Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa
File:                     WEQAfgtlksJw_3M3W3Afq6cJu5w.roa (raw, json)
Hash identifier:          +divGeDM0yawgG/IO99XMcX5pOA+Ae+nUYPlr+rzz9E=
Subject key identifier:   58:44:00:7E:0B:65:92:C2:70:FF:73:37:5B:70:1F:AB:A7:09:BB:9C
Certificate issuer:       /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial:       0186741F0C737350147B169C3DFF369B5016
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa
Signing time:             Tue 21 Feb 2023 13:17:17 +0000
ROA not before:           Tue 21 Feb 2023 13:17:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1921
IP address blocks:        2001:678:20::/48 maxlen: 48
                          2a02:850:ffe2::/48 maxlen: 48
                          2a02:850:ffe5::/48 maxlen: 48
                          2a02:850:ffe0::/48 maxlen: 48
                          2001:67c:1bc::/48 maxlen: 48
                          2a02:850:ffe3::/48 maxlen: 48
                          2a02:850:ffe6::/48 maxlen: 48
                          2001:678:24::/48 maxlen: 48
                          2a02:850:ffe1::/48 maxlen: 48
                          2a02:850:ffe4::/48 maxlen: 48
                          2a02:850:ffe7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:74:1f:0c:73:73:50:14:7b:16:9c:3d:ff:36:9b:50:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
        Validity
            Not Before: Feb 21 13:17:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5844007e0b6592c270ff73375b701faba709bb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:d7:03:a3:72:3b:2a:1a:25:52:c0:58:96:
                    62:d5:fc:2f:a0:59:57:4d:1d:64:05:be:c3:bf:a5:
                    72:30:d8:d5:ae:b1:90:03:8c:67:23:d0:0f:a5:9d:
                    d7:79:f4:dc:91:c2:1b:b6:25:e9:71:ef:47:08:3c:
                    6d:89:54:90:0b:16:34:7d:a4:58:39:44:7f:9f:b5:
                    49:82:a6:9c:c8:1f:62:53:dc:34:2c:a8:09:5e:3e:
                    28:83:11:c9:c4:a0:37:a3:ac:ee:92:95:14:a5:21:
                    56:52:8c:7c:fd:42:dc:d2:da:fc:a2:65:b2:1c:6c:
                    20:48:c1:f2:68:34:c1:74:9e:db:09:ee:e5:d9:bf:
                    66:f5:bf:57:bd:ee:84:d2:0b:40:8d:6e:1b:16:e4:
                    5e:de:d6:cc:cb:4c:4d:a9:c1:2a:b0:5f:b3:79:48:
                    05:7c:2a:03:b6:81:89:06:b6:0c:61:f9:af:44:0a:
                    bb:8a:5d:aa:bd:8f:07:ab:1c:b9:0c:95:19:7a:d4:
                    ac:72:94:f7:06:84:88:df:22:f5:3e:58:54:69:84:
                    b7:bc:2c:5d:92:d7:c8:54:ca:09:ab:36:b6:a5:7c:
                    c9:16:f2:9b:d3:6f:f7:de:f2:21:38:00:fe:8d:9a:
                    e7:a9:09:cf:85:07:23:b0:ce:23:a8:0f:0d:76:13:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:00:7E:0B:65:92:C2:70:FF:73:37:5B:70:1F:AB:A7:09:BB:9C
            X509v3 Authority Key Identifier:
                keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/WEQAfgtlksJw_3M3W3Afq6cJu5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:20::/48
                  2001:678:24::/48
                  2001:67c:1bc::/48
                  2a02:850:ffe0::/45

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:f6:93:75:0d:3b:7f:17:19:89:22:68:43:ce:75:13:40:
         d7:f5:e2:02:35:aa:3f:c0:74:24:f0:49:e6:b7:d4:d6:33:bc:
         51:fe:56:4d:98:1b:4c:cd:f2:64:e6:68:b9:b9:bd:a6:bb:11:
         6f:93:78:da:68:ee:da:87:fe:15:6e:a0:e6:51:a3:3b:ac:bf:
         87:3b:9f:72:4e:37:da:f1:01:f4:48:7d:4a:26:97:99:9b:b6:
         0e:c8:49:02:7d:ec:f0:b4:0e:7d:29:ad:4b:02:46:91:8c:19:
         e5:dd:c2:12:bb:9f:fc:e3:a8:05:d6:f5:a2:67:aa:59:5a:33:
         99:ae:f5:b1:3e:31:16:65:4a:58:eb:60:75:2d:d2:5a:28:f2:
         e6:32:64:86:83:10:6b:79:e3:15:f7:f3:31:fb:c2:0b:c2:21:
         11:78:f1:79:65:a4:86:56:0f:2a:d0:34:18:ec:73:8e:06:48:
         ac:6a:ec:89:32:f4:70:9d:90:6e:ae:72:a1:a5:eb:37:ab:47:
         4c:87:d6:b9:43:a7:1c:7a:b4:a9:01:f1:90:58:39:de:b6:b5:
         e8:f5:c5:36:ae:d3:fc:10:67:c6:d3:be:2b:f3:89:e7:0b:18:
         78:79:07:29:06:7f:d7:1c:1b:66:1c:3f:5e:8d:0c:de:d4:c7:
         ec:e7:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----