Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa
File:                     2KK6bosiWV-LrvUKtjvanSbnGGg.roa (raw, json)
Hash identifier:          xrNOfGOYvuUkM8T8ENLafKvhoUWjch5BIQMRJ/bE4CM=
Subject key identifier:   D8:A2:BA:6E:8B:22:59:5F:8B:AE:F5:0A:B6:3B:DA:9D:26:E7:18:68
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01877AA58995A81A3BAFE249A2D36C748564
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa
Signing time:             Thu 13 Apr 2023 12:44:41 +0000
ROA not before:           Thu 13 Apr 2023 12:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        217.30.89.0/24 maxlen: 24
                          2a10:eec0:80::/41 maxlen: 41
                          2a10:eec0:40::/42 maxlen: 42
                          2a10:eec0:400::/38 maxlen: 38
                          2a10:eec0:2000::/35 maxlen: 35
                          2a10:eec0:1000::/36 maxlen: 36
                          2a10:eec0:8000::/33 maxlen: 33
                          2a10:eec0:4000::/34 maxlen: 34
                          2a10:eec0:200::/39 maxlen: 39
                          2a10:eec0:100::/40 maxlen: 40
                          2a10:eec0:800::/37 maxlen: 37
                          2a10:eec0:e::/47 maxlen: 47
                          2a10:eec0:20::/43 maxlen: 43
                          2a10:eec0:d::/48 maxlen: 48
                          2a10:eec0:10::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:a5:89:95:a8:1a:3b:af:e2:49:a2:d3:6c:74:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Apr 13 12:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8a2ba6e8b22595f8baef50ab63bda9d26e71868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:2d:6d:a8:dd:3c:5b:69:06:18:81:c3:e4:
                    2a:04:a1:41:aa:f6:e4:15:f8:bb:da:de:45:ac:63:
                    dc:26:ab:68:42:01:51:eb:e1:2a:c0:98:8f:f6:71:
                    e5:42:7f:2a:b9:91:39:55:5b:53:3a:ea:a7:2b:cf:
                    7e:b4:6a:2f:5d:5f:ad:16:63:38:f9:a4:33:48:7b:
                    31:15:af:b5:f6:b1:54:9a:89:34:77:39:44:e4:ea:
                    be:08:66:63:de:fd:ff:fe:85:18:47:d6:2d:0e:08:
                    3f:90:a1:3f:b4:65:57:a0:59:9c:bc:2a:d7:83:05:
                    4f:5a:b4:16:7d:dc:af:1e:eb:56:b0:a4:f3:d5:49:
                    dd:e5:26:f1:aa:05:74:a5:8b:e3:30:14:46:83:2a:
                    9f:b2:44:eb:65:bb:b6:3f:8f:50:27:37:16:9b:02:
                    8e:a8:e7:e2:28:7a:1e:e3:32:a7:8f:a0:ed:bd:ca:
                    83:7a:db:32:7a:fb:c9:e7:c8:dc:b6:7f:78:ac:9d:
                    48:67:67:9a:52:51:bb:75:5d:0d:80:0e:51:b5:9f:
                    37:7d:6a:78:3d:0b:fd:d8:d2:c0:76:34:d0:50:78:
                    e7:99:b0:24:5c:75:80:f2:8a:64:08:69:9a:c9:f6:
                    86:70:ac:6a:99:a9:92:a3:15:3c:b0:c1:91:dd:d7:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A2:BA:6E:8B:22:59:5F:8B:AE:F5:0A:B6:3B:DA:9D:26:E7:18:68
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.30.89.0/24
                IPv6:
                  2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:65:cd:75:fc:cd:19:71:e3:43:be:23:c8:49:71:a2:ad:
         19:9a:0f:49:1e:08:b4:13:8c:55:ba:ce:03:c1:48:da:da:c6:
         e1:44:f9:a9:f6:dc:ed:30:03:1e:c9:12:cc:ed:84:ca:ef:b9:
         45:57:f1:cf:8e:b3:8e:93:1d:36:f8:c1:1d:f4:0a:02:43:c8:
         27:b8:39:f1:5f:9d:9d:d8:c3:50:93:b2:0c:8e:ad:d0:04:fc:
         a4:93:ad:fb:ba:4a:30:2e:1a:cb:77:b5:e2:8b:a6:62:43:09:
         ab:56:da:e8:65:9c:4a:ad:c5:23:4a:82:ea:c4:6e:21:b3:4f:
         68:fd:8d:4a:d7:a6:86:d6:5c:fd:15:20:02:62:0f:a9:91:77:
         c0:9f:09:46:85:31:08:75:7e:46:13:a1:50:98:54:7c:a0:c5:
         2e:5f:0e:49:68:9b:72:25:51:0d:a2:e1:a5:d1:2f:16:08:71:
         34:ff:e0:89:70:33:01:e7:8d:25:0a:30:e9:85:1a:45:a6:73:
         a2:93:28:a4:28:2b:12:1f:59:b1:d4:40:ca:05:67:3c:b3:c5:
         73:b0:e2:d9:5a:8b:61:26:a7:d0:1d:56:d0:7e:0b:45:e8:19:
         4c:ad:a5:98:ce:fa:fa:ab:3b:cb:07:49:25:61:fa:a7:3a:ee:
         21:a6:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----