Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa
File:                     q8DRkztc1dPGu-XJUU20EshAugg.roa (raw, json)
Hash identifier:          Agm++Yk62HaxxiPRapHXDmJCnLUDBdqvAAel2FjoDiU=
Subject key identifier:   AB:C0:D1:93:3B:5C:D5:D3:C6:BB:E5:C9:51:4D:B4:12:C8:40:BA:08
Certificate issuer:       /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial:       018AACFFF4EAC180D9B7BA708360FD275D98
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa
Signing time:             Tue 19 Sep 2023 10:32:50 +0000
ROA not before:           Tue 19 Sep 2023 10:32:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204946
IP address blocks:        2001:678:b0c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:ff:f4:ea:c1:80:d9:b7:ba:70:83:60:fd:27:5d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
        Validity
            Not Before: Sep 19 10:32:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abc0d1933b5cd5d3c6bbe5c9514db412c840ba08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:8e:68:f1:07:1a:89:fa:cc:ea:19:5d:aa:
                    05:22:3c:97:95:82:8b:1f:73:ce:96:20:05:a4:22:
                    9a:bc:a6:25:06:1b:4f:db:0a:bd:38:c1:3b:64:2e:
                    e9:d1:6a:b7:07:55:c1:94:67:3b:1a:b4:0a:f6:17:
                    0d:1e:e4:e9:cb:3b:09:c1:c3:5b:70:30:c7:5a:ce:
                    8b:77:14:5d:78:23:83:aa:41:29:2d:41:e1:36:c5:
                    90:ff:66:07:11:d3:82:6a:d8:a8:8c:15:73:ed:37:
                    0a:aa:02:8a:fd:f4:69:9d:f9:d9:dd:25:37:52:55:
                    e3:0c:64:72:b3:af:77:e1:bd:ec:28:17:2a:e4:bb:
                    55:b5:32:03:9c:8f:45:21:e9:12:89:47:67:74:45:
                    38:7e:68:d2:8c:11:5f:12:73:80:20:ea:10:d1:5d:
                    3e:cd:c4:99:0c:55:f1:90:c7:c7:1e:6e:cb:e3:2b:
                    1a:0e:a0:cf:ee:2f:f3:ed:5b:3f:4a:d6:13:1d:56:
                    19:9c:37:45:a3:09:20:9d:86:b0:32:3f:29:e4:37:
                    5c:20:04:33:c3:62:f9:3b:97:71:1b:6f:74:a2:79:
                    a7:a0:90:10:fe:82:13:97:42:0a:f6:e4:13:dd:1a:
                    28:6f:a3:8a:94:01:2a:8c:48:e3:c8:5b:9c:ca:00:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C0:D1:93:3B:5C:D5:D3:C6:BB:E5:C9:51:4D:B4:12:C8:40:BA:08
            X509v3 Authority Key Identifier:
                keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/q8DRkztc1dPGu-XJUU20EshAugg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:11:64:7d:37:b0:24:17:01:f3:08:01:c0:ac:d8:96:d8:27:
         ad:ab:43:12:da:cb:10:c2:0a:ae:df:a4:11:68:25:25:90:3e:
         b9:da:df:ef:2b:9c:95:1e:5e:54:3a:c5:a9:96:66:c7:cc:e6:
         02:94:00:6a:fe:08:17:93:b7:b8:e1:91:c9:30:01:a7:d7:a0:
         7d:c9:8e:28:69:a8:57:64:2a:66:26:d6:fe:7d:12:fc:ce:bd:
         80:c0:6e:64:33:5a:8a:9d:e8:b2:c3:2b:da:5e:77:d0:c6:8c:
         fa:c6:d6:b3:4a:7d:23:96:77:49:23:27:9d:50:b8:ab:0f:dd:
         a1:4b:e9:3e:a7:1e:f3:64:39:04:e5:7c:71:c6:2e:74:7f:cd:
         8b:9b:51:10:92:ad:3a:b3:81:81:3a:ad:94:33:6d:8b:5f:2b:
         51:48:dd:d9:41:83:be:5f:d7:a0:d9:d4:34:62:68:90:58:4b:
         fd:1f:d7:91:49:62:e9:ea:16:cc:9e:34:09:c0:0e:5d:d9:1c:
         99:90:fd:88:18:61:67:8d:ca:5f:18:c9:6e:17:09:00:cf:1b:
         d9:04:2a:ca:e3:1b:f9:d4:63:35:9a:84:da:94:28:9b:a7:37:
         fc:1e:7a:dd:87:f4:30:e8:2c:d2:33:f5:95:c4:14:37:35:5c:
         f0:25:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----