Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa
File:                     FFEE5FNYgIn8xj56OzZJAOBuxrw.roa (raw, json)
Hash identifier:          9prBMG3Zt3gNBvvLN9tit8fbN3hfVYyW7H5HeHlni+8=
Subject key identifier:   14:51:04:E4:53:58:80:89:FC:C6:3E:7A:3B:36:49:00:E0:6E:C6:BC
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       018A93BCAC0649695C82B88C22784D009E3B
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa
Signing time:             Thu 14 Sep 2023 12:48:50 +0000
ROA not before:           Thu 14 Sep 2023 12:48:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198376
IP address blocks:        2a13:a5c6:6000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:93:bc:ac:06:49:69:5c:82:b8:8c:22:78:4d:00:9e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Sep 14 12:48:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=145104e453588089fcc63e7a3b364900e06ec6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:10:ff:09:f1:3f:05:55:2b:0f:18:d9:78:
                    84:93:6c:51:a7:a9:8b:17:5b:fd:33:c5:ee:6a:a1:
                    36:55:82:3c:44:0a:7d:12:d1:39:c0:f0:a8:54:c3:
                    ca:6b:6c:c6:22:ac:84:4a:61:aa:1a:54:07:a9:33:
                    0d:b4:1b:8b:81:2a:57:fb:18:4f:88:f8:27:4d:f0:
                    5e:90:da:db:ea:86:61:33:6b:bc:0a:1f:51:7d:74:
                    64:7c:48:bb:e0:8e:8f:2e:04:c2:ea:e8:45:30:ab:
                    77:1a:0a:97:41:ea:79:fd:a1:3f:45:11:3f:d9:d9:
                    a2:bf:f3:a2:cc:1b:e1:92:16:12:41:33:f0:80:50:
                    47:ef:f0:d4:1a:4e:ae:27:6c:ed:57:2a:eb:c0:11:
                    99:a8:52:0e:ad:b1:ac:d6:96:7e:6d:3b:98:39:a3:
                    bb:08:e7:8d:f0:a1:3f:de:22:06:ee:db:5c:b7:56:
                    9a:31:e8:3c:84:a6:9e:d6:8c:47:ed:18:92:78:c2:
                    d7:ba:8a:34:a4:79:c9:f5:db:9b:a0:4b:53:4a:8d:
                    bf:18:9d:f7:d7:40:33:1d:ff:9b:91:b6:39:52:c0:
                    0f:e4:f8:65:91:22:38:7e:c6:db:8e:fe:97:bb:99:
                    64:62:d3:32:47:31:e1:93:dd:51:16:8f:d7:ec:fb:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:04:E4:53:58:80:89:FC:C6:3E:7A:3B:36:49:00:E0:6E:C6:BC
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a5c6:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:a8:07:90:22:86:b2:f4:c8:9f:ab:e4:d7:7b:a2:f2:c0:
         d0:ad:4a:11:98:b1:d5:f8:2e:03:a5:6d:6c:fe:9b:55:49:13:
         32:db:74:09:7f:25:6b:c7:ca:14:f6:08:9b:3a:e9:54:1b:32:
         3f:f1:ca:0a:0d:35:40:7b:5e:08:48:ca:3e:2d:4e:d3:05:28:
         bd:0b:e8:42:d2:03:d5:23:a4:b2:78:c1:30:36:c7:7c:46:25:
         fd:6b:da:2f:3e:f6:02:6a:e2:53:70:a5:ec:5f:66:79:3d:b9:
         d4:22:5e:6f:99:7e:ac:ff:29:a1:5e:7e:fa:a0:30:cb:00:30:
         ae:3b:1a:69:7e:2e:6c:7f:6a:88:15:e4:e0:95:aa:66:8c:61:
         05:96:87:44:07:61:07:d5:36:fa:f6:94:68:5d:10:cb:3a:63:
         59:24:77:3f:8f:e5:1e:fb:2d:0e:57:fa:8d:b1:6b:4d:1a:6b:
         4c:54:f4:e5:a5:78:9f:ba:98:93:d4:75:fa:46:63:ae:a5:d9:
         91:ac:72:eb:bc:9d:90:71:35:f9:d2:7e:ce:dd:d2:ec:bb:14:
         c6:d6:61:c4:65:c3:2d:b8:0b:29:1e:e1:8b:6e:07:d3:ba:a6:
         0d:57:24:fe:c9:c0:e6:ec:a6:38:4e:cb:e3:ed:7f:99:12:ad:
         09:65:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----