Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/MrHWINQA9f3rYUdDJfNTvp-cPv4.roa
File:                     MrHWINQA9f3rYUdDJfNTvp-cPv4.roa (raw, json)
Hash identifier:          mC1qtXpuXs44r0wK+315baK5tLqXJ6159oz1gqLC1NA=
Subject key identifier:   32:B1:D6:20:D4:00:F5:FD:EB:61:47:43:25:F3:53:BE:9F:9C:3E:FE
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       01892670736544B76B52546A93E328DC20DC
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/MrHWINQA9f3rYUdDJfNTvp-cPv4.roa
Signing time:             Wed 05 Jul 2023 14:24:11 +0000
ROA not before:           Wed 05 Jul 2023 14:24:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:85c0::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:26:70:73:65:44:b7:6b:52:54:6a:93:e3:28:dc:20:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Jul  5 14:24:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=32b1d620d400f5fdeb61474325f353be9f9c3efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:62:cd:78:3c:8f:a3:0b:b0:3b:ab:75:f7:
                    d8:3f:08:46:b1:28:b5:e0:3b:37:ce:d7:9d:d9:69:
                    71:c4:c5:b5:a4:2c:c4:62:0d:46:7c:50:1b:05:0b:
                    c9:54:90:76:a6:2b:7b:00:db:45:11:bd:48:9e:38:
                    4d:d2:67:f8:09:cb:73:6b:cb:36:d9:6b:3e:7e:8b:
                    67:df:80:8a:d5:00:07:02:65:76:47:c2:72:6b:a0:
                    88:75:40:19:e4:7c:3e:60:ab:26:66:24:13:c2:e7:
                    70:9c:92:f8:55:02:3b:bc:8d:12:fc:20:e3:95:19:
                    e8:a1:3e:75:cb:36:c3:2a:92:14:12:7a:7b:f5:9d:
                    a5:c9:d8:48:e6:dc:74:00:c4:43:56:3b:59:0a:74:
                    a8:d6:37:a9:fb:17:d0:98:08:a1:0b:cc:0d:fb:8f:
                    c8:4b:14:8a:83:b4:50:fc:59:6a:cd:b2:8c:57:08:
                    75:9d:08:fb:31:39:b8:ee:4e:a8:ca:0d:b2:93:e4:
                    5b:84:b4:dc:4f:15:c6:ad:94:2d:b0:3b:e2:49:71:
                    0c:1c:54:da:b4:03:75:d1:56:96:47:82:bf:f4:2b:
                    0e:35:f7:a5:37:06:0e:a7:65:b3:9d:0c:ac:c4:eb:
                    2a:09:76:f8:b8:8f:45:17:e3:3d:9c:72:ed:8f:84:
                    4d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:D6:20:D4:00:F5:FD:EB:61:47:43:25:F3:53:BE:9F:9C:3E:FE
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/MrHWINQA9f3rYUdDJfNTvp-cPv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:85c0::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:b5:0f:67:4c:3e:03:14:10:be:de:37:5e:75:01:6f:fa:
         dd:8f:98:3d:86:26:5f:76:1a:57:ee:58:54:bd:0e:3c:69:05:
         e0:c4:ac:52:9c:b7:65:e6:5c:82:ca:1b:c7:b0:cb:f2:f6:c3:
         f1:7a:d0:e9:cd:04:43:d2:a6:d1:92:ec:26:7b:ba:9f:7b:f4:
         38:12:15:af:ed:ad:c6:c1:b1:3a:b9:51:18:56:ba:4b:54:f3:
         0d:d0:1a:4d:dd:b7:02:8f:a7:f7:e2:3b:41:72:5e:dc:30:e2:
         03:57:e0:79:03:be:f2:a9:08:f3:8d:f1:36:3a:e4:db:5f:5f:
         16:42:4a:97:db:ee:83:cc:cb:fb:c8:c2:d4:dd:51:54:5a:b3:
         de:16:32:49:27:4f:f5:49:7a:99:74:0a:06:bf:20:80:ca:a2:
         d4:ba:ea:fc:29:70:93:fe:3b:c7:cd:d3:17:5b:59:f3:fc:8c:
         ad:3c:e0:04:60:51:c5:d3:63:b2:ed:e1:68:e5:ec:5a:cf:0d:
         9f:3b:1c:a4:29:95:45:6a:f5:c0:69:07:df:fa:d7:c4:d7:03:
         99:b9:f0:43:f6:0f:ed:98:62:8a:bb:82:a2:1d:52:c5:bc:64:
         f4:a3:a0:9e:7f:07:d0:fc:3a:b0:78:27:4e:1f:ca:9d:6c:82:
         fc:48:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----