Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/bjvF5SgZ0kaLdZMHVU5GOxQGxbk.roa
File:                     bjvF5SgZ0kaLdZMHVU5GOxQGxbk.roa (raw, json)
Hash identifier:          YDDGdXQwFja8NebBdg7KifHXSksx+A4/HW6Klc3GWpY=
Subject key identifier:   6E:3B:C5:E5:28:19:D2:46:8B:75:93:07:55:4E:46:3B:14:06:C5:B9
Certificate issuer:       /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial:       018571831EE593B2767589A8649D0D9C7599
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/bjvF5SgZ0kaLdZMHVU5GOxQGxbk.roa
Signing time:             Mon 02 Jan 2023 08:04:56 +0000
ROA not before:           Mon 02 Jan 2023 08:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49490
IP address blocks:        213.217.8.0/24 maxlen: 24
                          2a12:d980::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:83:1e:e5:93:b2:76:75:89:a8:64:9d:0d:9c:75:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
        Validity
            Not Before: Jan  2 08:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e3bc5e52819d2468b759307554e463b1406c5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:11:1c:62:a6:67:c5:dc:be:c4:dc:52:25:
                    62:62:5e:5e:dd:c3:3c:85:bf:11:50:3f:92:2c:5f:
                    87:e6:56:c5:61:a3:d8:10:02:d6:23:9f:15:07:23:
                    ca:c9:f3:0f:a8:e2:74:a2:33:c3:2d:3a:2f:91:0b:
                    d9:21:ec:a6:05:d2:a9:4c:78:29:05:13:15:c6:50:
                    c8:72:76:06:e6:4d:eb:bc:86:6e:d9:bd:6c:59:18:
                    0c:0a:2a:56:72:d6:80:96:f4:7b:06:0e:cc:79:4a:
                    10:42:0c:34:29:ce:68:fe:af:c9:b3:19:6a:ed:71:
                    40:53:dd:31:df:73:1c:1e:0d:26:5a:65:66:f3:5d:
                    4d:15:74:9e:8f:ca:99:7f:3b:bf:95:ee:06:c6:81:
                    fb:25:99:7f:49:98:05:f9:69:a7:9d:09:3e:1b:8a:
                    5a:1b:cb:3d:4e:0d:e4:ce:8e:8e:ec:29:a3:58:57:
                    1b:ad:6a:bb:32:4e:23:14:c2:41:5e:88:37:9c:26:
                    73:6e:66:99:19:05:89:b3:04:10:57:3c:18:36:c6:
                    c8:9c:ab:7d:b1:95:5c:4e:8b:d7:dc:c9:22:11:66:
                    36:70:6b:20:99:ff:45:85:c0:67:78:99:1f:a5:d2:
                    91:c8:e6:4c:d5:a2:bf:ef:57:f5:ae:90:7c:1e:f5:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:C5:E5:28:19:D2:46:8B:75:93:07:55:4E:46:3B:14:06:C5:B9
            X509v3 Authority Key Identifier:
                keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/bjvF5SgZ0kaLdZMHVU5GOxQGxbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.8.0/24
                IPv6:
                  2a12:d980::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:83:d8:41:f6:d3:45:e0:2b:71:55:f7:d9:81:25:c4:63:
         10:48:08:a5:d2:b6:32:45:e2:d8:69:2d:9c:7d:2e:bd:37:a4:
         05:7b:db:15:39:ec:76:03:a9:d0:d9:e5:b4:f3:17:32:13:1f:
         52:83:1c:dd:64:ed:e6:9e:51:05:29:b2:36:47:30:e0:0b:82:
         d7:94:1b:76:df:e0:1d:2b:82:1b:09:f1:c9:f5:a9:94:7a:a1:
         8b:de:cb:94:c1:7c:2a:f1:be:c4:d5:8a:ed:99:b7:dd:2c:a6:
         90:c0:2f:31:dd:f0:40:df:41:a4:6b:a5:6e:3d:0a:64:d9:14:
         96:f6:8b:93:c7:ed:a2:de:64:c5:da:a6:e1:a5:bd:b1:07:8a:
         05:f7:b3:fa:e9:d4:f1:93:e7:58:73:99:e2:10:34:50:af:4d:
         2e:9e:ee:c4:67:2a:83:1d:7c:eb:08:31:e8:ad:42:26:91:bc:
         7a:af:98:fb:02:09:01:71:fd:e9:18:64:9b:21:c6:e9:d1:c5:
         36:94:e5:0d:cb:f8:11:4f:2a:bd:07:ae:7c:8c:e9:51:61:65:
         59:de:eb:b6:23:77:34:bb:8b:51:77:7e:fa:b5:c3:0c:12:67:
         c0:31:92:b7:97:f4:c4:85:d9:43:33:5c:2c:5e:8d:b6:cc:bf:
         25:c5:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----