Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uI_eGDoDVGoRBVvt2p1TnBLVaeg.roa
File:                     uI_eGDoDVGoRBVvt2p1TnBLVaeg.roa (raw, json)
Hash identifier:          EJDwDYbJwPMGfJoc+88HxzZ60M9LG1/DnbiNbcbBHgQ=
Subject key identifier:   B8:8F:DE:18:3A:03:54:6A:11:05:5B:ED:DA:9D:53:9C:12:D5:69:E8
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       018A751D0B8FD3DCCF300AF5B51B246D30EC
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uI_eGDoDVGoRBVvt2p1TnBLVaeg.roa
Signing time:             Fri 08 Sep 2023 14:05:52 +0000
ROA not before:           Fri 08 Sep 2023 14:05:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202525
IP address blocks:        2a13:d040::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:75:1d:0b:8f:d3:dc:cf:30:0a:f5:b5:1b:24:6d:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Sep  8 14:05:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b88fde183a03546a11055bedda9d539c12d569e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:3f:72:99:e0:6a:6b:ee:ef:03:01:f9:9b:
                    44:83:42:d5:2d:58:a7:e1:c7:04:65:fd:94:03:94:
                    33:b2:87:64:fc:c8:cd:0e:a0:dc:f5:83:9f:60:a6:
                    cf:a4:65:89:bf:b2:0e:a8:2b:8f:e7:b8:c2:5f:b0:
                    4e:37:3a:19:72:78:91:02:5f:5c:69:50:5b:f9:85:
                    de:fe:df:da:47:95:a2:ce:d5:80:fd:76:50:00:78:
                    5b:88:51:3e:7c:74:5b:f3:ef:b8:e6:b4:fd:a2:6e:
                    19:de:e9:b7:5f:d8:63:a4:c8:42:2f:b6:14:c6:5e:
                    29:21:71:af:cc:3d:17:7f:93:49:2f:09:1c:8a:07:
                    f3:9f:06:2b:72:fb:34:b3:0c:5c:12:f1:d1:92:de:
                    a3:11:08:35:03:4c:4d:46:40:3e:10:d4:15:51:c1:
                    d4:7a:29:0a:57:1c:38:8d:fb:a1:06:82:0f:46:22:
                    4d:d5:67:17:e0:2d:91:ea:40:ed:3a:42:af:4e:db:
                    4e:4f:e9:25:c4:7a:28:c1:6c:e2:5d:71:ab:39:8f:
                    b6:68:2b:d3:fd:64:c6:0d:41:f1:fb:a9:3c:dd:e3:
                    36:7b:21:43:10:86:88:3c:db:8e:64:ec:37:52:b2:
                    5b:15:4f:40:ba:7c:9e:cb:4e:09:42:43:87:10:fc:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8F:DE:18:3A:03:54:6A:11:05:5B:ED:DA:9D:53:9C:12:D5:69:E8
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/uI_eGDoDVGoRBVvt2p1TnBLVaeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d040::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:df:c7:36:9c:a8:48:78:cf:34:9f:71:83:d9:f7:f1:b3:
         40:67:5a:68:0a:c0:dd:16:df:c3:00:d3:68:3e:a3:05:cc:bc:
         a7:ad:b2:23:eb:bc:5f:40:11:1f:50:89:94:b0:3e:80:bd:97:
         68:dc:12:ea:b4:50:ac:7e:1b:b4:29:b3:e1:8e:df:cb:67:99:
         bd:25:64:2f:5a:0b:c2:9a:16:f7:d4:bb:e3:34:f9:d4:8b:a7:
         36:73:68:b1:a7:50:4a:87:4e:1f:8e:c6:a0:42:c5:33:9d:33:
         42:0d:d8:d1:38:a9:71:e4:69:0d:26:9e:47:a4:70:8a:17:14:
         cd:a1:ea:60:6b:d0:69:76:a4:15:e7:37:2c:ac:25:31:e8:ae:
         9c:b6:85:bf:f8:fe:22:e8:ef:a8:da:de:88:2f:68:e3:fd:22:
         86:c4:f8:e4:a8:9f:04:c9:78:9e:ba:3e:73:96:d4:0d:17:6a:
         ea:88:60:82:74:0c:b9:9b:3b:25:a6:3d:08:d8:02:b5:f6:37:
         67:bd:8d:19:4c:77:50:d0:14:f4:24:84:5b:6b:9c:45:c8:42:
         65:32:44:97:70:9a:9f:de:99:c9:18:63:9f:07:3b:8c:c7:ee:
         3a:24:be:e2:ca:0f:b1:aa:a3:f2:68:ee:de:cc:c5:42:7f:02:
         7b:af:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----