Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/5QgjqTBJHpWqqGV51ab4XeqtB9Y.roa
File:                     5QgjqTBJHpWqqGV51ab4XeqtB9Y.roa (raw, json)
Hash identifier:          Y+RKMllt3eFfma+svQv4m8b0mt8o911kpl2YXe8s2A4=
Subject key identifier:   E5:08:23:A9:30:49:1E:95:AA:A8:65:79:D5:A6:F8:5D:EA:AD:07:D6
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       018AB6A984539E3562435E5F9AE06B02C7A6
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/5QgjqTBJHpWqqGV51ab4XeqtB9Y.roa
Signing time:             Thu 21 Sep 2023 07:34:37 +0000
ROA not before:           Thu 21 Sep 2023 07:34:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31027
IP address blocks:        2a03:6947:600::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b6:a9:84:53:9e:35:62:43:5e:5f:9a:e0:6b:02:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Sep 21 07:34:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e50823a930491e95aaa86579d5a6f85deaad07d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:34:8b:bf:c5:9b:e3:a6:39:9d:4e:8d:7f:
                    2e:d3:d1:c8:da:61:1c:32:85:e6:b5:63:d1:cd:22:
                    76:cf:03:8a:46:bc:1f:46:df:80:c8:e0:aa:a6:e0:
                    e2:9d:97:b5:3a:8b:14:aa:73:66:09:9d:ff:de:d4:
                    a3:5e:82:2f:10:73:5a:8c:e1:1e:a1:35:98:71:45:
                    05:0d:2b:3c:ff:15:d6:02:bb:fb:e8:90:12:8f:cf:
                    29:93:54:14:8a:58:25:13:18:ba:40:cc:4a:f8:ac:
                    33:5b:1b:e0:cc:21:9b:7b:bf:7f:34:23:bd:8c:5c:
                    1e:93:11:44:5a:fd:8c:3c:00:be:68:0b:5c:ec:f1:
                    73:eb:46:2a:2c:a3:08:8f:53:44:bf:30:4d:ea:9e:
                    43:24:36:60:e7:fb:f0:79:ca:ab:cd:db:0d:b1:9c:
                    ca:ef:a2:dc:5e:6f:ea:41:7b:a8:38:d7:83:ca:93:
                    cb:b5:55:2e:f2:b9:13:6a:8c:a1:ba:eb:b6:01:dd:
                    a0:b1:7f:0b:c9:db:ee:e2:c8:d2:7a:b5:af:91:af:
                    86:15:7d:d0:cd:4e:9a:2d:5b:50:d5:8f:4f:29:a4:
                    78:25:2d:b0:eb:18:68:93:cf:8e:3e:16:06:72:47:
                    70:9e:0a:7d:db:df:76:8b:8c:83:fe:97:74:84:62:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:23:A9:30:49:1E:95:AA:A8:65:79:D5:A6:F8:5D:EA:AD:07:D6
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/5QgjqTBJHpWqqGV51ab4XeqtB9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6947:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:79:21:50:00:31:88:f7:b2:18:b1:75:73:f7:c8:ec:80:
         27:e8:3b:46:ae:53:99:60:66:d8:02:d8:c6:24:48:f2:50:b8:
         16:a1:78:83:d1:95:42:23:2e:cb:09:0e:48:05:44:60:cc:ef:
         52:5b:40:71:84:62:13:cf:c4:f2:ba:60:fa:4e:67:43:5d:0e:
         b3:27:9e:43:1c:b8:c3:0f:65:43:9b:92:9a:27:6f:90:1f:ea:
         55:26:cc:42:1e:26:92:76:f4:99:79:2e:81:0d:96:f3:b2:0f:
         c8:dd:7b:b8:9a:a3:c2:d8:a9:30:70:30:1e:4a:35:b8:14:5d:
         0a:73:12:2c:62:af:74:19:d0:81:ee:45:00:26:23:b4:7c:86:
         2d:73:17:d1:87:e9:4f:0a:80:58:d3:c5:d4:d8:44:df:9e:58:
         f3:37:28:cf:9a:eb:4c:7b:79:9e:96:0b:4c:5a:13:c6:3c:9d:
         c5:3c:8f:17:27:c8:91:bb:51:5f:71:3a:79:39:7b:e6:f0:da:
         27:0a:00:79:85:1d:1e:4f:2e:56:62:ad:95:b2:f4:3e:de:5a:
         c9:46:7b:c0:9d:92:72:81:89:ba:ae:4e:ca:03:88:07:5e:8b:
         2a:bb:df:e7:81:f6:6e:d0:aa:b4:69:d1:88:fb:81:b8:5e:e7:
         a5:81:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----