Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa
File:                     dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa (raw, json)
Hash identifier:          wXVWnB26NIXKEQpnzAdoYoI/RnNwmJSeDuSW9GZNtlA=
Subject key identifier:   74:8B:B4:9A:0A:B0:90:E4:FA:C7:4C:E4:A5:46:66:0F:1B:6A:83:24
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0187B563127B4238FD30F8A030F58552B1A2
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa
Signing time:             Mon 24 Apr 2023 22:29:41 +0000
ROA not before:           Mon 24 Apr 2023 22:29:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203363
IP address blocks:        2a05:4140:700::/40 maxlen: 40
                          2a05:4140:800::/40 maxlen: 48
                          2a05:4140:19::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b5:63:12:7b:42:38:fd:30:f8:a0:30:f5:85:52:b1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Apr 24 22:29:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=748bb49a0ab090e4fac74ce4a546660f1b6a8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:a9:56:b9:71:76:f5:5f:cb:30:c8:94:0b:
                    cc:69:8d:d3:78:e0:63:90:6f:7f:3a:73:77:43:db:
                    e8:8b:18:29:92:21:ed:f0:67:a5:96:07:38:88:1d:
                    9c:db:fc:86:ec:a8:53:a8:67:00:16:87:ac:46:3d:
                    e0:8a:8b:be:18:56:94:08:90:24:a9:c6:5b:f6:6c:
                    97:ba:0e:da:fc:20:66:11:29:fe:59:58:87:41:ad:
                    75:ec:ab:b7:ee:68:70:95:c1:ca:ce:13:c9:c1:92:
                    b3:a3:ca:40:af:01:89:2b:a2:a0:ea:a1:5a:02:56:
                    8d:66:7c:6e:9b:dc:89:42:6b:2a:c9:63:18:4b:27:
                    cd:63:f1:cd:f0:23:c9:5c:d0:f7:26:34:cc:f7:e6:
                    ae:6b:ce:2f:d7:c9:a7:0d:77:fd:cc:26:b9:ff:3b:
                    73:c2:b2:d3:8a:bb:f2:c2:a0:9f:f8:f0:b5:61:e9:
                    44:4d:a7:bb:85:9a:19:59:39:19:f9:9d:ed:07:2d:
                    23:8f:2e:2a:af:b6:32:0f:80:6e:a5:c9:63:ac:f2:
                    21:9d:1a:2f:49:76:fd:28:3e:a5:d0:57:0a:fa:e0:
                    e8:49:12:2d:db:cd:8c:af:ca:59:55:bf:2b:f8:01:
                    73:54:56:c2:55:8e:f0:68:e2:08:ba:17:98:26:cc:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:B4:9A:0A:B0:90:E4:FA:C7:4C:E4:A5:46:66:0F:1B:6A:83:24
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/dIu0mgqwkOT6x0zkpUZmDxtqgyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:19::/48
                  2a05:4140:700::-2a05:4140:8ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:ff:3f:2e:12:b2:2b:fe:99:8d:b8:ed:72:0c:62:d6:66:
         de:0a:37:64:fe:e7:f8:4e:fd:5e:d4:d9:f8:d8:3b:5c:a8:d7:
         4d:ab:f1:a5:c1:2e:50:7f:be:57:57:17:8a:41:0b:95:15:6d:
         16:04:bd:f2:d9:bb:61:82:fe:c6:8f:c2:e2:92:37:28:a2:f4:
         a8:8d:48:d2:15:3a:42:68:2e:ee:59:10:25:88:f1:e0:e5:dc:
         b6:69:0c:8b:6c:cb:9e:8d:57:4c:eb:c7:71:97:61:be:cc:dd:
         5e:e2:d4:22:e1:b0:48:cc:34:62:50:1f:d1:97:ee:75:bb:40:
         1d:e7:8f:53:2f:f7:c1:a0:e4:6c:92:30:17:d7:d3:ca:34:84:
         bd:38:bd:1b:ee:01:12:c5:fb:cf:48:fa:f6:de:36:07:01:55:
         fa:05:6d:fa:fb:b4:0e:2c:15:3d:fb:74:48:0e:50:b5:38:df:
         90:e4:4c:a3:d2:99:8c:a0:ab:f3:d4:d7:9f:d0:9c:c2:f2:c3:
         87:36:0c:9f:0d:1d:72:0c:de:a5:0c:0f:3c:b1:ac:de:1e:36:
         bb:05:dd:c0:8c:24:cd:ab:98:62:3e:e0:bb:0f:39:d1:3a:46:
         a6:05:cc:22:44:32:33:37:87:83:d9:2d:8a:e2:69:e8:0b:20:
         ba:10:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----