Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/JrKrYm6FMPH3PS-HE_YeL904vPE.roa
File:                     JrKrYm6FMPH3PS-HE_YeL904vPE.roa (raw, json)
Hash identifier:          +c4uRCxYfGJG/z6ch8g66CVzWJc/HijlHBTFk8JK1/k=
Subject key identifier:   26:B2:AB:62:6E:85:30:F1:F7:3D:2F:87:13:F6:1E:2F:DD:38:BC:F1
Certificate issuer:       /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial:       018B6721E4C7184B5332B89E973F43DC0DC7
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/JrKrYm6FMPH3PS-HE_YeL904vPE.roa
Signing time:             Wed 25 Oct 2023 13:59:16 +0000
ROA not before:           Wed 25 Oct 2023 13:59:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        217.147.181.0/24 maxlen: 24
                          217.147.180.0/24 maxlen: 24
                          2a0b:2900:ff00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:67:21:e4:c7:18:4b:53:32:b8:9e:97:3f:43:dc:0d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
        Validity
            Not Before: Oct 25 13:59:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26b2ab626e8530f1f73d2f8713f61e2fdd38bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:fc:d3:39:22:cd:77:56:82:8c:af:14:c1:
                    9b:8d:d1:08:b5:52:d1:7c:28:0e:fa:48:09:9c:f1:
                    ea:64:39:fe:43:4e:45:ab:ca:1a:8f:d8:50:1b:19:
                    e1:a4:b4:9b:f3:c9:98:de:df:8c:bf:2c:46:99:e5:
                    79:bb:68:da:e9:46:71:c4:90:13:c9:3b:ae:a3:ce:
                    d4:65:89:61:eb:c7:58:49:81:ae:01:40:23:53:e5:
                    5b:17:68:c0:e7:ff:a5:7d:d8:6e:a1:81:31:a7:22:
                    63:19:93:4f:31:ff:54:29:e6:d9:18:4d:37:24:da:
                    ec:41:5c:5a:26:d6:5c:0a:d7:4d:72:8d:93:97:21:
                    69:d5:93:70:ee:6e:69:47:f3:af:c7:2f:41:6e:fe:
                    4d:bc:d1:65:f5:42:90:c3:07:5e:64:55:26:0a:3b:
                    a0:a5:f2:60:9d:44:94:cd:8a:d6:e8:0f:13:41:15:
                    10:fe:5c:e8:e8:d2:4e:93:a0:32:b7:5e:73:76:93:
                    5a:98:5d:e6:4a:83:c4:29:9e:e3:28:c6:29:a3:09:
                    f1:84:15:4c:3b:ee:7e:8d:43:59:82:32:09:f7:37:
                    d4:e0:b4:b3:e9:66:ce:03:e0:f7:f8:c1:01:7e:bb:
                    d0:1a:3c:27:61:83:61:a2:d8:65:a3:05:d6:19:5c:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B2:AB:62:6E:85:30:F1:F7:3D:2F:87:13:F6:1E:2F:DD:38:BC:F1
            X509v3 Authority Key Identifier:
                keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/JrKrYm6FMPH3PS-HE_YeL904vPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.147.180.0/23
                IPv6:
                  2a0b:2900:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:61:51:ef:a8:81:27:27:c4:e5:d3:74:94:6a:36:58:f3:67:
         ae:51:ff:cd:3f:63:57:6f:dd:56:f3:7e:7b:92:f3:17:31:3e:
         9b:85:7f:0c:3f:fa:b2:7c:22:59:f3:21:12:fe:d7:69:e1:a2:
         bf:52:c9:f9:7a:55:2e:92:b0:64:73:68:66:f8:fd:44:86:a0:
         ff:e7:cc:28:1c:d2:c5:00:e3:ba:16:ab:1e:4c:bf:be:92:a2:
         68:0f:02:95:83:7c:81:c9:c5:02:a6:36:0c:f1:b2:17:1f:19:
         a0:d8:f1:fd:6e:fb:06:a2:37:56:da:ee:b2:8f:80:3c:e1:0b:
         9e:87:45:99:7c:3f:99:d7:95:7e:ce:f5:ec:71:80:4c:56:3a:
         c1:27:52:e7:19:58:e9:d2:45:97:80:bf:92:f2:c8:1d:b5:a7:
         4e:db:f1:79:90:88:71:cc:a9:5b:5d:10:dd:40:94:17:36:fa:
         82:cb:d2:86:c1:bc:59:18:fd:12:e2:02:cd:51:ed:99:6a:b6:
         08:e1:2e:a3:a1:2c:9a:55:cc:33:bc:09:75:93:c0:af:78:63:
         b5:98:34:9f:a0:51:17:ed:83:8b:50:f0:1c:1c:e6:3c:3d:29:
         76:c0:d5:07:d1:50:68:0c:85:91:5b:01:11:6b:89:ed:28:a5:
         e6:c1:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----