Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kuNyPV1FXJ7T_mR_8aNrWMpOEjo.roa
File:                     kuNyPV1FXJ7T_mR_8aNrWMpOEjo.roa (raw, json)
Hash identifier:          7XFF2KGUWxNkfu3rwx2nWm7GdoaoWug92KZmWSIv6S4=
Subject key identifier:   92:E3:72:3D:5D:45:5C:9E:D3:FE:64:7F:F1:A3:6B:58:CA:4E:12:3A
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018BBAEA932C54E3A6C74392A8FEB6420216
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kuNyPV1FXJ7T_mR_8aNrWMpOEjo.roa
Signing time:             Fri 10 Nov 2023 20:26:57 +0000
ROA not before:           Fri 10 Nov 2023 20:26:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198231
IP address blocks:        2a10:bc0::/29 maxlen: 29
                          2a10:9c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ba:ea:93:2c:54:e3:a6:c7:43:92:a8:fe:b6:42:02:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Nov 10 20:26:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92e3723d5d455c9ed3fe647ff1a36b58ca4e123a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:fa:a1:20:1d:b1:58:ba:01:26:75:c7:af:
                    ea:92:7c:3d:31:ca:df:dd:55:f5:42:c6:03:19:dc:
                    16:0f:5e:f7:e3:82:94:10:ac:b2:30:97:58:13:5d:
                    79:47:df:a2:fe:36:96:ba:11:08:71:e2:33:47:75:
                    51:33:8f:06:bf:9f:46:bf:c0:40:fe:a3:60:3f:33:
                    17:1e:e6:2d:0f:de:0d:73:41:73:49:66:db:da:db:
                    65:a6:66:99:fd:0d:fc:ed:78:cd:45:40:43:6d:4e:
                    a3:a0:4d:cc:fe:f0:77:18:cb:67:1b:e2:1f:1a:a3:
                    a7:0d:e8:dd:96:89:3f:be:87:5d:03:02:c6:83:ad:
                    6a:33:79:80:d1:f5:a7:d9:c4:ed:2f:bd:ab:95:bb:
                    2f:2a:27:ba:b7:6c:74:d4:0a:f7:d1:3a:11:15:49:
                    7d:38:27:31:b1:0c:a7:18:30:52:87:2c:a9:81:23:
                    43:77:8e:e2:9c:11:2d:cd:e1:10:0e:2e:bf:31:20:
                    f5:29:81:f9:5f:41:16:1f:93:f1:87:ec:12:2f:61:
                    e3:60:39:ac:3c:5e:43:fb:2b:4a:ad:d4:49:74:eb:
                    07:46:07:b1:b2:aa:e0:46:aa:e2:18:df:05:af:a0:
                    2e:23:c0:a7:b9:a5:bf:c6:2a:60:3e:00:f6:1a:16:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E3:72:3D:5D:45:5C:9E:D3:FE:64:7F:F1:A3:6B:58:CA:4E:12:3A
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kuNyPV1FXJ7T_mR_8aNrWMpOEjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9c0::/29
                  2a10:bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:cd:d2:b6:b2:66:c2:bc:5a:a6:b2:e5:2b:97:c9:ae:10:6a:
         e4:67:2a:96:39:7b:76:61:83:ac:b8:ce:dc:e6:a0:64:16:6a:
         36:2e:bd:c6:a4:89:f9:f9:23:1c:0b:9f:36:c6:62:00:70:52:
         90:99:23:7a:a8:b9:99:da:7e:8c:d2:e5:1d:e0:c1:c1:e3:0e:
         bc:71:71:ee:d3:02:b7:bc:b4:22:68:e6:7d:f8:67:39:49:65:
         df:af:06:0a:3f:54:00:19:b9:55:70:84:05:26:1e:d2:be:87:
         5d:f1:f1:8a:98:23:8e:b4:2d:0c:50:2a:4f:92:8b:23:12:22:
         d2:24:0d:a9:48:68:46:3e:ea:b8:1d:27:85:7e:8c:85:3b:ec:
         d4:bd:3b:c0:e6:99:96:97:f5:9a:37:94:9f:24:39:84:e5:ce:
         a3:f8:6d:08:73:25:a4:dd:9a:00:37:d9:a1:ca:9b:f3:2a:5b:
         4c:50:6b:b8:f6:aa:e4:f4:27:24:ac:76:41:3c:88:e8:d4:e7:
         c1:cf:09:ee:db:ce:78:c6:88:74:97:a7:18:74:95:06:86:57:
         88:8d:3e:ed:bb:25:57:ee:bc:b1:80:31:d6:00:fa:ba:f9:62:
         89:10:91:13:dd:30:03:47:44:81:6c:61:ae:fd:2b:14:05:bc:
         6f:e8:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----