Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/uJnvFuVvwA9I_DeBzx-5vN7euH0.roa
File:                     uJnvFuVvwA9I_DeBzx-5vN7euH0.roa (raw, json)
Hash identifier:          buLuMUEkK6+2D6+fJx+05RsZK7zc30NxPuUyVCx8qSw=
Subject key identifier:   B8:99:EF:16:E5:6F:C0:0F:48:FC:37:81:CF:1F:B9:BC:DE:DE:B8:7D
Certificate issuer:       /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial:       018B280BAD044556DB2EB14A1366E3F332F7
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/uJnvFuVvwA9I_DeBzx-5vN7euH0.roa
Signing time:             Fri 13 Oct 2023 07:58:55 +0000
ROA not before:           Fri 13 Oct 2023 07:58:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216333
IP address blocks:        2a13:d6c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:28:0b:ad:04:45:56:db:2e:b1:4a:13:66:e3:f3:32:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
        Validity
            Not Before: Oct 13 07:58:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b899ef16e56fc00f48fc3781cf1fb9bcdedeb87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:22:81:94:b0:fc:cf:ee:39:e6:66:ff:5a:
                    19:45:3e:ca:17:f4:b7:45:fc:fa:c3:a3:7e:38:b8:
                    9b:05:8d:07:88:cd:86:22:fe:ab:b7:01:ce:34:e3:
                    01:63:97:d0:cf:95:a4:16:2e:6e:d2:59:2d:3a:d5:
                    30:91:dc:b4:c0:64:75:a9:58:f9:2d:16:db:0c:49:
                    65:0b:0c:b4:ea:e4:21:42:8b:32:17:a5:cd:49:a5:
                    cd:24:dc:42:28:a8:1a:14:ff:08:ed:3a:11:e2:3e:
                    5a:c0:b3:74:e9:31:9a:75:bb:7a:c0:ae:93:1f:68:
                    ad:b3:b8:61:45:71:3b:4c:e7:3b:34:06:76:40:00:
                    c9:e6:d5:34:41:08:98:86:1d:22:3f:de:22:57:49:
                    45:5f:a8:bf:19:7f:d1:12:1e:d9:9a:f9:7f:94:68:
                    3d:c5:01:9c:34:42:53:69:82:a2:e8:80:30:10:3d:
                    66:44:02:18:94:2f:8e:a5:5b:dc:b7:e8:95:31:7b:
                    7f:f5:95:ff:78:58:9e:c7:7b:cb:3d:ac:d1:86:66:
                    92:df:ee:97:18:c2:93:70:eb:9b:29:02:0e:b2:d3:
                    a4:71:89:99:0c:58:20:b8:54:7f:64:52:61:64:ee:
                    26:14:fa:b2:b7:38:ee:1b:b2:b8:6e:df:8c:19:40:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:EF:16:E5:6F:C0:0F:48:FC:37:81:CF:1F:B9:BC:DE:DE:B8:7D
            X509v3 Authority Key Identifier:
                keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/uJnvFuVvwA9I_DeBzx-5vN7euH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:df:db:43:0d:65:c3:7e:d7:bf:b6:f3:18:30:4e:cd:b7:
         37:65:d5:02:0a:57:2d:94:3f:54:eb:64:bf:c1:b7:42:7e:31:
         ed:8c:b4:27:fd:a4:e9:17:36:14:c0:cf:4e:56:fc:40:e3:77:
         2c:7e:86:29:51:ab:6a:e7:86:b5:23:b1:95:26:54:0c:eb:07:
         52:b0:cb:66:09:84:55:e7:36:cf:fa:aa:c3:a6:dd:ec:b4:2e:
         7f:ab:dc:bb:04:66:33:18:3c:62:f8:d5:5f:45:3f:e1:33:74:
         aa:9c:8c:92:11:cf:70:89:7c:95:3d:d0:3b:34:ec:be:05:43:
         51:cf:85:9b:64:17:2d:62:29:2b:d9:8f:27:8a:07:24:e3:59:
         f9:c0:69:0b:4e:7d:ba:e4:00:01:28:db:4d:e2:a1:87:cb:a6:
         61:34:66:68:28:72:10:a0:41:98:43:42:cb:64:55:3f:c0:91:
         58:a5:b4:11:3a:b1:63:21:23:c5:6d:e6:28:fb:d9:a2:d9:60:
         f0:c5:08:5c:df:e3:35:88:1a:f8:76:7d:42:0a:5a:1d:ca:7a:
         4f:01:c9:d5:f5:c1:c4:c6:37:e7:68:69:dd:e2:ae:01:fa:cd:
         cc:c0:ac:38:22:05:69:02:91:d6:1f:49:1b:f9:19:a3:00:66:
         46:94:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----