Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa
File:                     Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa (raw, json)
Hash identifier:          lCQ1/FE8M10nYXuD5Tqiyv9yW7pVwRXVUzFPm+0vuxA=
Subject key identifier:   36:99:FC:69:37:39:BC:B1:A7:48:4E:01:F2:BF:11:A8:2C:BD:B7:D3
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       018AF8A2F55A167C77302A2120818BAEA9AF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa
Signing time:             Wed 04 Oct 2023 03:02:23 +0000
ROA not before:           Wed 04 Oct 2023 03:02:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39200
IP address blocks:        193.189.123.0/24 maxlen: 24
                          2001:678:b0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:a2:f5:5a:16:7c:77:30:2a:21:20:81:8b:ae:a9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Oct  4 03:02:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3699fc693739bcb1a7484e01f2bf11a82cbdb7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6c:6f:ee:fc:da:f2:37:3a:85:c7:b3:23:b1:
                    ee:d7:8c:87:75:28:e9:c5:0d:4b:2d:7a:cd:33:5b:
                    8b:55:2b:17:d6:33:54:c3:6d:66:2a:7d:be:5f:95:
                    3e:1b:e1:68:8d:e4:a9:ac:15:2c:97:15:b2:a1:c9:
                    3d:67:d7:9b:11:39:eb:d4:2b:ff:ea:32:14:70:d5:
                    7c:b7:95:d8:0e:c3:98:7d:db:7d:2d:89:1e:98:a6:
                    80:4b:0e:bd:a4:ef:b8:4d:29:19:de:6d:d4:0b:b4:
                    0d:19:9d:1f:33:a0:ee:fe:93:02:fd:b8:5c:5e:7b:
                    68:67:2b:37:45:80:29:dc:61:95:61:78:b5:f0:79:
                    55:4f:f6:08:e7:9c:25:35:7f:9a:01:c2:33:2e:0b:
                    ce:73:af:88:eb:cb:12:df:2d:97:47:75:36:7d:5d:
                    40:a6:13:69:f3:24:a0:be:4b:26:04:ad:98:e3:9a:
                    6d:ac:11:f2:d6:f5:64:b7:b8:40:98:35:e5:5e:50:
                    73:7d:5c:4a:10:09:75:6e:29:2e:cc:a5:74:08:1d:
                    e5:3c:0f:e5:ca:10:d3:a8:3e:92:be:41:ab:ed:c8:
                    3a:80:fe:c1:a0:18:4e:05:8a:b5:30:85:39:76:7d:
                    4a:1a:db:19:0b:16:3f:f7:35:15:91:03:7f:12:43:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:FC:69:37:39:BC:B1:A7:48:4E:01:F2:BF:11:A8:2C:BD:B7:D3
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.189.123.0/24
                IPv6:
                  2001:678:b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:4d:7c:ad:ba:1f:8a:fc:3c:3e:b5:22:ea:92:c6:7b:b7:e2:
         db:ab:17:17:e4:ce:82:95:cc:43:4d:9b:86:7a:3c:7e:1b:61:
         1d:08:f2:35:3e:0e:b9:e5:7b:34:41:92:0c:98:83:28:85:e2:
         74:5b:6a:f7:e5:37:7c:ae:22:6d:ca:3c:f3:6c:75:64:d4:6b:
         fe:23:61:a0:fc:91:92:a5:b4:e0:31:31:89:6a:da:73:5a:5a:
         5b:c6:34:65:f0:8b:73:49:22:ee:ab:46:8f:a3:38:5f:6c:93:
         e7:2f:73:9f:dc:29:95:bd:9f:91:8b:14:d7:6e:6c:a4:3f:1b:
         fa:45:2e:34:1c:2d:d0:0c:ef:03:ad:a1:bd:8b:90:87:c6:16:
         58:8b:65:cd:02:f8:84:df:ea:69:ae:a3:be:eb:a2:98:1d:0c:
         5f:a5:96:6e:25:af:d1:f2:6a:c9:69:e3:49:a0:4e:fa:20:8a:
         42:ae:5d:d4:e8:81:a0:f3:5e:ac:7f:5d:a5:6c:ae:5d:bd:2d:
         3a:2f:ee:b3:1b:2f:dc:50:bf:88:46:d7:58:32:b4:ba:3a:e0:
         2c:6f:06:94:1c:7b:eb:c3:8e:c7:a3:85:69:0d:ff:1b:fb:44:
         2e:df:3a:3d:b8:4f:bb:dc:c1:d0:93:db:e4:ff:6d:30:9c:33:
         3a:79:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----