Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/d9tvVUlc0wn1uc-Hp4Fhl-nmrUc.roa
File:                     d9tvVUlc0wn1uc-Hp4Fhl-nmrUc.roa (raw, json)
Hash identifier:          rl/iVZOUL3n5V1Z+AnNvB/9n4z43BXJQHWb0/PY9+ik=
Subject key identifier:   77:DB:6F:55:49:5C:D3:09:F5:B9:CF:87:A7:81:61:97:E9:E6:AD:47
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       0189460182E9F4495DB58ADD770DFD99DAB3
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/d9tvVUlc0wn1uc-Hp4Fhl-nmrUc.roa
Signing time:             Tue 11 Jul 2023 17:30:51 +0000
ROA not before:           Tue 11 Jul 2023 17:30:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210761
IP address blocks:        2001:67c:81c::/48 maxlen: 48
                          2001:67c:b90::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:46:01:82:e9:f4:49:5d:b5:8a:dd:77:0d:fd:99:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Jul 11 17:30:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77db6f55495cd309f5b9cf87a7816197e9e6ad47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:11:28:88:8a:10:db:df:f6:b8:e8:5d:58:f4:
                    79:47:d4:b8:57:1e:d3:82:ad:e7:0b:8e:d6:6e:e2:
                    cb:6c:8c:d9:10:2f:80:32:43:b4:6b:ed:3c:22:16:
                    e6:e8:4b:c0:09:a6:ba:fa:6a:6d:bd:c7:cf:e1:b8:
                    b7:bc:ae:03:76:6e:2d:9d:24:bb:87:e3:42:22:e5:
                    44:a9:ce:ef:b9:24:ab:93:ff:97:c8:82:53:ea:d8:
                    63:e4:20:85:d9:6e:a7:71:e3:6c:3d:28:91:62:75:
                    8c:b6:1b:55:9f:d3:0b:26:e0:49:3e:9a:c1:78:21:
                    46:d1:20:97:63:15:bf:ad:c9:d6:1b:5f:3d:44:d0:
                    bf:81:3b:7b:95:bb:49:1d:7b:1e:ce:aa:b0:77:83:
                    5d:86:b4:44:41:fe:a8:41:86:9d:96:f8:94:77:e7:
                    3b:fd:0c:83:59:eb:b8:45:6b:b5:f4:8f:bf:73:bc:
                    34:60:d7:79:bf:fb:ad:30:1d:1a:05:d7:a9:6b:62:
                    00:79:60:d9:c7:c6:b0:9c:fd:d3:3b:39:5b:7b:6f:
                    60:5a:0a:e0:bb:06:bd:87:cd:ea:a4:80:32:62:ac:
                    b8:83:13:67:8b:79:14:ee:83:fc:ab:94:c5:5f:99:
                    4a:64:07:0a:bf:6e:cc:8e:b3:59:ab:98:43:7c:3a:
                    c8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:6F:55:49:5C:D3:09:F5:B9:CF:87:A7:81:61:97:E9:E6:AD:47
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/d9tvVUlc0wn1uc-Hp4Fhl-nmrUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:81c::/48
                  2001:67c:b90::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:44:ec:e6:15:ad:82:41:04:9e:ad:19:c4:ee:ba:a7:f5:3d:
         5c:85:46:3d:9d:90:41:d3:49:88:6c:e1:14:ee:c3:c3:f8:26:
         c1:9a:fe:c5:ba:c2:46:c0:99:ac:78:2d:4d:a1:e7:20:2b:9f:
         89:02:96:e0:b3:d5:f6:1c:b4:68:b1:b8:01:13:0d:0f:5b:c7:
         bb:18:e0:72:30:cc:ad:5b:d6:52:6a:fd:2a:c6:e7:5e:12:16:
         f6:fc:83:15:66:32:ae:ba:60:04:f2:4c:04:88:66:98:21:ea:
         31:16:8a:09:06:b3:c1:42:a4:8c:95:59:98:43:ce:f5:9e:65:
         80:a2:b7:27:14:0c:4b:13:9b:e1:a9:8f:a9:66:66:ea:d5:2b:
         b4:3c:24:e0:85:28:12:97:ef:f3:45:30:87:0e:34:cb:82:96:
         a2:b7:72:41:a4:ac:3e:82:08:ae:da:c0:a9:c7:88:04:56:c2:
         38:52:41:2d:59:72:ca:bd:98:5c:de:59:e3:72:ad:0e:88:29:
         25:82:99:a4:ef:3c:ff:fa:91:47:98:17:ad:ec:63:d1:54:27:
         41:54:a1:57:7a:5d:53:54:15:f7:f4:4a:96:91:8f:04:4a:69:
         aa:66:6b:fe:a5:f6:3f:1f:3e:41:1c:6a:f5:b9:42:81:fb:13:
         eb:a2:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----