Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8eIZZIFGfqI4DQJYQdIJO0-uijQ.roa
File:                     8eIZZIFGfqI4DQJYQdIJO0-uijQ.roa (raw, json)
Hash identifier:          vO+41OWIiqasXB6lXKjuemPSPLmt+z9BQMf+FKNWVMA=
Subject key identifier:   F1:E2:19:64:81:46:7E:A2:38:0D:02:58:41:D2:09:3B:4F:AE:8A:34
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018BAA6613DD070BEC23F303971A98677497
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8eIZZIFGfqI4DQJYQdIJO0-uijQ.roa
Signing time:             Tue 07 Nov 2023 15:28:18 +0000
ROA not before:           Tue 07 Nov 2023 15:28:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211772
IP address blocks:        2a0b:b81::/46 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:aa:66:13:dd:07:0b:ec:23:f3:03:97:1a:98:67:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Nov  7 15:28:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1e2196481467ea2380d025841d2093b4fae8a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:26:7c:ed:d1:9e:a0:d6:9c:79:35:d4:31:
                    3d:f3:0e:59:57:b5:e7:0d:28:1b:16:31:5a:38:39:
                    26:b8:79:c5:ed:31:a8:29:40:5d:48:53:d3:9d:d9:
                    e5:4e:59:dc:80:74:62:d1:d9:d0:64:54:bf:40:11:
                    37:35:4c:60:4a:0c:13:02:02:07:6c:b6:fb:37:eb:
                    91:4a:14:16:ff:27:b6:f5:50:d8:a0:7b:9e:48:d1:
                    07:04:a4:58:ea:7f:e7:0b:6d:92:75:e8:e4:a1:8b:
                    b9:32:45:67:a5:cf:71:40:f3:e7:5b:60:48:45:64:
                    70:72:52:e6:be:4b:5e:97:b6:1b:11:0c:0a:77:24:
                    66:15:c1:fe:be:bc:22:eb:ab:73:78:91:20:33:bd:
                    24:d5:85:7d:1d:35:e0:66:7b:96:a5:79:11:ee:83:
                    54:59:26:9a:2a:f3:69:dd:53:ce:18:38:0a:00:42:
                    5b:e2:e7:b8:55:55:ca:9f:29:88:49:61:21:ec:23:
                    7a:44:e9:8b:fe:20:4d:fe:35:d6:38:7f:5c:91:5d:
                    09:a5:5c:0f:a4:fb:85:aa:8f:c9:f1:b2:b0:ff:3a:
                    2c:b6:f0:be:4c:38:3d:e0:4d:b7:a0:74:8c:ae:ee:
                    33:ac:5e:8f:09:9c:0a:c9:35:cd:a8:da:c3:ce:ee:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:19:64:81:46:7E:A2:38:0D:02:58:41:D2:09:3B:4F:AE:8A:34
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8eIZZIFGfqI4DQJYQdIJO0-uijQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b81::/46

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:76:de:ac:a8:c2:05:81:1c:e0:78:d2:d5:e5:57:a7:45:
         65:48:c1:ad:4b:1d:1c:96:2d:be:01:89:f9:7d:a7:0e:22:78:
         95:2e:e5:d4:f0:ec:b7:58:b4:02:22:d3:6b:ed:12:92:18:6f:
         f9:57:1d:52:1f:7f:62:e2:ee:28:28:c8:1e:ba:38:c2:6f:f1:
         94:b8:a7:23:2b:f6:23:63:e6:4f:2c:19:e8:31:80:53:fd:61:
         81:0c:e2:ee:bc:ef:36:78:0f:55:91:35:55:03:41:7f:3e:cf:
         56:47:73:86:86:04:76:a9:fa:1d:56:dd:2d:19:f8:ab:55:f3:
         da:69:f7:2f:2d:d7:ea:0e:74:65:17:16:bb:f8:b9:b4:4a:49:
         40:7e:15:a4:b3:46:b7:ed:09:0f:4f:a9:87:17:b9:4f:e7:69:
         67:a7:33:98:2a:2f:bb:cd:00:98:31:f3:19:fd:44:51:70:48:
         a3:9f:a6:de:1f:a0:b2:20:3e:40:f9:f4:08:75:af:07:9c:3d:
         5e:fd:d6:52:63:e1:e5:94:ae:5e:82:18:f9:e3:f9:e2:82:a3:
         fc:a6:43:a3:27:7d:9e:47:79:9c:dd:19:f8:59:63:ff:a9:c5:
         09:48:34:92:1a:fe:23:ad:8e:4d:5d:c5:c7:5f:47:33:01:8c:
         47:65:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----