Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/gWZaKNstjJvjYBmRRdg4oMJ8cqk.roa
File:                     gWZaKNstjJvjYBmRRdg4oMJ8cqk.roa (raw, json)
Hash identifier:          Ylrq+J3ytmg+QfN/m3Pr5e+vOIBQyURyAm7mak4eTBw=
Subject key identifier:   81:66:5A:28:DB:2D:8C:9B:E3:60:19:91:45:D8:38:A0:C2:7C:72:A9
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       01863AE939B9B4C60A6A97650540088F14AE
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/gWZaKNstjJvjYBmRRdg4oMJ8cqk.roa
Signing time:             Fri 10 Feb 2023 10:40:08 +0000
ROA not before:           Fri 10 Feb 2023 10:40:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60982
IP address blocks:        2a04:1bc3::/32 maxlen: 32
                          2a04:1bc7::/32 maxlen: 32
                          2a04:1bc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 28 Feb 2023 09:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:e9:39:b9:b4:c6:0a:6a:97:65:05:40:08:8f:14:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Feb 10 10:40:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81665a28db2d8c9be360199145d838a0c27c72a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:c8:ea:55:f3:00:02:d4:8c:9a:45:fe:9d:
                    3a:da:63:73:59:07:7f:10:df:f2:12:41:e4:53:25:
                    f1:d0:e1:13:83:fb:31:fc:72:d5:c4:72:4a:92:5a:
                    44:34:49:bd:0f:7b:db:58:7d:b2:85:83:03:dd:a8:
                    48:c2:3f:3e:a5:58:83:d8:84:de:30:11:75:6e:d2:
                    fd:32:eb:85:67:f6:cb:d8:2c:f2:72:98:63:95:5c:
                    8d:51:9f:6b:4b:a7:91:1f:4f:bd:7b:b0:f1:85:df:
                    9d:b5:f4:ab:66:17:a4:5f:e8:8b:a2:d6:e4:87:3b:
                    de:77:57:87:9c:b5:ec:89:07:c6:7e:7e:e3:25:4b:
                    fc:5f:a7:86:1d:9c:fb:88:de:e4:fb:bf:da:66:6c:
                    86:44:ff:9e:10:12:77:16:de:d6:2e:a3:97:3b:8e:
                    69:26:c9:ec:fe:1b:6b:e7:e0:63:db:41:d0:f0:09:
                    00:f9:ba:5e:dc:15:b2:7b:95:9b:a6:f1:07:86:14:
                    42:c4:b5:37:32:91:0c:0d:78:2a:30:76:5a:02:54:
                    01:c9:cc:43:40:26:45:62:3f:23:63:19:dd:7e:af:
                    5f:17:8a:08:3b:53:21:2c:39:44:79:a2:81:2b:fb:
                    60:04:b9:38:4a:b6:bb:39:9a:1c:49:da:d3:5c:d4:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:66:5A:28:DB:2D:8C:9B:E3:60:19:91:45:D8:38:A0:C2:7C:72:A9
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/gWZaKNstjJvjYBmRRdg4oMJ8cqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1bc0::/32
                  2a04:1bc3::/32
                  2a04:1bc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:74:01:86:82:2e:fc:bf:ab:96:4f:f9:cf:de:72:68:b3:
         09:a2:04:2a:5f:61:b6:fd:91:02:98:71:3b:21:5d:68:8b:4a:
         6d:18:f5:80:7e:b9:0b:2d:b9:a5:41:ea:04:d0:a3:9f:51:4b:
         9c:11:8e:eb:9c:c8:e2:9c:65:c1:38:6f:b3:e6:ba:7f:b7:ca:
         69:f8:28:48:b9:9e:03:1c:ab:8f:42:68:78:64:c7:00:b8:c6:
         9d:28:4d:02:59:fb:e4:dc:1b:6d:3f:cb:db:59:73:e6:7f:b6:
         b3:86:ff:80:bb:80:d2:ce:46:b0:ca:db:4a:15:6c:58:8d:e2:
         8b:6f:31:b1:0f:c5:f5:3a:ad:7d:46:20:62:17:7c:31:03:b0:
         ca:62:71:d7:71:ab:73:df:87:44:7a:5e:ce:46:a4:3b:09:e0:
         d1:c4:36:65:7c:0c:7e:03:90:24:d7:b6:2c:22:e6:f3:d0:ee:
         bf:58:6d:ac:c9:ba:00:2a:25:e8:2f:f5:74:f7:1a:0c:e8:3e:
         a2:0f:38:3e:e7:03:0b:41:d5:85:2f:54:4e:d7:d6:0c:ce:f8:
         e1:f3:a3:20:b6:8a:18:5a:ad:08:ce:30:b8:51:23:a9:cf:cd:
         19:34:74:0e:3f:d8:11:12:44:f6:67:ec:92:29:ab:82:6f:67:
         d7:6b:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----