Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/122XC9eiZMKW6xnfAXhBCBjI_LU.roa
File:                     122XC9eiZMKW6xnfAXhBCBjI_LU.roa (raw, json)
Hash identifier:          KZs7G7vR2l1cSNfGVaK2LYCmQ7ApdmkFmacZ0yrHs8c=
Subject key identifier:   D7:6D:97:0B:D7:A2:64:C2:96:EB:19:DF:01:78:41:08:18:C8:FC:B5
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       018930A99FF31FC8AF5B3164834D70431D46
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/122XC9eiZMKW6xnfAXhBCBjI_LU.roa
Signing time:             Fri 07 Jul 2023 14:02:50 +0000
ROA not before:           Fri 07 Jul 2023 14:02:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211360
IP address blocks:        193.84.108.0/24 maxlen: 24
                          2a10:ba80::/31 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:30:a9:9f:f3:1f:c8:af:5b:31:64:83:4d:70:43:1d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Jul  7 14:02:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d76d970bd7a264c296eb19df0178410818c8fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:32:25:3b:b0:dd:77:28:8e:2b:88:e2:be:
                    dd:90:93:52:e8:8b:3c:da:25:5f:0f:b8:30:f1:2e:
                    7d:8e:78:7d:b0:8b:08:f9:59:c6:a4:31:a8:6a:b2:
                    7e:21:7b:0b:78:e3:63:44:10:65:4c:cb:2b:b3:e9:
                    79:b6:2e:9b:b6:48:f0:9b:22:6a:0a:15:21:42:6c:
                    72:5f:dd:a6:e9:ef:f6:13:e0:82:e7:87:df:95:e6:
                    bc:7b:ce:c1:70:de:8e:ea:7d:29:d8:64:7a:e6:be:
                    69:5d:91:d4:96:6c:bd:b6:f8:e2:eb:94:4b:15:27:
                    6b:c4:aa:04:26:c4:b6:2e:40:94:06:ce:2d:6f:33:
                    c7:ba:1d:e9:27:d3:46:b8:be:06:20:1a:03:71:be:
                    14:29:1e:c4:2c:80:e1:ae:03:9e:ff:e5:5d:e2:84:
                    36:ec:31:09:c1:66:08:13:d9:88:97:54:41:c3:9d:
                    67:2e:49:5c:6d:86:59:8a:1c:59:75:8d:12:11:5b:
                    57:0a:57:50:42:21:8e:35:f0:2c:b6:94:b6:06:0f:
                    bd:14:28:5e:ec:d7:d7:fb:d2:07:69:64:72:ab:da:
                    dc:78:8f:e5:cb:c6:84:0e:36:8d:06:65:10:fb:3d:
                    91:5b:bd:e4:b7:a2:a7:0e:81:ff:d2:5c:63:80:81:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:97:0B:D7:A2:64:C2:96:EB:19:DF:01:78:41:08:18:C8:FC:B5
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/122XC9eiZMKW6xnfAXhBCBjI_LU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.108.0/24
                IPv6:
                  2a10:ba80::/31

    Signature Algorithm: sha256WithRSAEncryption
         45:67:31:63:1b:4f:fa:0e:4d:32:f7:22:34:e3:75:06:d4:9a:
         23:62:97:01:32:6f:bf:2b:f8:7e:18:ff:9a:1a:cc:c4:04:18:
         e2:92:b8:b7:55:a6:65:e7:9f:30:9d:a6:69:77:c4:f8:bf:6d:
         49:f7:71:11:b5:54:62:b3:46:35:c4:d0:d8:93:64:3c:42:a3:
         24:7f:d4:50:14:89:19:b4:2d:ae:4a:8a:38:29:24:1c:cd:dc:
         04:a0:8c:15:af:87:9b:d7:2a:80:8f:c8:7f:bb:74:fe:c3:c2:
         50:bb:ea:73:64:91:78:29:41:8d:b8:46:04:b9:71:8d:22:5e:
         95:b0:b3:34:83:de:e0:90:2c:d5:dc:39:50:43:ba:12:00:7c:
         64:af:b6:ea:1d:b7:3f:75:7a:7f:df:d6:ca:62:f4:85:ac:3a:
         14:28:35:70:b7:1a:a0:6b:6d:bf:e7:82:a3:b9:0c:6a:1a:2f:
         f2:b6:6c:85:bc:ec:06:dd:e8:62:cf:84:3b:c5:73:92:c6:75:
         17:79:dc:d8:0e:c7:7a:7c:8e:4e:d7:d8:71:02:64:53:4d:e9:
         75:35:24:02:4a:fa:11:04:6b:51:eb:15:4b:70:a7:28:f4:1a:
         5b:25:63:f3:e7:93:46:cd:75:48:bd:12:71:c1:66:c0:7f:83:
         e6:9e:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----