Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa
File:                     TIjcajjMk3fDqj4yxesangwqotE.roa (raw, json)
Hash identifier:          I255xDGuNa05mzZr4BHtQIi8vZJmWVsyjaqJs4aUMvo=
Subject key identifier:   4C:88:DC:6A:38:CC:93:77:C3:AA:3E:32:C5:EB:1A:9E:0C:2A:A2:D1
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       01892612EB91FECEE35FC25E174829422F9C
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa
Signing time:             Wed 05 Jul 2023 12:42:01 +0000
ROA not before:           Wed 05 Jul 2023 12:42:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:85c0::/40 maxlen: 40
                          2a13:85c0:100::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:26:12:eb:91:fe:ce:e3:5f:c2:5e:17:48:29:42:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Jul  5 12:42:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c88dc6a38cc9377c3aa3e32c5eb1a9e0c2aa2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:49:9f:72:83:2c:fd:cc:e6:1e:1f:9b:3c:
                    c8:3c:4d:8a:94:2d:99:57:1f:10:be:78:5a:be:f7:
                    2d:97:96:64:be:a7:9b:ed:19:05:dd:be:99:de:ae:
                    df:14:c8:6b:44:cd:7e:27:ea:5b:50:7e:ef:41:3a:
                    1d:4e:ea:9b:ec:b4:47:b5:92:e9:6f:02:2f:d3:96:
                    12:3b:92:e7:56:dd:80:de:84:aa:2f:6c:c7:ef:92:
                    c5:71:af:10:62:65:ee:9c:02:2d:7f:ce:c1:01:44:
                    d3:eb:65:3c:32:c7:82:8b:1b:73:44:02:6c:d4:92:
                    d1:10:f6:92:e0:c3:fc:28:3c:58:0d:4a:68:59:04:
                    42:f5:c4:1e:37:5c:8c:87:fe:ca:76:86:90:25:f8:
                    51:54:d1:90:07:c1:d0:51:65:d3:75:61:94:7e:e4:
                    0e:44:1c:cd:9c:d5:03:5d:e6:b9:47:77:c4:92:d5:
                    89:b0:57:d9:76:c5:eb:10:14:2f:29:f4:c7:6c:db:
                    e9:f9:b6:bd:75:af:6f:81:2a:18:ab:f3:3d:ad:c6:
                    dd:01:af:2e:07:e4:2b:0c:d0:79:ec:e7:6f:c9:fd:
                    fd:13:ae:8d:82:b2:b5:37:2f:bf:21:0e:e5:a3:a9:
                    5b:fc:9d:4c:5e:65:04:74:f6:fc:f0:60:3d:65:65:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:88:DC:6A:38:CC:93:77:C3:AA:3E:32:C5:EB:1A:9E:0C:2A:A2:D1
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:85c0::/39

    Signature Algorithm: sha256WithRSAEncryption
         8c:39:06:98:a3:3f:f6:d2:46:ef:b3:da:78:5d:39:03:25:e1:
         e8:b5:79:fc:31:30:ef:7f:30:b2:d7:b2:3a:1b:e2:a2:74:8d:
         c0:63:7a:f9:98:8d:21:d7:80:2f:76:f0:2f:6f:70:6f:ce:d2:
         d7:e5:a1:4d:3b:e1:38:c4:e6:69:27:e0:5c:96:43:fc:58:29:
         d8:67:70:b6:c3:c8:32:80:94:fc:d3:73:66:c8:db:1a:fb:8a:
         12:4c:0c:02:16:f6:a8:35:a5:e2:5d:60:53:fd:88:8a:d6:96:
         d4:b6:1e:19:69:df:6e:54:04:9a:0c:67:94:c7:f6:a2:32:c9:
         71:c7:70:69:c4:2c:9a:06:9c:80:91:eb:05:b1:d8:17:eb:9b:
         bf:14:15:eb:0e:ae:e8:c5:bb:73:51:30:4b:ea:39:bd:47:aa:
         54:cb:5d:8c:0e:e7:07:2f:92:c7:a6:d9:13:99:cb:0d:ab:a1:
         d8:7e:44:d6:95:47:cd:fc:a8:e6:fe:27:4f:86:bf:c3:0b:55:
         96:b4:68:16:cb:64:2f:ab:7d:c8:61:3f:2f:fc:df:cf:37:98:
         3d:53:24:d3:e9:b3:bc:19:dd:08:58:54:74:f2:a1:34:32:e4:
         d9:41:ac:37:58:db:3a:b3:6d:a4:4f:7f:11:2b:87:45:29:15:
         f3:6c:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----