Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/8AYdoKo_zfum-flRKFq8EVA4Q2s.roa
File:                     8AYdoKo_zfum-flRKFq8EVA4Q2s.roa (raw, json)
Hash identifier:          dKXXkCUgI3A9i09F8M2DHu8gdaDh6/Uewr3PirZz01U=
Subject key identifier:   F0:06:1D:A0:AA:3F:CD:FB:A6:F9:F9:51:28:5A:BC:11:50:38:43:6B
Certificate issuer:       /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial:       01891103A397DE3C008B6747DFB74BDB8F01
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/8AYdoKo_zfum-flRKFq8EVA4Q2s.roa
Signing time:             Sat 01 Jul 2023 10:33:18 +0000
ROA not before:           Sat 01 Jul 2023 10:33:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201634
IP address blocks:        2a05:c181::/32 maxlen: 32
                          2a05:c180::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:11:03:a3:97:de:3c:00:8b:67:47:df:b7:4b:db:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
        Validity
            Not Before: Jul  1 10:33:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0061da0aa3fcdfba6f9f951285abc115038436b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:49:2b:5b:69:9d:94:55:f9:49:89:11:f8:
                    fc:f1:5b:48:76:a0:7f:ff:0b:46:03:22:a9:34:26:
                    8d:72:56:4d:44:b0:23:04:d4:d0:b4:a7:a3:49:dd:
                    a6:54:f9:e0:00:40:a2:fc:aa:0c:d4:fa:41:e4:db:
                    01:b8:51:17:12:89:d7:c1:24:dd:89:6d:08:24:f9:
                    d0:80:b2:c2:a7:06:24:ad:bf:97:9f:c9:47:92:bb:
                    15:8d:ed:5f:df:2c:cc:a4:56:1e:ad:47:33:52:79:
                    f9:19:50:de:c9:7f:0b:21:9b:de:c8:7f:06:a4:fb:
                    b3:38:8b:42:7e:51:87:45:54:ed:8f:c5:b7:8b:77:
                    59:a6:55:27:f1:43:d7:18:8a:0f:11:c8:7e:30:43:
                    aa:94:f1:89:da:e6:c0:69:1b:d8:c5:8d:73:03:3b:
                    5c:02:89:2d:ca:97:75:3f:c7:d4:f6:5d:30:d4:0a:
                    d2:44:21:b7:67:f5:34:77:ea:6f:f9:3f:ed:7a:f8:
                    7e:11:22:55:2c:d2:8c:1c:ab:2f:a4:84:89:5c:85:
                    44:b3:1d:b0:c6:d9:31:ff:66:66:6e:85:34:07:ba:
                    8c:d9:c0:fe:b6:0f:c5:99:19:7b:4e:a7:70:b2:64:
                    fb:df:f6:b0:5d:6d:a9:a2:66:40:90:45:cb:76:1b:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:1D:A0:AA:3F:CD:FB:A6:F9:F9:51:28:5A:BC:11:50:38:43:6B
            X509v3 Authority Key Identifier:
                keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/8AYdoKo_zfum-flRKFq8EVA4Q2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:c180::/31

    Signature Algorithm: sha256WithRSAEncryption
         c1:a5:54:13:82:86:02:68:d7:a1:a7:de:af:65:c2:82:10:6c:
         17:bf:09:ec:be:30:d8:58:bb:9e:29:b5:16:95:60:91:ef:ec:
         2d:11:8c:7c:d8:8d:27:61:fb:fa:d5:d9:41:19:46:57:56:c6:
         64:53:7d:cc:ff:15:77:cb:39:b2:35:2d:d7:32:90:5c:60:38:
         3f:a3:d7:2f:65:54:9a:56:e9:6c:37:27:fe:31:77:68:9c:74:
         61:c7:b8:fe:23:17:4b:f0:d9:78:25:2f:a4:c2:3a:e1:db:b3:
         13:e2:3b:81:1b:4e:f6:c3:66:e6:a6:34:57:88:03:ee:09:1f:
         29:a0:aa:b9:83:95:6b:31:eb:50:c3:f9:9f:a1:f2:a9:13:64:
         3a:b3:d6:f1:b9:bb:a6:0e:70:34:c6:fc:40:e3:15:a3:2e:af:
         ec:8b:ed:f0:cc:0d:d0:6d:79:53:23:ec:cc:3b:c4:6e:60:33:
         b1:f6:f5:94:16:81:c6:5f:16:23:35:c5:1e:a4:14:58:7c:53:
         97:b9:30:ac:8b:db:ca:98:86:c2:83:e6:61:b1:14:e0:f8:35:
         c9:81:35:36:ea:75:b3:e5:4d:a3:ae:b2:76:9e:95:31:f4:1c:
         13:e5:4f:cc:55:71:98:ba:21:18:f5:0d:65:fb:c7:85:d9:fa:
         3d:5e:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----