Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa
File:                     bUGBBGj8x5lZ8F_XEPx090dbXnM.roa (raw, json)
Hash identifier:          8hC/JFJdtaIz6YW9qsfdPb/c5y7pD13MIDJycfn0kz8=
Subject key identifier:   6D:41:81:04:68:FC:C7:99:59:F0:5F:D7:10:FC:74:F7:47:5B:5E:73
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018B4645E03BA8A17EC243B3E0FAFF046C1B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa
Signing time:             Thu 19 Oct 2023 04:51:06 +0000
ROA not before:           Thu 19 Oct 2023 04:51:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208958
IP address blocks:        2a06:e881:650a::/48 maxlen: 48
                          2a06:e881:6500::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:46:45:e0:3b:a8:a1:7e:c2:43:b3:e0:fa:ff:04:6c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Oct 19 04:51:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6d41810468fcc79959f05fd710fc74f7475b5e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:05:5c:e0:b0:28:30:b7:f9:44:93:30:14:
                    1c:2c:13:42:9f:6b:dd:0f:e7:73:a7:c2:2d:90:44:
                    a6:ae:79:2f:69:1a:62:a1:55:41:90:20:10:5e:a4:
                    79:b0:21:f9:6b:ff:1f:6d:7c:c3:1d:62:9b:53:03:
                    73:76:33:3b:aa:bb:3a:57:ce:cf:ec:44:51:ae:c9:
                    47:cb:b6:48:c2:a9:d8:51:4b:0f:38:d2:41:6e:a7:
                    2c:ae:e5:b6:d1:3e:c0:0f:2d:df:78:d0:a1:43:a9:
                    ed:0d:62:c9:c6:18:bd:9f:cd:f2:2c:33:c1:81:1e:
                    e7:00:96:44:ac:1c:f5:14:0b:a1:0a:52:27:aa:6f:
                    47:92:7b:f6:5f:2d:3e:34:ea:c8:98:7c:07:ca:85:
                    f9:26:dd:e3:36:2b:60:e4:c2:d4:d5:81:1d:3c:a9:
                    c8:4b:e6:7e:97:88:1c:f6:a0:e6:01:c5:87:56:94:
                    71:7e:21:5c:79:2c:78:8e:e2:3d:2b:79:6c:1d:17:
                    c0:f0:aa:23:9e:ad:cb:c6:68:58:54:67:01:b1:a6:
                    5c:25:07:e6:2a:cf:46:53:62:31:08:bf:79:f2:5b:
                    00:33:cf:93:61:0e:f6:1d:03:81:41:c5:e5:73:d2:
                    d8:b8:55:42:6a:eb:e2:ac:a4:44:22:dc:96:a6:8d:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:41:81:04:68:FC:C7:99:59:F0:5F:D7:10:FC:74:F7:47:5B:5E:73
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:6500::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:2b:78:46:b7:af:83:c3:a4:d0:40:75:ce:30:d8:4a:5e:1c:
         f2:ea:dd:7a:53:d7:76:5f:d3:50:8c:1a:bf:f7:aa:08:44:44:
         69:ba:b6:b8:25:83:1b:bf:98:68:eb:65:fc:06:93:8f:8b:d1:
         1a:a5:5e:7f:7a:96:96:a5:30:18:b5:e1:66:f0:2f:a3:be:e7:
         d2:39:ec:45:92:c2:5f:c8:b7:86:e5:3c:31:30:1c:e2:c8:e4:
         82:dd:d4:02:be:d9:2f:53:8c:28:28:f6:56:2f:90:25:2c:f5:
         29:9c:7c:d8:9a:ce:fb:5d:bc:66:9c:64:13:b5:b1:32:25:15:
         d1:59:70:51:07:45:44:be:85:fd:e7:fa:c6:aa:ac:aa:8c:7e:
         78:35:f2:26:e1:86:8c:54:ad:cf:08:90:58:c9:d8:09:bf:90:
         34:b2:11:cb:c8:61:ac:1d:ce:b1:21:d7:22:55:2e:58:a3:b9:
         bf:e1:f1:56:d2:0e:cc:f5:01:23:61:7e:36:bf:b2:ab:e5:7b:
         8b:b5:e4:cf:2d:9d:75:a8:61:c7:47:ba:c5:0f:b3:c6:ab:19:
         d8:12:6a:e3:e3:a2:c8:97:47:92:12:c1:57:00:c3:f2:93:8b:
         84:f6:f8:12:a8:c7:25:1e:8b:b7:66:0c:a5:95:28:2a:35:93:
         09:e5:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----