Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/55msHPuAZM2Ct8jdyAnuNGmJb9A.roa
File:                     55msHPuAZM2Ct8jdyAnuNGmJb9A.roa (raw, json)
Hash identifier:          vaGr/M7PmwabF6VXGTqdxdLxA2HDqSzCE7rDLlRIwtQ=
Subject key identifier:   E7:99:AC:1C:FB:80:64:CD:82:B7:C8:DD:C8:09:EE:34:69:89:6F:D0
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       018B2F5DC2D1833866F38F82BD786546D2EA
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/55msHPuAZM2Ct8jdyAnuNGmJb9A.roa
Signing time:             Sat 14 Oct 2023 18:05:55 +0000
ROA not before:           Sat 14 Oct 2023 18:05:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199310
IP address blocks:        2a13:a5c3:f000::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:2f:5d:c2:d1:83:38:66:f3:8f:82:bd:78:65:46:d2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Oct 14 18:05:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e799ac1cfb8064cd82b7c8ddc809ee3469896fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:38:ba:ec:05:67:f9:69:11:f4:2d:38:d7:
                    4d:94:31:3d:6f:f5:9f:c6:7e:aa:b7:f5:58:dd:08:
                    5e:ab:0b:30:d2:aa:6f:2f:41:c2:f9:fb:76:91:d7:
                    71:85:60:fd:27:e2:7f:d7:24:e4:84:eb:ba:44:f0:
                    65:be:87:23:9a:63:82:69:3c:d6:83:62:b0:f6:fe:
                    36:0a:db:21:d1:a3:00:79:f2:93:c9:d1:6d:ba:aa:
                    3c:0d:38:bc:0f:e9:83:6d:29:3f:d0:00:df:b6:40:
                    fb:82:0d:84:f3:b1:c6:21:9e:f9:54:5f:f3:51:46:
                    fe:e2:26:83:4d:ce:fe:63:82:f8:10:b9:5c:00:83:
                    89:af:49:d6:6b:3e:6c:0b:72:5e:84:33:3e:6f:5b:
                    eb:07:81:21:5c:31:6d:54:6c:a9:48:3f:fe:34:0a:
                    b6:f5:de:3c:2a:f3:c1:12:1f:30:aa:3d:8d:91:8f:
                    d8:00:e5:f5:3b:17:af:f6:c0:1b:ee:e3:f1:a1:51:
                    c9:b0:3e:c7:a6:7a:02:4d:7f:6b:02:7f:56:26:bc:
                    b6:e8:0d:d5:51:af:58:75:9a:93:fb:c8:24:11:ae:
                    31:52:c5:c3:41:6b:83:8d:8c:82:34:52:d6:39:37:
                    99:e5:6d:ae:13:03:32:2d:0c:28:37:f6:70:94:cd:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:AC:1C:FB:80:64:CD:82:B7:C8:DD:C8:09:EE:34:69:89:6F:D0
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/55msHPuAZM2Ct8jdyAnuNGmJb9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a5c3:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:e8:f7:c0:70:81:94:66:7c:27:c1:58:b3:67:75:19:8a:
         76:b8:20:e1:b2:bf:93:e1:ff:1f:16:f2:e5:d7:95:18:0c:be:
         ef:16:2e:cb:bf:d8:65:40:2b:68:86:19:78:46:bb:a4:f6:9c:
         d5:5d:23:16:98:01:b1:b2:7a:d5:5d:a6:4e:ad:54:93:19:47:
         55:3c:89:6e:27:b4:f8:6b:44:24:51:ff:ff:b3:02:f2:21:cd:
         3b:fd:fc:02:bf:bc:a3:0d:1d:2b:e7:c7:99:4a:b0:5b:aa:83:
         89:c2:11:45:46:06:3f:f0:d7:79:02:ff:cf:c0:65:c9:c8:5f:
         aa:93:ee:75:57:44:70:c4:79:43:79:dd:04:bc:73:75:c8:fd:
         74:1d:e7:a8:3b:0a:d0:47:bd:a0:3c:a5:40:ab:b2:be:56:53:
         83:65:1a:32:c0:ac:e0:da:db:25:26:38:b4:b0:55:58:2d:65:
         09:d2:eb:42:cf:8b:04:45:7b:6f:bf:0b:b7:e0:5d:a6:67:ff:
         b1:00:5d:13:50:65:81:2c:33:76:66:46:64:16:c7:de:2d:4f:
         b6:62:18:77:62:da:3b:33:34:1e:2c:e3:e9:0d:96:86:10:c6:
         3c:51:df:dc:e6:aa:a1:8d:ee:82:68:b6:62:c5:ad:f9:f8:7e:
         eb:2f:c6:b6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYsvXcLRgzhm84+CvXhlRtLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjMxMDE0MTgwNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzk5YWMxY2ZiODA2NGNkODJiN2M4ZGRjODA5ZWUzNDY5ODk2ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox84uuwFZ/lpEfQtONdNlDE9b/Wf
xn6qt/VY3Qheqwsw0qpvL0HC+ft2kddxhWD9J+J/1yTkhOu6RPBlvocjmmOCaTzW
g2Kw9v42Ctsh0aMAefKTydFtuqo8DTi8D+mDbSk/0ADftkD7gg2E87HGIZ75VF/z
UUb+4iaDTc7+Y4L4ELlcAIOJr0nWaz5sC3JehDM+b1vrB4EhXDFtVGypSD/+NAq2
9d48KvPBEh8wqj2NkY/YAOX1Oxev9sAb7uPxoVHJsD7HpnoCTX9rAn9WJry26A3V
Ua9YdZqT+8gkEa4xUsXDQWuDjYyCNFLWOTeZ5W2uEwMyLQwoN/ZwlM2GPQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOeZrBz7gGTNgrfI3cgJ7jRpiW/QMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvNTVtc0hQdUFaTTJDdDhqZHlBbnVOR21KYjlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlw/Aw
DQYJKoZIhvcNAQELBQADggEBAAau6PfAcIGUZnwnwVizZ3UZina4IOGyv5Ph/x8W
8uXXlRgMvu8WLsu/2GVAK2iGGXhGu6T2nNVdIxaYAbGyetVdpk6tVJMZR1U8iW4n
tPhrRCRR//+zAvIhzTv9/AK/vKMNHSvnx5lKsFuqg4nCEUVGBj/w13kC/8/AZcnI
X6qT7nVXRHDEeUN53QS8c3XI/XQd56g7CtBHvaA8pUCrsr5WU4NlGjLArODa2yUm
OLSwVVgtZQnS60LPiwRFe2+/C7fgXaZn/7EAXRNQZYEsM3ZmRmQWx94tT7ZiGHdi
2jszNB4s4+kNloYQxjxR39zmqqGN7oJotmLFrfn4fusvxrY=
-----END CERTIFICATE-----