         33:23:75:c4:65:12:20:fe:52:71:1a:9e:c4:45:3a:60:c8:87:
         63:85:5b:ea:2e:f3:b9:a3:fe:e6:00:dd:40:32:aa:09:70:77:
         83:b6:09:66:3e:93:ae:84:71:28:3d:36:9e:0a:4a:64:2e:64:
         c1:ff:c4:7e:16:72:0e:93:60:c1:f7:ed:8b:d1:eb:a0:2f:ac:
         aa:a4:c4:62:0f:31:d0:bf:a9:da:fe:eb:b3:3e:9a:75:8d:a7:
         7c:dc:83:90:0a:70:f6:d0:b9:57:9f:95:99:2a:f7:af:b3:8a:
         a0:94:45:31:b1:5e:6c:69:3a:87:21:cd:d3:49:1d:ec:75:7d:
         9e:8d:fa:7b:33:f5:f8:dd:86:53:eb:c6:7d:a8:de:0b:00:6c:
         c3:aa:18:39:b0:59:47:07:60:9a:da:94:93:67:9c:ea:db:95:
         69:d0:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----