Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/EeQJpLUs4hrLzN9PU-0tfbD-36Y.roa
File:                     EeQJpLUs4hrLzN9PU-0tfbD-36Y.roa (raw, json)
Hash identifier:          18PCXZOBSNa2WsbB0zuF6USoaRjbOi5yb1ox2uwpaTE=
Subject key identifier:   11:E4:09:A4:B5:2C:E2:1A:CB:CC:DF:4F:53:ED:2D:7D:B0:FE:DF:A6
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       018A6A819EF62A2CBED34A34AFF56B67E674
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/EeQJpLUs4hrLzN9PU-0tfbD-36Y.roa
Signing time:             Wed 06 Sep 2023 12:39:54 +0000
ROA not before:           Wed 06 Sep 2023 12:39:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51224
IP address blocks:        91.216.216.0/24 maxlen: 32
                          2001:67c:254::/48 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6a:81:9e:f6:2a:2c:be:d3:4a:34:af:f5:6b:67:e6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Sep  6 12:39:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11e409a4b52ce21acbccdf4f53ed2d7db0fedfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:15:cb:8f:34:08:c7:62:b1:65:a7:36:eb:
                    88:e4:03:23:99:17:72:de:33:32:11:c7:e9:74:95:
                    e7:5c:1b:54:4c:b9:22:cb:86:5d:f9:c0:37:61:7e:
                    c0:7c:91:d3:ee:28:09:81:d7:11:3c:3a:0d:87:5a:
                    af:c2:2b:76:7e:7c:8b:1d:bb:64:3f:af:37:b7:fb:
                    49:1f:12:cf:be:0e:0f:28:6b:36:31:ba:21:43:e1:
                    ac:f7:92:a7:e9:77:01:ed:69:fc:45:0c:6c:10:78:
                    78:25:33:6d:ef:c5:17:43:42:42:7e:20:c5:76:a1:
                    e4:f2:59:5a:ff:5d:53:36:16:d6:b1:94:28:1a:68:
                    41:7d:3f:c0:cc:18:70:8a:12:fc:04:cf:2b:ec:ec:
                    8e:7a:a3:63:47:dc:3a:d3:be:16:8a:09:97:d9:5d:
                    f9:bf:a9:b6:6e:07:5b:85:88:96:45:ac:93:64:b3:
                    bd:9f:bb:ac:a8:12:42:1e:95:c5:31:b0:d3:ce:4b:
                    93:50:bf:a4:8e:e3:78:5a:a3:fa:fb:20:99:a0:eb:
                    30:34:70:36:26:0b:9c:b0:e3:63:8b:c4:c6:56:b8:
                    06:5b:54:db:d9:68:bc:8d:2d:17:9b:f7:7a:99:1c:
                    7d:52:63:4b:07:6f:e8:a5:af:9b:dc:65:6c:9a:fa:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E4:09:A4:B5:2C:E2:1A:CB:CC:DF:4F:53:ED:2D:7D:B0:FE:DF:A6
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/EeQJpLUs4hrLzN9PU-0tfbD-36Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.216.0/24
                IPv6:
                  2001:67c:254::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:70:15:06:c3:9b:86:a3:aa:0b:1b:d6:bd:b1:86:ea:34:db:
         70:54:18:5f:86:0f:97:0b:1d:82:dc:2d:7e:09:03:82:f2:ea:
         19:9d:8b:50:a8:86:98:db:5c:18:26:30:0c:2b:10:5f:5e:f8:
         e3:02:ec:b5:6c:91:db:9a:35:21:dd:b6:2f:96:3d:f3:71:0e:
         b6:82:34:93:47:39:4b:d5:9b:84:4c:31:0a:87:20:d9:16:5f:
         ed:e5:5b:eb:2a:ba:4d:b5:36:65:4a:8e:08:8f:a6:fc:81:d9:
         86:a6:90:f7:ee:cf:63:23:86:ae:b0:c3:09:72:d6:57:11:56:
         a7:69:2a:3b:90:16:b9:1d:a2:0f:fa:a4:ed:6f:85:6d:3d:7b:
         b7:0c:7b:d4:c4:c2:19:a3:b3:c3:c4:dc:8c:fa:f5:40:ab:73:
         c1:53:27:6f:2e:7d:5a:30:7d:05:8b:7e:37:f9:18:92:91:da:
         15:12:28:18:6a:00:7a:7d:c5:e0:c3:7f:72:78:d8:f1:06:d2:
         c4:2f:e7:11:14:12:c9:1a:8a:e0:e3:1e:8c:6c:7d:b7:0b:cd:
         9b:72:f3:9f:27:c1:6e:c8:1a:63:1c:62:26:9b:81:25:96:c4:
         05:99:95:63:0b:3c:c2:af:80:06:ff:3f:f3:2e:f2:67:63:ce:
         c9:46:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----