Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa
File:                     UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa (raw, json)
Hash identifier:          w2NgkcuN94Xx5R//F5y8tH9BigJFM6CvwmbfE3uz9KQ=
Subject key identifier:   53:09:CF:C0:72:5B:D8:03:F6:2C:F5:AD:D2:AD:56:6D:CB:7A:89:1E
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       0189CF4BCC32693C9380900C8A8E55DD6E07
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa
Signing time:             Mon 07 Aug 2023 09:19:58 +0000
ROA not before:           Mon 07 Aug 2023 09:19:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21320
IP address blocks:        83.97.88.0/21 maxlen: 21
                          2001:799::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:cf:4b:cc:32:69:3c:93:80:90:0c:8a:8e:55:dd:6e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Aug  7 09:19:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5309cfc0725bd803f62cf5add2ad566dcb7a891e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8e:00:4c:f3:74:06:a1:09:7c:f8:9e:b5:2e:
                    b6:00:7c:30:3a:09:00:cd:51:17:c6:1e:0d:af:c6:
                    bb:9e:c9:1a:0d:cf:b6:13:a0:ec:52:e6:1d:a7:1d:
                    41:d8:fb:70:04:7f:33:ec:f6:48:40:4d:90:62:bd:
                    f7:1c:0f:5b:51:4c:6a:e3:d4:9b:ca:37:a5:a0:57:
                    33:0f:b4:d6:20:d8:21:f8:47:3b:6a:ca:eb:bd:0b:
                    3c:2e:57:b5:89:f6:aa:e9:fd:5e:44:39:60:d7:21:
                    f0:07:54:f7:87:d0:22:bc:c1:54:08:58:39:4d:0c:
                    2c:98:cb:84:58:1a:46:97:9d:ee:88:11:b8:92:56:
                    d9:74:a2:d3:28:8c:e7:2f:ef:86:6f:2a:c7:b6:82:
                    d8:c1:c0:8a:4f:2d:c6:01:60:37:dd:75:ea:59:a7:
                    70:10:8b:92:7a:da:01:e0:16:7f:50:14:1a:a8:64:
                    3d:c7:a2:00:70:42:3a:5c:b5:a5:3d:42:3a:39:3d:
                    a9:db:5d:3b:1f:3e:55:80:0e:1b:d4:e5:6d:f7:d3:
                    ad:f2:be:1c:99:12:79:65:76:27:7f:3a:b2:83:1a:
                    c2:1e:f0:7f:1a:f7:37:83:a2:ed:82:9d:84:5f:e0:
                    c5:67:4f:d0:34:c0:ae:78:0f:48:a3:99:bf:22:ac:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:09:CF:C0:72:5B:D8:03:F6:2C:F5:AD:D2:AD:56:6D:CB:7A:89:1E
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/UwnPwHJb2AP2LPWt0q1Wbct6iR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.88.0/21
                IPv6:
                  2001:799::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:42:d4:0c:fa:c3:65:17:a3:38:d4:83:63:df:8b:59:c8:d5:
         6e:4c:cb:08:81:62:e6:6c:ff:9b:4d:de:c8:f4:68:71:7e:e9:
         15:f8:f0:7a:6d:29:2b:d1:80:9d:d5:55:16:86:88:04:ad:02:
         2a:44:2e:f7:6a:e4:a6:41:72:f3:8b:23:e9:f0:4d:0c:b4:fa:
         9b:84:84:fe:6c:cb:7f:97:b9:e9:45:8c:9a:b6:e3:38:87:34:
         f3:29:18:a7:2d:a8:1a:17:49:1a:c6:1c:6d:ed:ce:72:d6:77:
         df:ce:3d:11:c0:60:7d:73:51:1e:b8:17:57:32:e4:f9:91:47:
         72:74:73:3b:38:ad:bb:5d:62:8c:22:3e:b4:e8:f4:6a:c8:e0:
         66:49:7d:3a:b9:2f:2e:bd:c2:c8:32:a4:5a:50:92:95:6d:b7:
         b4:d1:7c:32:65:5c:4e:ef:e0:8e:b4:4b:10:29:10:8a:13:fa:
         23:69:05:4e:9c:80:6a:f8:9c:55:60:dc:ab:62:0d:cb:3a:5a:
         b5:ad:cf:27:bd:f2:f5:76:0c:79:f7:88:77:3d:47:fe:94:c1:
         ab:dd:1d:0b:98:50:69:02:12:82:5a:92:d1:ad:7b:bd:4b:d4:
         ab:02:c8:3f:97:28:3e:d8:3c:d8:bd:5a:7b:ae:cf:4f:6f:b0:
         c2:d0:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----