Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Edwx7431JD5vw61BvJwc2HY4ahY.roa
File:                     Edwx7431JD5vw61BvJwc2HY4ahY.roa (raw, json)
Hash identifier:          ympUH+jqP3pDCvCtpNWVgOkVkT7I38ErlLWonE4BZKg=
Subject key identifier:   11:DC:31:EF:8D:F5:24:3E:6F:C3:AD:41:BC:9C:1C:D8:76:38:6A:16
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       0186F4D2482666B5D7337BE35C2F2F975AB8
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Edwx7431JD5vw61BvJwc2HY4ahY.roa
Signing time:             Sat 18 Mar 2023 13:04:27 +0000
ROA not before:           Sat 18 Mar 2023 13:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199467
IP address blocks:        2a13:b487:1800::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f4:d2:48:26:66:b5:d7:33:7b:e3:5c:2f:2f:97:5a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Mar 18 13:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11dc31ef8df5243e6fc3ad41bc9c1cd876386a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:08:41:de:7b:3e:ca:2f:88:18:2e:06:64:
                    9a:6c:b0:b2:19:a6:c9:e1:44:ab:bd:73:74:25:78:
                    ea:52:2a:66:1e:e3:e4:85:4c:e9:bd:ff:c0:8f:d4:
                    f8:fd:81:81:0e:ed:29:81:72:f6:a3:93:28:62:d5:
                    b1:ce:3c:4a:ce:c0:ff:de:df:23:c4:db:fe:08:4d:
                    f2:ba:f0:a1:8a:e4:e5:93:1a:ea:28:9f:b8:d9:f0:
                    01:7e:9d:b6:da:c7:29:2e:c4:10:9e:a1:59:fd:f0:
                    c7:25:26:87:11:60:64:ab:44:d9:dc:15:fd:3c:81:
                    0c:b3:10:15:a1:b9:48:22:e6:ae:bf:10:1f:9f:3b:
                    7f:b9:80:cd:12:2d:c8:4d:d5:e2:67:64:fe:be:bd:
                    49:a1:2b:72:a8:97:69:b0:72:84:49:9c:40:d6:1a:
                    73:23:c5:2a:64:b6:b1:ce:9b:e7:3b:a1:1a:4e:0e:
                    8d:2a:ab:55:7b:da:64:e0:81:c3:ae:04:e4:a9:73:
                    4c:bb:fa:54:de:b3:ea:48:8e:71:e0:cf:3c:b7:83:
                    42:36:14:5c:14:d1:d2:20:25:7e:26:39:7c:77:df:
                    92:f4:7c:c8:e3:ba:b1:11:2e:a1:7a:18:fd:c0:e0:
                    32:20:63:db:c8:ab:68:e0:62:da:65:53:ff:a7:0b:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DC:31:EF:8D:F5:24:3E:6F:C3:AD:41:BC:9C:1C:D8:76:38:6A:16
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Edwx7431JD5vw61BvJwc2HY4ahY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b487:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:98:12:55:bc:33:15:c9:4f:c1:e3:02:e7:61:9a:c6:88:
         56:de:e3:3a:65:93:fd:95:63:83:f5:bd:64:44:eb:72:b2:df:
         8b:aa:b9:ec:5c:0c:df:d0:0c:6b:f7:2f:27:07:7b:55:b6:7f:
         5c:68:bd:66:b9:f2:a2:7e:f1:dd:26:cd:5e:6a:98:da:30:c1:
         63:b5:a6:c2:79:2e:24:10:64:16:56:5c:49:3e:38:19:0a:db:
         4d:bc:c5:8b:8b:2a:30:20:78:fe:8e:8c:5a:86:ec:d7:63:4f:
         c3:3c:e6:06:71:0f:2f:1b:c9:58:8e:49:6c:57:2a:f0:18:6e:
         a3:64:36:53:8d:b2:46:f5:79:7d:63:8c:90:9f:a4:3e:93:4a:
         83:15:c3:47:54:cb:bc:88:99:bb:bd:2c:26:3d:ea:02:e0:dd:
         9e:6d:1d:c9:e3:f2:0d:6b:ed:db:0a:d4:fe:8c:9f:9a:c2:84:
         7b:32:e1:59:08:06:9c:ee:ac:8c:0f:9b:5a:2e:9f:2d:0e:d2:
         3e:fd:f8:d6:4f:19:25:39:90:58:98:38:77:2b:3e:87:59:2b:
         fd:63:cc:49:f5:6a:de:79:13:da:00:0a:77:b2:83:d8:af:14:
         f2:64:67:bf:c1:dd:bf:00:6b:c7:2b:ba:5f:b4:2f:1b:62:b6:
         ae:5c:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----