Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa
File:                     ZAOrb6okZVUAB05ijM-wFMjQqXo.roa (raw, json)
Hash identifier:          GCAqlvboAq3McrUmiE33ZgswUpwzWSnNtbXTgZPgWRc=
Subject key identifier:   64:03:AB:6F:AA:24:65:55:00:07:4E:62:8C:CF:B0:14:C8:D0:A9:7A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018B68CB9C5645D2885A95C619CA9D71E7A7
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa
Signing time:             Wed 25 Oct 2023 21:44:16 +0000
ROA not before:           Wed 25 Oct 2023 21:44:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198231
IP address blocks:        2a11:e101::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:68:cb:9c:56:45:d2:88:5a:95:c6:19:ca:9d:71:e7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Oct 25 21:44:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6403ab6faa24655500074e628ccfb014c8d0a97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:e0:65:01:57:95:32:a4:d3:12:64:1e:6a:
                    a3:85:06:e5:8f:93:6a:91:0e:1d:9c:35:1d:42:ea:
                    5d:80:96:f8:b8:30:fe:4d:58:b1:56:c3:5e:46:4a:
                    88:24:6e:50:83:71:18:af:8e:d2:7b:b8:77:e3:78:
                    2f:eb:8a:d4:9f:39:9b:23:b3:0f:3d:6c:a7:fe:43:
                    fe:02:7a:3c:18:a8:f0:fe:4a:ac:5e:e0:36:9e:08:
                    c7:50:86:09:70:84:28:13:f3:a7:15:a6:a8:ba:73:
                    a5:d6:ac:34:2c:c3:80:39:80:21:e7:b9:7c:d5:99:
                    d0:82:18:db:26:22:88:0e:58:e7:9d:30:7e:ba:37:
                    75:be:ac:3f:90:05:9e:fb:5d:f1:b6:07:d5:37:db:
                    36:b8:43:85:57:4f:44:47:21:86:04:49:dd:b1:15:
                    ca:71:21:9b:23:b1:68:1b:a1:ac:08:3a:e1:92:8a:
                    48:2b:fe:5a:59:de:d7:3c:1b:18:6a:9c:24:e9:9d:
                    b8:89:cd:21:b7:7d:95:48:8c:b1:6e:bc:cc:70:a9:
                    60:76:90:f2:97:b9:76:07:4c:1d:2f:bc:e4:63:5c:
                    f9:1d:82:1e:f3:a2:7b:1c:69:0b:c3:c2:a8:9f:e1:
                    92:2e:e2:c1:dc:f4:5a:08:e4:24:cc:f5:fe:54:af:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:AB:6F:AA:24:65:55:00:07:4E:62:8C:CF:B0:14:C8:D0:A9:7A
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:e101::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:10:8a:10:0a:60:fa:49:75:25:57:55:8a:47:eb:53:80:
         66:a1:65:7b:ca:ad:e1:48:dd:3f:d0:ce:60:86:c4:ed:81:c8:
         94:21:82:4e:af:c4:28:57:47:bb:65:d6:5c:a2:8f:b8:43:06:
         15:c0:84:8a:15:7d:da:96:0f:b7:b5:9c:8d:2c:1b:1b:5c:67:
         e4:70:e0:ec:43:7b:ee:1a:f8:9f:ea:83:48:9d:48:eb:39:76:
         c3:67:09:03:a3:cd:5e:3f:dd:11:99:39:b7:34:54:51:c7:1b:
         c2:52:f4:31:2e:95:49:4e:8e:aa:00:dc:b3:7b:96:aa:e2:29:
         f5:1d:f6:b0:ed:86:2e:34:e2:ff:1b:bb:1a:17:98:f8:33:cc:
         9b:59:9c:a4:07:d9:5e:90:35:fa:d3:df:08:16:d0:5e:0e:17:
         af:21:81:fc:57:99:3c:e0:25:8e:fb:53:1b:20:f0:24:09:88:
         a0:3a:fc:02:3c:c5:31:53:ed:5d:63:7a:c9:99:a2:b6:34:99:
         43:43:08:52:b3:89:4b:54:1d:84:fe:cb:51:58:f3:d6:aa:22:
         e5:85:da:0e:7a:55:4b:04:90:52:11:19:f5:38:e9:a7:64:6b:
         e3:38:40:83:d0:80:fd:2e:a8:58:17:89:94:88:15:99:6f:40:
         64:6e:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----