Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/Z3qiYY6u9T4GmPVFLv3EExixxhg.roa
File:                     Z3qiYY6u9T4GmPVFLv3EExixxhg.roa (raw, json)
Hash identifier:          hsp9GsERByLjk5F9ZOnR4jz6UF4H3Ll5+Wp76aniWDU=
Subject key identifier:   67:7A:A2:61:8E:AE:F5:3E:06:98:F5:45:2E:FD:C4:13:18:B1:C6:18
Certificate issuer:       /CN=96199360259fa5b35b82953c5ed97999228341ac
Certificate serial:       01866156C14D28F9947B0654126DA2376B65
Authority key identifier: 96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/Z3qiYY6u9T4GmPVFLv3EExixxhg.roa
Signing time:             Fri 17 Feb 2023 21:45:20 +0000
ROA not before:           Fri 17 Feb 2023 21:45:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212986
IP address blocks:        91.212.96.0/24 maxlen: 24
                          2a12:7cc0::/29 maxlen: 29
                          2a12:7cc0::/48 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:61:56:c1:4d:28:f9:94:7b:06:54:12:6d:a2:37:6b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96199360259fa5b35b82953c5ed97999228341ac
        Validity
            Not Before: Feb 17 21:45:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=677aa2618eaef53e0698f5452efdc41318b1c618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:9a:eb:f2:e0:8c:40:58:26:69:76:b6:b5:
                    e3:bc:ba:4a:86:81:db:d4:be:83:54:72:6b:5d:f0:
                    99:44:eb:52:be:21:0f:2b:a5:c4:5b:d4:7e:af:35:
                    5d:4b:36:9c:1d:3e:96:5e:9a:1c:69:c6:91:b5:39:
                    27:cd:55:00:c5:2d:00:01:6f:bd:9c:d0:85:f0:c0:
                    25:a4:99:a1:82:ef:73:34:e9:98:ba:a0:0a:7a:3b:
                    4f:61:85:4c:7c:19:5a:8e:11:04:3e:33:c2:57:bc:
                    9e:71:92:42:4a:1c:04:4a:23:a7:9f:ce:16:49:8f:
                    82:2c:ab:1d:63:fa:45:b7:b5:4b:e8:92:65:16:38:
                    21:82:03:19:c9:eb:43:2a:1a:03:aa:67:54:e1:9d:
                    9f:ee:f2:5f:81:3d:08:59:83:21:58:77:a3:d9:d0:
                    66:09:ea:9a:43:29:1a:53:e6:07:5c:fa:6c:db:d1:
                    0d:5d:df:b5:28:cf:8e:0f:b6:8b:c3:56:f2:10:52:
                    6e:95:ae:2d:3a:15:b7:5e:d8:bc:04:ae:af:4e:ed:
                    cd:d1:b2:27:3f:83:14:98:53:d4:7f:7e:ae:ee:7f:
                    8a:b6:b9:cf:89:72:97:5a:3a:24:c7:72:1f:7c:95:
                    97:37:2c:87:b2:44:17:59:11:eb:52:ff:9c:0e:69:
                    23:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7A:A2:61:8E:AE:F5:3E:06:98:F5:45:2E:FD:C4:13:18:B1:C6:18
            X509v3 Authority Key Identifier:
                keyid:96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/Z3qiYY6u9T4GmPVFLv3EExixxhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.96.0/24
                IPv6:
                  2a12:7cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:90:2b:09:d6:77:56:9a:7b:7f:92:00:b8:9c:0c:d9:40:06:
         a0:8e:73:47:fb:c4:23:8c:f7:ef:da:86:70:6a:61:19:e8:6d:
         9b:5a:71:80:33:98:ab:39:24:68:63:8a:7f:3b:e5:7c:c7:c1:
         79:6f:61:a7:a1:f5:6e:57:9d:dd:b2:8c:cf:2a:27:ef:ee:f4:
         f8:d1:c2:3e:7e:b2:45:b7:53:5b:63:9b:72:30:01:a0:3f:b8:
         10:b0:38:8b:5b:c0:ef:8a:2b:21:6f:64:43:74:f2:bc:00:bd:
         56:ba:b2:1a:d9:6a:21:52:63:be:d6:de:ee:e2:c2:81:e5:6f:
         86:a7:02:fd:34:63:d1:9b:31:1f:38:39:65:ad:fc:d3:bf:ad:
         3d:ff:ed:d4:dc:b1:5e:da:16:24:02:a4:c9:1f:c2:22:27:fc:
         65:83:a9:49:da:19:35:14:03:2b:e8:f3:57:8d:7d:f1:97:ad:
         ed:5f:ad:d1:45:ca:3b:ed:90:ca:49:44:74:42:6f:1a:c4:86:
         21:7b:e7:3d:d0:37:94:e5:d0:07:f2:3e:be:ec:ae:eb:0a:5c:
         3a:d5:d4:99:3f:a5:cc:ba:f8:e7:0a:55:17:ec:05:9f:03:22:
         3f:2f:93:c0:34:6c:4e:1a:e8:dd:a0:fb:87:3b:28:82:33:9e:
         c4:b1:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----