Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/SerZYmpms652v0fZtgSym2oRkfU.roa
File:                     SerZYmpms652v0fZtgSym2oRkfU.roa (raw, json)
Hash identifier:          vAPWVPYGJB1EO5+2rt0ELEn6+U6n9c6btDNPxXfUDVA=
Subject key identifier:   49:EA:D9:62:6A:66:B3:AE:76:BF:47:D9:B6:04:B2:9B:6A:11:91:F5
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018BA8C2BCE490C88A0A7D62225BF0277A94
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/SerZYmpms652v0fZtgSym2oRkfU.roa
Signing time:             Tue 07 Nov 2023 07:50:16 +0000
ROA not before:           Tue 07 Nov 2023 07:50:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212786
IP address blocks:        2a0e:5780::/29 maxlen: 29
                          2a0e:2b00::/29 maxlen: 29
                          2a09:e980::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a8:c2:bc:e4:90:c8:8a:0a:7d:62:22:5b:f0:27:7a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Nov  7 07:50:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49ead9626a66b3ae76bf47d9b604b29b6a1191f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:db:d0:00:30:ba:f3:cf:65:d1:47:cc:96:
                    ca:29:fc:3f:ca:ad:0d:23:3f:e2:f8:bd:af:b9:b1:
                    25:20:e7:11:8a:d5:62:a1:7a:3e:13:8d:a1:3d:75:
                    29:e2:c6:c4:df:f7:82:e8:8c:3e:34:98:4a:dd:d7:
                    6f:0a:22:33:8e:f8:de:b3:3f:40:9f:98:7c:83:77:
                    66:fa:1e:38:8f:b0:75:e0:29:37:c7:fd:d9:18:4a:
                    82:89:0e:bb:28:24:c3:8f:ac:76:16:54:4e:8d:a3:
                    1d:b2:66:ea:81:b0:7d:01:2c:9c:3c:ed:2d:33:b1:
                    28:69:2b:6f:e8:7e:6e:03:3b:79:d0:fc:85:f9:a0:
                    64:4b:8a:82:c5:77:08:e7:10:1b:88:fb:38:00:90:
                    cb:17:8b:0f:6e:99:19:0f:26:09:ce:9a:24:8e:68:
                    13:14:0f:ea:a8:5f:c0:7d:19:50:c5:f1:e8:83:d4:
                    ef:6b:94:89:c0:4b:0d:38:ce:b7:70:17:c0:bc:30:
                    fb:6d:92:f2:c9:6e:b2:0c:26:98:5a:44:2f:a8:0d:
                    e5:e6:90:ad:f1:f3:a2:9e:fc:43:2a:e5:65:88:b0:
                    5d:00:d7:0f:18:3e:11:88:83:b4:7f:69:1d:ba:b9:
                    d4:98:b2:2f:82:8b:ff:35:a4:4f:f0:2b:ee:19:21:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:D9:62:6A:66:B3:AE:76:BF:47:D9:B6:04:B2:9B:6A:11:91:F5
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/SerZYmpms652v0fZtgSym2oRkfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:e980::/29
                  2a0e:2b00::/29
                  2a0e:5780::/29

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:d5:57:21:74:e9:bb:cc:17:b0:57:d8:72:1d:7d:ee:ef:
         f8:55:37:b2:59:9d:09:d1:7e:8f:22:d7:52:87:ef:b6:be:65:
         b3:e6:c9:1f:74:c6:3f:94:d9:20:de:b3:1d:8b:0e:8b:41:70:
         7a:70:4e:9c:6a:ad:e4:10:80:c1:db:99:46:d2:34:ea:97:38:
         42:ca:5c:b7:46:45:f1:cc:ad:d5:e6:73:4d:a4:5d:c5:81:13:
         58:89:69:44:97:75:d0:9b:bc:5a:01:09:15:01:c4:89:6a:96:
         5a:d7:56:6f:6d:28:c7:d6:91:cb:e5:c4:62:1d:bd:b3:00:44:
         bf:10:07:05:d8:98:cf:25:d2:2f:e1:af:be:81:da:ec:c4:09:
         ab:e3:3d:31:e8:8f:c0:8c:de:34:e5:0b:1e:21:fc:0d:58:d1:
         9d:9c:0d:ce:fd:9e:f7:a5:48:14:33:ed:a9:63:bf:da:61:5e:
         6b:8b:a3:ac:a6:19:49:9e:bd:3f:04:7c:46:39:c6:58:69:12:
         fb:d6:eb:69:5b:12:83:53:8a:a1:8a:0b:05:3d:7c:a2:fe:76:
         2b:b7:07:bc:d0:0c:e1:bd:1a:f0:24:a7:51:68:61:89:d7:4e:
         d1:f9:d3:62:ef:12:25:a1:f4:58:6a:16:2d:44:c7:b9:4a:a2:
         2f:4d:7a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----