Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa
File:                     8U_yVugWFporbC9sntroTWkEFsw.roa (raw, json)
Hash identifier:          BhThPfW4LwL7co56houRn5Zjprpuy9VvepS28L1pGNA=
Subject key identifier:   F1:4F:F2:56:E8:16:16:9A:2B:6C:2F:6C:9E:DA:E8:4D:69:04:16:CC
Certificate issuer:       /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial:       0187985AD2171EFBAF3A5F2FEC3180A37CF8
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa
Signing time:             Wed 19 Apr 2023 07:11:41 +0000
ROA not before:           Wed 19 Apr 2023 07:11:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48652
IP address blocks:        2a13:d080::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:5a:d2:17:1e:fb:af:3a:5f:2f:ec:31:80:a3:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
        Validity
            Not Before: Apr 19 07:11:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f14ff256e816169a2b6c2f6c9edae84d690416cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:bd:cd:5f:80:8c:d6:f9:6f:97:3d:84:16:
                    39:4d:d6:2e:1c:4a:01:71:03:37:ab:8c:2c:ee:ac:
                    24:7c:0c:59:46:18:83:4a:d2:45:48:65:b3:18:cf:
                    17:0a:33:ea:3e:7e:ed:a4:52:2f:2a:3c:b5:35:87:
                    98:37:f3:24:bb:51:e7:26:1e:8b:a3:19:35:2b:2b:
                    47:a3:16:30:1a:5c:95:fe:6e:88:6f:c8:70:6e:41:
                    a2:85:c3:a7:80:10:46:f7:f8:a4:4a:6c:a1:a6:a8:
                    09:26:22:2f:f0:11:67:6c:4f:e3:f1:ab:e8:0f:ea:
                    cf:83:3c:5d:3b:48:da:b3:88:84:b4:65:e7:d3:3d:
                    35:b5:58:af:b3:1f:b3:ee:2d:e0:ae:a4:ab:4d:be:
                    6b:c6:90:5c:4f:11:a3:ec:aa:66:42:c6:b7:64:4b:
                    c8:67:b8:58:8b:e2:64:92:39:8b:0c:bf:5e:cb:2f:
                    cc:b8:8a:3e:b6:d1:ad:30:78:21:71:d9:62:f3:20:
                    ab:97:03:30:a1:7d:b9:0b:7d:83:3e:74:a3:39:8c:
                    e2:2f:1d:b0:c5:96:e4:78:e0:fa:04:46:bd:a9:d0:
                    94:f5:ae:13:ea:73:4d:3b:26:af:66:c3:6a:60:56:
                    7b:c1:69:f4:6b:bf:1b:4e:c1:96:c5:55:22:95:17:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4F:F2:56:E8:16:16:9A:2B:6C:2F:6C:9E:DA:E8:4D:69:04:16:CC
            X509v3 Authority Key Identifier:
                keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d080::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:61:f4:d7:40:35:37:0c:a7:8e:49:37:1e:a2:fe:51:04:
         2f:aa:f8:8d:46:46:78:27:74:85:7f:ba:82:3d:c1:2d:7e:ab:
         5a:0f:f9:f3:42:48:c2:79:8c:1d:56:f4:64:1c:c7:06:1b:6f:
         db:c2:10:e8:ee:59:46:1b:8c:14:3c:0c:cc:9f:4d:76:ec:73:
         ef:3e:49:2f:10:60:99:3a:64:7c:55:85:8f:f3:83:5c:85:45:
         0f:e9:ab:49:de:4b:0b:da:c2:13:35:3e:a1:28:4e:bf:0a:52:
         98:af:c5:d8:0a:37:b9:f6:d3:c0:7e:d6:1e:a8:c6:33:b2:f6:
         a8:d0:e9:d5:ad:75:98:83:71:36:b2:3e:3e:c6:dc:d7:a8:a4:
         db:18:c5:af:4f:ec:8f:a9:0e:3f:e5:d4:f3:ce:fd:01:43:a9:
         8d:19:22:a4:b0:71:a1:0b:75:e6:04:47:e3:58:dc:f2:d2:15:
         d9:9e:98:73:08:38:4b:6e:e5:1e:48:1e:f8:c9:dc:ea:46:f7:
         90:17:13:7d:82:7a:04:c3:b7:3e:f8:b4:7b:74:1b:93:8f:d0:
         d5:f0:cb:6d:c7:8e:95:61:57:11:e5:7a:86:f4:e9:c5:a9:9f:
         8b:43:47:19:73:fe:dd:f2:87:dd:29:d2:56:d6:23:54:a7:75:
         29:4f:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----