Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kobFsnChqMssMfYwd_I5jzSq52w.roa
File:                     kobFsnChqMssMfYwd_I5jzSq52w.roa (raw, json)
Hash identifier:          xpAxJOi0hSNfPAvxz1wZUPkW7H5OI2BH6b3P34++cwE=
Subject key identifier:   92:86:C5:B2:70:A1:A8:CB:2C:31:F6:30:77:F2:39:8F:34:AA:E7:6C
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       01880982887BB73AE2080B0600F868A6FC97
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kobFsnChqMssMfYwd_I5jzSq52w.roa
Signing time:             Thu 11 May 2023 06:32:09 +0000
ROA not before:           Thu 11 May 2023 06:32:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198687
IP address blocks:        2a07:3501:1090::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:09:82:88:7b:b7:3a:e2:08:0b:06:00:f8:68:a6:fc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: May 11 06:32:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9286c5b270a1a8cb2c31f63077f2398f34aae76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:37:d9:8b:14:6c:ca:21:b8:73:39:1b:ab:
                    2d:b9:aa:13:50:19:68:8a:cd:cb:7f:e9:05:19:f6:
                    4d:29:21:7d:94:62:84:43:dc:4e:05:e7:41:4a:d0:
                    6b:ee:6a:b3:de:e5:c5:d4:2d:c5:df:ee:be:13:f8:
                    e2:b0:92:01:7f:ec:db:ea:1f:75:29:2f:30:12:4c:
                    cb:fe:57:a6:4d:c9:b7:b0:1d:ec:c5:55:c1:8f:81:
                    ea:96:e3:c9:b4:cd:39:6e:68:17:b2:85:78:5c:9f:
                    47:61:a4:2e:a7:f8:6f:c0:ba:45:43:9e:d5:60:05:
                    0a:80:0e:cd:ef:a6:89:fd:bd:38:be:95:cf:8d:f4:
                    3d:16:1a:3f:3d:6e:78:c2:cc:2f:7b:dc:47:7c:1d:
                    fc:56:1e:4c:06:f4:de:e8:ec:b3:5a:da:0f:8d:36:
                    0f:21:29:c5:4a:14:03:a2:ec:77:a7:8b:59:84:7c:
                    16:0d:3d:53:f9:3e:ee:28:32:8d:39:45:34:22:f4:
                    e5:b9:bd:98:89:35:fb:d5:5a:05:06:ad:da:6d:f1:
                    21:6e:fc:f0:de:f8:96:d4:a9:56:76:a4:71:23:22:
                    ac:ec:4f:61:cf:84:3d:6a:5d:63:3b:45:42:5c:a8:
                    f5:7f:64:64:29:61:7e:0c:b2:ce:df:54:f0:3d:bf:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:86:C5:B2:70:A1:A8:CB:2C:31:F6:30:77:F2:39:8F:34:AA:E7:6C
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/kobFsnChqMssMfYwd_I5jzSq52w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:3501:1090::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:11:09:53:8f:c8:00:cf:8a:55:05:5f:72:ce:bf:43:86:2c:
         ac:2d:83:2e:9a:52:d6:79:ca:bc:5e:ea:30:22:95:08:4c:ab:
         b7:d6:5f:62:a6:eb:88:bd:04:76:f4:72:21:2b:a7:04:7f:03:
         c7:9a:10:7d:c4:41:49:07:cb:e5:23:09:40:5e:49:62:59:c3:
         19:37:ce:43:93:59:9e:91:63:2a:47:37:f9:d8:b2:b3:97:75:
         14:f8:59:dc:6f:01:37:a4:60:a5:13:68:43:b2:62:63:f9:04:
         d5:05:5f:30:10:f5:37:ef:64:fd:89:7c:83:83:b0:ff:bc:df:
         15:c8:15:63:dc:ee:92:51:6b:45:4f:23:64:d7:8f:a7:9c:5c:
         a1:4c:74:ed:8a:ae:2d:e8:66:3a:4c:65:ea:22:4c:28:71:bc:
         1f:b7:77:61:6a:ee:63:08:47:bc:52:56:ad:13:2d:2f:1a:ce:
         47:ce:96:7a:6c:40:c1:3f:a4:99:93:91:7c:ea:59:b3:32:3c:
         52:5d:92:2b:7e:c1:cd:ee:5d:a4:a1:8d:a6:b7:59:8c:d1:ce:
         22:38:25:30:8e:22:7a:67:20:54:9d:bd:08:f5:f0:4e:72:db:
         02:b7:3a:82:21:5c:a6:18:ac:92:ba:22:bb:e8:3c:6f:2f:f2:
         71:00:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----