Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa
File:                     oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa (raw, json)
Hash identifier:          ab3ovh0Gyl+2L5XY1T5u328BleiZ4HNb965oel1GfwY=
Subject key identifier:   A0:C1:6C:65:AF:96:67:80:E3:96:94:72:F8:1F:9D:D3:C0:AB:02:A5
Certificate issuer:       /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial:       0189DF16C329AF3130F2A04CA03EB3226E7E
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa
Signing time:             Thu 10 Aug 2023 10:55:58 +0000
ROA not before:           Thu 10 Aug 2023 10:55:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51741
IP address blocks:        91.217.219.0/24 maxlen: 24
                          2a12:62c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:df:16:c3:29:af:31:30:f2:a0:4c:a0:3e:b3:22:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
        Validity
            Not Before: Aug 10 10:55:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0c16c65af966780e3969472f81f9dd3c0ab02a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:52:19:5b:6b:9b:1b:1d:3c:2b:7d:26:8e:
                    be:5c:af:e9:26:1e:85:e1:2d:5a:b8:04:c0:a7:b1:
                    11:d8:92:bb:6a:eb:cc:92:95:68:34:17:20:9a:a6:
                    7f:7f:f4:0d:12:cb:23:90:b3:c4:cf:5e:4b:aa:86:
                    ea:96:ad:e5:b4:aa:ec:73:2e:8f:25:da:d5:43:61:
                    ca:1f:96:8b:e4:62:f9:45:09:c3:dc:a9:ec:0a:b1:
                    32:8d:7a:fe:23:3a:2a:76:55:04:17:75:fc:ce:e8:
                    f3:b3:a5:5a:87:9f:f5:fd:9d:76:73:38:15:6e:7e:
                    b7:cc:f2:84:8f:8a:3d:8a:42:73:75:6c:2b:2a:73:
                    f9:d9:40:05:de:83:85:71:fd:e7:57:85:8b:3e:8c:
                    9c:42:57:51:57:29:96:e4:7f:71:ef:cc:9b:cc:a2:
                    60:81:19:49:d0:ce:6f:72:24:b2:44:b5:40:bb:fd:
                    32:0e:2e:54:3a:5f:74:cc:09:01:6c:c4:e8:6a:7c:
                    cc:8c:f4:90:8d:40:43:aa:35:e1:e9:fb:34:e6:25:
                    0a:d8:03:2a:84:a7:5e:1f:d5:11:88:f4:01:3c:85:
                    85:a2:f2:07:b4:96:fd:cc:e8:a6:ca:26:1a:03:13:
                    e4:67:71:e8:ce:7f:73:5e:eb:02:74:7c:5a:ec:ed:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C1:6C:65:AF:96:67:80:E3:96:94:72:F8:1F:9D:D3:C0:AB:02:A5
            X509v3 Authority Key Identifier:
                keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.219.0/24
                IPv6:
                  2a12:62c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:f1:0d:4f:e3:7f:46:dc:2c:97:5a:be:cb:1d:b8:6a:a0:
         e9:b3:bf:8d:0d:2d:d8:e3:af:16:dd:eb:f1:df:11:25:3a:8b:
         4f:18:eb:7d:ac:55:66:54:b2:cf:5f:57:d4:c8:04:07:34:4d:
         b5:49:a0:58:38:cf:78:b6:25:86:7e:34:a3:fa:7c:ed:08:e7:
         67:06:a8:28:69:cd:4f:13:be:a0:38:f9:96:7c:8f:42:a2:75:
         2a:70:9f:ef:85:75:e4:c1:d4:ad:67:e8:5a:7c:5e:cc:27:15:
         fd:21:93:e6:32:c4:59:24:9f:54:2b:d7:fc:23:dd:3d:89:d3:
         30:ad:19:69:f6:53:2d:59:31:11:5e:a9:ed:1e:db:14:47:a4:
         d7:f7:24:14:fd:85:f2:8d:fc:94:8f:db:1f:05:9f:77:9d:98:
         35:38:c7:a4:d1:d5:e3:f0:fb:9b:3a:c4:d9:d1:19:8b:da:5b:
         2a:b8:90:0e:92:be:23:10:34:ee:49:a3:da:b7:97:43:11:e3:
         a1:f8:7f:79:4b:09:7c:cc:f9:7e:d6:1e:75:1e:8c:ec:1c:37:
         b8:76:9e:b3:e4:72:58:70:e3:9d:a9:6d:de:55:2a:ec:1e:7d:
         a8:09:88:67:8d:87:aa:fe:18:a7:b2:06:4e:d5:ff:cf:61:99:
         77:4b:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----