Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/eHZBzj_oy1hpbH4rCB8GX1yt_Z8.roa
File:                     eHZBzj_oy1hpbH4rCB8GX1yt_Z8.roa (raw, json)
Hash identifier:          YN9RVPsmYy9PAGlBvN1zrKuFv/hOTHY8MMwTjnSbZig=
Subject key identifier:   78:76:41:CE:3F:E8:CB:58:69:6C:7E:2B:08:1F:06:5F:5C:AD:FD:9F
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018B6D4230A26FC75E8733447265D3F82C32
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/eHZBzj_oy1hpbH4rCB8GX1yt_Z8.roa
Signing time:             Thu 26 Oct 2023 18:32:16 +0000
ROA not before:           Thu 26 Oct 2023 18:32:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204604
IP address blocks:        2a06:e881:4000::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6d:42:30:a2:6f:c7:5e:87:33:44:72:65:d3:f8:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Oct 26 18:32:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=787641ce3fe8cb58696c7e2b081f065f5cadfd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:17:96:85:21:ba:69:d2:93:72:a8:f7:83:
                    34:73:10:c5:3a:8c:dd:47:b5:62:ee:e4:50:cd:a3:
                    f1:11:c0:fb:4e:f4:c8:2d:0f:14:f2:44:23:c3:e0:
                    f9:f2:f6:7e:ba:f2:1e:ed:1b:71:71:b2:ed:02:91:
                    5c:7e:7d:76:3d:49:59:ba:16:42:41:35:30:78:1d:
                    77:67:d6:dc:de:05:95:be:a5:0a:28:f1:75:a4:17:
                    88:91:e8:85:0a:12:d4:6e:30:d7:47:29:3c:8f:b2:
                    22:db:b6:19:6e:12:cf:30:fb:8f:3e:a8:e6:45:56:
                    f4:1c:68:0e:a2:17:e1:8e:a0:68:66:46:0c:0f:71:
                    01:22:1d:07:ad:ad:0b:c0:9a:42:1c:8c:b8:95:d7:
                    0b:96:e7:ff:a4:a5:68:1d:2f:e4:be:ac:0f:c6:e9:
                    bf:d1:3f:c1:6b:4b:90:78:c0:8b:79:f2:72:0e:75:
                    f4:0b:0a:f8:7e:26:a4:f9:02:6f:b1:88:f8:f6:4d:
                    69:29:0c:5d:51:5d:db:f7:bb:29:a6:47:eb:52:40:
                    1e:18:97:28:e8:f9:c4:12:a0:85:fc:97:29:a3:78:
                    24:d4:5f:13:a1:71:f5:c0:62:37:0a:a1:4a:c4:b5:
                    e1:3c:03:21:32:06:b0:1b:71:32:cc:e7:01:0d:12:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:41:CE:3F:E8:CB:58:69:6C:7E:2B:08:1F:06:5F:5C:AD:FD:9F
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/eHZBzj_oy1hpbH4rCB8GX1yt_Z8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         c2:d1:a6:27:db:ec:5d:cc:f2:71:24:b2:07:75:f4:bf:c1:42:
         e8:e3:ed:d9:77:52:00:52:e8:56:b1:78:85:06:d5:1a:e2:34:
         02:c8:c8:ea:62:86:e7:0a:31:72:45:c9:35:b5:64:d9:02:a2:
         7e:ed:f9:87:11:a2:4b:a5:9f:b5:d1:d9:b2:9e:3a:29:2a:a4:
         70:47:1f:98:94:23:1a:6a:5d:38:ac:12:ba:04:1f:05:35:0c:
         75:c2:59:d5:5f:04:ea:3f:94:ec:27:29:3e:cd:2c:dc:b1:3e:
         c2:2b:7f:fd:32:13:a2:2b:58:49:c9:9b:e9:ae:a4:f6:3b:a0:
         a5:00:8f:ed:98:58:20:74:b8:f0:5c:10:aa:98:85:41:ae:e7:
         e6:3b:f3:68:5b:c8:72:f8:ec:fc:1d:a9:d7:75:79:f9:48:5d:
         28:b2:86:e7:c2:1a:c1:28:ac:7b:07:3e:0f:63:b8:2b:18:0c:
         e5:6e:6f:5e:d0:37:ec:37:97:cb:b8:b6:ef:ab:1f:7e:52:1a:
         ea:3f:b2:15:49:8b:69:ab:4d:7b:8b:fa:6e:16:c1:03:8e:24:
         75:5a:74:83:70:a3:13:90:62:cf:21:bd:10:ab:67:35:63:bb:
         f9:96:32:2f:bd:a9:3a:d2:69:0e:24:54:d3:83:9d:a7:35:58:
         7f:b4:8a:5e
-----BEGIN CERTIFICATE-----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