Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa
File:                     fgyWUKiLE0OZeTUEx0Smms1oGpg.roa (raw, json)
Hash identifier:          AHeTFnd9/3Ya5gM1/CWDldxtU07jo0EX28tqs9xGzHA=
Subject key identifier:   7E:0C:96:50:A8:8B:13:43:99:79:35:04:C7:44:A6:9A:CD:68:1A:98
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       01881A7E5ED9B7B3BEE713141368EE2AF81B
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa
Signing time:             Sun 14 May 2023 13:41:09 +0000
ROA not before:           Sun 14 May 2023 13:41:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1a:7e:5e:d9:b7:b3:be:e7:13:14:13:68:ee:2a:f8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: May 14 13:41:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7e0c9650a88b134399793504c744a69acd681a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:27:93:29:46:90:a9:15:fb:59:e4:94:58:
                    db:e4:9d:b8:a3:6d:2e:4b:46:ca:a6:c5:57:8a:32:
                    45:49:2e:23:9e:2b:16:8b:7d:ad:59:b1:02:6e:dd:
                    f1:75:28:f1:e7:f0:2e:d6:bb:70:23:92:60:23:5c:
                    a3:24:28:5f:c0:c5:9c:d6:47:d8:1f:4c:8a:a6:ca:
                    2b:41:0f:65:2c:86:12:55:ff:d3:9a:32:fd:1b:56:
                    bf:8a:a8:d5:63:53:e4:32:80:11:fb:ab:f6:e3:2d:
                    b6:54:ac:f7:59:99:7a:b7:5f:17:98:19:a3:4d:cd:
                    f7:cd:81:33:f2:52:7a:39:e6:ec:cc:f3:04:1b:14:
                    21:da:2b:9f:82:d4:e1:60:e6:3c:5c:7f:4b:14:8c:
                    a2:9c:79:60:09:73:1d:cc:8d:1c:c1:a0:c6:ac:49:
                    87:d4:26:48:88:5f:94:38:6e:ae:e5:59:ff:31:6f:
                    44:f3:a6:3d:8a:85:e5:74:85:20:e3:62:a3:0a:b0:
                    62:ab:0f:46:0f:ac:c0:00:fe:81:a4:fe:2a:6c:3e:
                    f0:76:09:88:f1:ab:4b:6c:ad:1f:4c:c8:b0:e0:be:
                    bb:fe:90:0e:80:f7:8e:76:7d:03:27:49:4d:c1:28:
                    b4:0c:1b:e7:4d:0e:da:16:0a:54:f3:d9:f0:23:b0:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:96:50:A8:8B:13:43:99:79:35:04:C7:44:A6:9A:CD:68:1A:98
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:10:ef:67:04:f9:0c:60:5b:80:60:2d:e3:40:67:27:96:28:
         ee:98:30:00:0f:f4:5b:f5:80:50:7b:71:84:d6:60:ae:f9:a9:
         dc:3e:3c:87:99:2e:a7:e5:44:62:7f:b8:04:93:e5:f9:b3:42:
         da:fb:4b:2b:ae:cf:b7:35:89:39:94:74:d3:7d:eb:68:ff:fb:
         56:2a:9f:2c:6f:b9:2b:0d:f0:82:ab:48:1f:b3:cd:cb:63:b9:
         b8:90:21:3a:d9:f9:55:2d:70:f4:f1:98:8a:07:4e:59:0a:63:
         c7:69:5c:43:66:0c:aa:74:1e:5e:3c:8b:73:68:35:5d:90:01:
         97:e2:d9:0b:10:4a:f8:de:f8:28:fd:f9:78:7f:42:a8:6e:fb:
         67:f9:fe:5c:2d:9a:ed:b2:4f:f7:69:ca:7d:8f:2d:61:11:1b:
         b1:44:28:96:e9:59:85:a1:e2:82:b6:ca:73:d2:98:06:fb:2c:
         12:7d:83:ef:69:ba:ae:99:c9:af:0c:8b:7e:be:94:d9:48:62:
         f4:94:b2:5d:a1:22:a2:f5:8a:04:63:5f:fc:53:63:d3:d8:da:
         10:2b:64:a9:ac:2f:60:39:0e:5a:40:93:ca:2e:5c:c1:4c:33:
         03:18:f6:6b:ed:07:12:c2:c0:95:36:b1:59:ac:15:a2:aa:f2:
         77:18:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----