Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/cCxk9wky2iSfFm1NisnjE5ng1-M.roa
File:                     cCxk9wky2iSfFm1NisnjE5ng1-M.roa (raw, json)
Hash identifier:          2uly/yGG1AMnH84jBH78m8kh+Ra6LwvDb4PhW7UZDfs=
Subject key identifier:   70:2C:64:F7:09:32:DA:24:9F:16:6D:4D:8A:C9:E3:13:99:E0:D7:E3
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       018BE753F732923FAE7A0048DF81F8A25FA3
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/cCxk9wky2iSfFm1NisnjE5ng1-M.roa
Signing time:             Sun 19 Nov 2023 11:25:21 +0000
ROA not before:           Sun 19 Nov 2023 11:25:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a13:d040:1e::/48 maxlen: 48
                          2a13:d040:19::/48 maxlen: 48
                          2a13:d040:14::/48 maxlen: 48
                          2a13:d040:1f::/48 maxlen: 48
                          2a13:d040:12::/48 maxlen: 48
                          2a13:d040:2::/48 maxlen: 48
                          2a13:d040:1d::/48 maxlen: 48
                          2a13:d040:18::/48 maxlen: 48
                          2a13:d040:13::/48 maxlen: 48
                          2a13:d040:16::/48 maxlen: 48
                          2a13:d040:1::/48 maxlen: 48
                          2a13:d040:11::/48 maxlen: 48
                          2a13:d040:1c::/48 maxlen: 48
                          2a13:d040:17::/48 maxlen: 48
                          2a13:d040:1a::/48 maxlen: 48
                          2a13:d040:15::/48 maxlen: 48
                          2a13:d040:10::/48 maxlen: 48
                          2a13:d040:1b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e7:53:f7:32:92:3f:ae:7a:00:48:df:81:f8:a2:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Nov 19 11:25:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=702c64f70932da249f166d4d8ac9e31399e0d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:7e:0c:a8:d5:77:6e:01:9f:70:2e:29:6a:
                    71:fe:4a:2f:75:56:fc:b4:0a:13:59:80:9f:15:b6:
                    13:41:f5:34:f8:f1:38:2f:f9:96:5a:ed:b4:2b:cb:
                    ab:46:11:be:c6:7f:ae:6e:23:b4:13:c0:d0:b2:38:
                    49:9e:d7:7c:09:69:a1:49:6c:91:f2:3b:d0:7a:5d:
                    69:78:0c:05:17:95:7e:fb:31:9c:0a:f1:4d:e5:7a:
                    2f:5e:70:d6:cc:00:1c:84:73:6b:3d:17:c1:c7:25:
                    7f:2e:42:0f:8e:fa:74:5d:e1:24:3a:ba:fa:7f:99:
                    31:41:52:f6:65:30:6e:91:14:01:2b:15:16:f8:fd:
                    1a:d2:26:80:13:2d:7c:1e:a5:74:75:b4:0c:25:69:
                    71:ed:ac:2f:9b:da:46:73:b2:b9:2c:8f:8a:16:52:
                    c8:7d:98:69:0b:e6:77:ef:41:b0:fa:ad:dd:ec:56:
                    8e:e7:41:76:1e:6a:6e:a4:c6:55:14:bb:2a:28:e9:
                    06:78:ab:56:c1:32:0f:5e:e7:61:25:13:1a:03:94:
                    4d:18:b3:68:f3:33:bf:48:88:ae:19:6f:3f:49:51:
                    09:21:9f:56:60:95:df:a1:f0:a3:e3:5c:09:6e:b2:
                    d2:b1:26:e6:cb:c1:88:5e:fe:a8:6c:bf:54:09:b8:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:64:F7:09:32:DA:24:9F:16:6D:4D:8A:C9:E3:13:99:E0:D7:E3
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/cCxk9wky2iSfFm1NisnjE5ng1-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d040:1::-2a13:d040:2:ffff:ffff:ffff:ffff:ffff
                  2a13:d040:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:66:c2:8e:fc:c8:78:b3:62:88:9c:83:b4:79:ae:96:83:1e:
         59:30:8a:7d:60:62:04:61:0c:56:c4:b3:3d:7d:b1:46:e5:74:
         8a:a6:6d:85:97:1a:61:35:61:f6:42:c5:f9:9a:ac:37:e1:44:
         62:d1:e8:b0:d2:ca:94:36:d5:b0:76:29:4e:96:a9:30:e4:9d:
         dc:6a:0d:af:d1:86:79:71:48:a9:1b:b5:d3:0b:aa:82:5f:66:
         83:17:4c:c9:4d:8b:89:40:f8:e6:d0:a4:a2:5d:48:a0:ec:e8:
         59:15:17:a4:3f:0f:a2:31:99:14:64:3e:a7:aa:4b:d9:16:89:
         d4:1c:59:ed:f2:46:ab:f8:70:37:26:07:cd:63:66:4d:c6:f9:
         01:2e:a2:25:3b:ab:24:c9:c1:79:08:84:40:88:c2:39:a5:04:
         05:98:48:0e:d1:c4:c9:ad:c3:4b:41:12:ee:0f:42:ad:4f:fc:
         df:2d:8e:d5:e7:4d:91:16:c0:07:21:93:c1:6b:fb:0a:b0:97:
         ef:df:8f:78:da:24:ba:7d:bd:33:df:83:6d:58:2d:be:43:b0:
         11:d6:c2:50:57:75:10:76:a7:5e:61:09:b8:7d:cb:d4:8e:3e:
         35:d7:fb:f4:e2:f0:96:63:f5:e5:a4:db:f1:c6:cf:d4:b2:20:
         99:95:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----