Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/CLoOb2Ohtd6Xc8KR4xQ-DWkNLuw.roa
File:                     CLoOb2Ohtd6Xc8KR4xQ-DWkNLuw.roa (raw, json)
Hash identifier:          irdnUFlFyalTKLhy/3ysgco6Z9GOidAhNidgFC+6jIk=
Subject key identifier:   08:BA:0E:6F:63:A1:B5:DE:97:73:C2:91:E3:14:3E:0D:69:0D:2E:EC
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       018B2A1A1AB4625E148D56521E710A7AF8DB
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/CLoOb2Ohtd6Xc8KR4xQ-DWkNLuw.roa
Signing time:             Fri 13 Oct 2023 17:33:55 +0000
ROA not before:           Fri 13 Oct 2023 17:33:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        192.115.7.0/24 maxlen: 24
                          2a01:4280:2::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:2a:1a:1a:b4:62:5e:14:8d:56:52:1e:71:0a:7a:f8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Oct 13 17:33:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=08ba0e6f63a1b5de9773c291e3143e0d690d2eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:19:8f:86:fb:cf:17:af:e6:ce:79:4b:ab:dc:
                    90:44:52:6a:6b:cd:d5:01:26:e4:f6:59:34:b5:c9:
                    b2:6c:aa:c2:13:71:44:38:38:9b:1b:e6:c7:3a:28:
                    b2:bd:f1:a0:46:2d:76:76:29:94:bb:f1:e2:a9:80:
                    d3:d2:f6:b5:e5:41:50:4f:7b:8d:07:8c:50:67:a4:
                    09:01:3a:86:e8:91:70:70:cf:e7:77:57:df:f6:64:
                    c8:6e:40:bd:87:8a:57:a5:5c:32:e5:e5:6f:1e:a1:
                    bd:95:05:c4:3c:69:1d:60:c2:42:9b:d2:ca:c9:c1:
                    e9:bb:3b:70:79:0a:59:8a:ef:d3:42:d2:cc:5d:a7:
                    69:87:74:7d:fd:50:de:cf:93:a8:4a:88:d3:9f:84:
                    c2:ac:86:07:ec:36:63:c0:d6:b2:c7:56:05:14:fd:
                    6a:94:a2:8f:46:ca:e4:75:45:7c:95:4c:e7:e3:41:
                    25:83:15:72:24:50:a0:67:37:e0:aa:a1:c2:ec:95:
                    c5:4a:1a:13:c8:1b:2b:b7:3c:37:8e:40:34:b5:ed:
                    b7:8a:b7:2f:c8:65:41:cd:b0:79:0d:d4:ce:e2:87:
                    83:3d:ca:c3:5c:f1:72:22:8e:91:ef:56:6a:12:19:
                    de:d1:f2:71:59:63:b9:aa:30:4c:b7:9c:cb:bf:43:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BA:0E:6F:63:A1:B5:DE:97:73:C2:91:E3:14:3E:0D:69:0D:2E:EC
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/CLoOb2Ohtd6Xc8KR4xQ-DWkNLuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.115.7.0/24
                IPv6:
                  2a01:4280:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:84:37:98:7d:4d:1c:bc:30:25:12:e1:c3:b6:c7:d6:5e:
         3d:e1:6d:be:77:80:94:f3:10:6d:0b:18:20:0f:b0:b4:fc:76:
         fb:4f:b6:63:b3:57:c9:e6:57:b0:39:f6:3a:07:c3:2c:ae:b8:
         b9:25:7c:09:6e:42:7f:06:09:74:ba:c7:60:79:6f:42:5c:4e:
         ca:c9:b6:21:2a:1c:e7:a7:15:cd:e6:3f:ca:71:03:1a:5c:52:
         90:ec:5b:e8:6c:da:05:4c:a4:cc:ac:ec:82:47:a7:4d:f1:75:
         f4:86:1e:2e:5f:c2:ea:cb:94:90:98:76:f3:fe:c5:83:b4:b8:
         2c:8a:16:8c:08:ad:6b:32:ba:2c:5e:f3:f6:eb:46:1a:94:e8:
         52:fc:e6:a1:d1:58:62:7c:cf:ac:c4:a7:a4:80:68:f9:b8:bb:
         9f:57:97:ed:2e:ce:55:9a:17:85:b7:37:5d:9a:d1:31:c2:bf:
         59:3f:f5:f4:6c:ea:c4:a4:c1:bc:61:d3:46:7f:25:ee:9a:11:
         59:07:32:52:7c:28:b3:84:a8:b7:1f:e6:ed:2e:b4:76:9e:31:
         91:a8:68:54:e4:2d:c2:41:cd:5e:8c:aa:13:8e:21:1a:b4:24:
         7f:0f:20:26:b6:6b:48:d8:32:f3:ef:73:54:df:c6:20:a7:3a:
         46:bd:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----