Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa
File:                     k-gdTRyeUzkaGzSAKABZ4BocnOA.roa (raw, json)
Hash identifier:          i7HvBIsBUySFL4mlSYQJaz9Yymmjc6Yu1csPIGyNyHw=
Subject key identifier:   93:E8:1D:4D:1C:9E:53:39:1A:1B:34:80:28:00:59:E0:1A:1C:9C:E0
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       018C2EC91E91A364FED5D24FE82E3C4DA3D2
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa
Signing time:             Sun 03 Dec 2023 08:26:21 +0000
ROA not before:           Sun 03 Dec 2023 08:26:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201749
IP address blocks:        212.126.115.0/24 maxlen: 24
                          2a04:2dc0:18::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2e:c9:1e:91:a3:64:fe:d5:d2:4f:e8:2e:3c:4d:a3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Dec  3 08:26:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93e81d4d1c9e53391a1b3480280059e01a1c9ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:0b:9d:ba:e9:e4:f1:11:47:95:d5:35:7a:
                    c2:d8:ff:28:45:85:6b:c7:9e:80:48:f2:e4:c1:2c:
                    05:ed:4d:55:d3:b3:14:4d:94:1b:60:06:30:83:d5:
                    c9:00:2f:0b:05:e0:62:c4:07:3b:6e:ee:13:ba:5f:
                    0d:52:29:ae:87:a0:00:78:b8:f6:39:fa:a3:c6:33:
                    8a:92:73:d8:1d:f8:c7:1b:15:1c:79:4a:5f:af:50:
                    3c:81:01:13:94:38:5a:2c:0b:b6:f1:8b:88:50:a2:
                    08:2f:58:23:de:d2:9a:87:37:6d:8f:24:ab:d2:fb:
                    65:67:6f:2c:3c:6b:3f:84:40:f2:f7:aa:89:a4:a4:
                    7f:66:7f:cb:cb:16:0b:68:10:20:d6:f5:e5:f0:bb:
                    54:5d:8b:c5:fb:62:b5:41:91:fb:97:05:c5:ba:8b:
                    4c:7d:de:fc:e3:f9:e1:0c:78:40:2b:ba:e4:be:2f:
                    7b:f9:55:14:11:ab:e9:25:ed:df:1b:51:30:8b:f7:
                    6e:66:3c:bd:c9:80:ad:05:66:4f:1d:3a:c0:10:de:
                    f8:50:79:4f:ea:db:bf:47:9e:c9:78:dd:ba:99:e4:
                    06:58:5e:b5:33:02:5a:95:24:73:17:55:45:89:21:
                    92:3d:7b:0f:a2:d3:90:04:d1:09:06:28:f1:9f:9a:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:1D:4D:1C:9E:53:39:1A:1B:34:80:28:00:59:E0:1A:1C:9C:E0
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/k-gdTRyeUzkaGzSAKABZ4BocnOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.126.115.0/24
                IPv6:
                  2a04:2dc0:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:27:83:f8:83:46:f8:3d:bb:0c:f6:76:6a:9b:87:95:fd:
         d6:51:55:77:a9:0b:b6:a0:87:d2:42:96:1e:83:73:2f:d9:a0:
         8c:80:52:90:0d:42:4d:79:73:b4:55:f8:22:dd:52:5e:f4:6a:
         25:9d:78:93:e8:6b:50:cc:7d:11:59:a0:23:79:5e:56:a1:e5:
         17:73:39:e3:3c:72:6c:54:51:5b:58:68:48:ee:89:c1:7c:3e:
         9e:4d:75:42:ef:4a:fb:5a:d3:fc:49:f1:c6:13:48:5c:b2:18:
         56:5f:63:e4:c4:e6:a1:cc:4e:47:2b:db:bf:e2:78:a5:d6:19:
         98:68:35:36:f8:3a:da:f5:40:7b:ac:a1:60:48:4f:41:c4:58:
         01:38:50:65:e2:b8:a0:00:d2:74:1d:8b:28:1c:1c:af:76:8c:
         70:8a:46:1e:1c:fa:5b:71:bc:2f:4d:d4:a1:d5:cf:3c:cc:a2:
         36:49:ee:50:dc:69:d7:f1:da:f7:5e:24:85:33:e3:4b:08:2c:
         b8:d1:fd:da:40:f9:2a:6e:95:38:c2:5d:66:d7:51:40:79:8d:
         55:1a:26:c7:1a:31:f1:fb:d0:0b:d2:8b:65:02:4e:e8:c4:f9:
         e9:ce:b3:b1:5e:11:6a:81:80:cc:b2:55:61:eb:27:a0:4c:47:
         e8:61:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----