Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa
File:                     ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa (raw, json)
Hash identifier:          xEouRCPZIJ8wF39TRfOO62FBXkRLixdXUEkZCrVz7tE=
Subject key identifier:   A2:EB:80:19:DC:94:F0:05:60:E8:85:6C:21:5F:C3:CC:ED:C7:21:BB
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018920376B9A16AC5CE64B0C7C4771D08A1C
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa
Signing time:             Tue 04 Jul 2023 09:24:10 +0000
ROA not before:           Tue 04 Jul 2023 09:24:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29311
IP address blocks:        2a04:9a04::/32 maxlen: 36
                          2a07:3506:4c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:20:37:6b:9a:16:ac:5c:e6:4b:0c:7c:47:71:d0:8a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Jul  4 09:24:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2eb8019dc94f00560e8856c215fc3ccedc721bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:dc:77:3e:ac:f3:ab:5a:d4:e8:2d:82:a1:
                    aa:ba:80:28:8f:b6:66:81:c2:3b:86:60:a6:24:f3:
                    2a:8e:15:be:ac:0a:31:db:16:17:dd:77:76:a2:0c:
                    b0:98:80:4c:41:83:b8:0d:e3:a0:1a:63:3b:c8:80:
                    6a:a2:9a:e0:d8:21:1a:c4:69:10:b2:d1:77:32:55:
                    93:0f:c9:d3:a9:11:15:9d:55:62:ea:b2:a7:77:ae:
                    6d:37:43:be:34:15:06:5a:94:90:17:9c:fb:17:33:
                    2c:af:2c:17:97:97:87:61:41:32:10:f4:17:3a:f5:
                    92:68:a4:23:39:84:e5:82:26:fb:67:63:39:56:5c:
                    6a:68:c7:a3:2c:78:3c:25:12:6a:b4:05:f6:99:08:
                    b7:0d:a0:4f:96:ad:9c:26:66:f2:e8:80:ac:04:cd:
                    2d:5a:56:22:ed:b0:88:11:d5:84:09:4e:0a:d8:b2:
                    74:23:c9:5a:e8:88:59:17:7d:0e:cd:fb:ea:7d:d9:
                    85:33:44:7e:4b:c5:62:67:86:a4:3d:cb:55:0a:4d:
                    f1:da:66:4a:d4:ed:9b:fa:7c:97:f1:d5:d5:d7:2b:
                    d7:49:0a:93:a3:3b:25:82:e2:68:0e:2a:93:f6:63:
                    42:d8:46:4c:e6:45:0f:cb:7d:1b:38:24:ed:41:51:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:80:19:DC:94:F0:05:60:E8:85:6C:21:5F:C3:CC:ED:C7:21:BB
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:9a04::/32
                  2a07:3506:4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:24:37:62:48:ba:bc:1c:8a:aa:0d:b6:a2:63:17:6c:89:c2:
         81:94:59:c0:ea:e7:56:63:9c:97:40:62:50:1b:4e:83:8f:78:
         13:7c:b1:53:de:54:ad:ce:06:2b:98:45:ad:86:8e:f2:11:61:
         ca:19:32:d0:2d:80:b0:0c:2d:cf:b5:56:45:f3:94:c3:b8:86:
         bf:ad:94:58:cd:16:26:ba:3e:a1:60:cc:1b:a5:96:eb:69:f8:
         b8:6f:f1:87:51:a8:25:6d:36:e4:fb:22:58:1d:33:4f:36:6e:
         6b:ef:47:e2:47:08:ef:b6:ef:11:2f:e6:25:28:84:36:94:f2:
         0b:83:c7:08:d3:36:75:af:1e:5c:dc:78:45:4f:54:78:f5:96:
         53:c4:b6:df:f6:31:bf:3c:d9:c2:2b:6a:44:8c:04:6e:56:e0:
         f6:cf:a5:f0:86:ea:51:fb:b4:7b:10:5a:c5:87:40:bb:01:73:
         f7:b0:9c:23:57:e8:8b:f4:3f:42:d6:b1:a2:bb:2b:a6:ea:3a:
         be:27:b4:de:9a:e5:c8:fa:60:a0:79:08:6c:07:b7:70:61:21:
         ef:72:20:ea:98:11:1d:df:a7:31:8a:19:d8:ee:ed:0a:7c:95:
         e9:ad:16:83:ea:a8:ac:4c:65:af:66:ab:bf:0b:6e:63:27:f1:
         84:c7:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----