Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/8bETlLNFvgXFue6XiOQlCL1AeEg.roa
File:                     8bETlLNFvgXFue6XiOQlCL1AeEg.roa (raw, json)
Hash identifier:          895RX5aChU019lJ+cmtlycMccfUH7M1ZFa0SiLnInkY=
Subject key identifier:   F1:B1:13:94:B3:45:BE:05:C5:B9:EE:97:88:E4:25:08:BD:40:78:48
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       01897ACD117043CD4FDC4B192920EA707AAB
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/8bETlLNFvgXFue6XiOQlCL1AeEg.roa
Signing time:             Fri 21 Jul 2023 23:33:26 +0000
ROA not before:           Fri 21 Jul 2023 23:33:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197677
IP address blocks:        2a13:c0::/48 maxlen: 48
                          2a13:c0:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:7a:cd:11:70:43:cd:4f:dc:4b:19:29:20:ea:70:7a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Jul 21 23:33:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1b11394b345be05c5b9ee9788e42508bd407848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:18:47:89:f4:cd:25:72:35:72:ed:bc:3c:
                    c0:0d:96:52:53:0d:61:ec:84:cd:dd:38:fd:d5:f6:
                    28:74:0c:cb:81:18:e4:e5:e9:0c:e3:c6:65:d2:ef:
                    50:e1:e6:2d:7d:66:2b:d3:33:47:ec:7c:fa:08:ca:
                    6c:a9:37:4a:5c:70:f5:0f:7b:bf:1b:eb:27:b7:e3:
                    13:5e:66:f1:c6:de:96:4b:c8:66:08:b3:3d:c8:d1:
                    9c:bb:f7:0d:95:f4:2c:73:c1:5e:bb:b9:7e:a3:f6:
                    d5:cf:98:d8:74:16:89:3c:b5:5d:96:6e:ed:c7:50:
                    15:7e:72:9c:ef:45:03:47:2d:e6:cb:5f:22:b3:ee:
                    2d:92:50:89:81:17:0c:3b:73:21:e4:3c:d5:61:3a:
                    d3:aa:ab:84:6d:9e:84:f3:0d:df:34:a3:ae:91:38:
                    81:b2:79:55:b2:22:9f:a7:63:02:b6:ee:78:a2:54:
                    f4:ad:01:b4:8c:fb:88:76:1c:0d:44:51:e3:49:6e:
                    28:ca:b4:23:4b:bf:d3:fa:6d:4c:07:5a:72:eb:27:
                    c4:0e:db:0d:d0:1b:cc:f1:3d:e4:e3:24:e8:fe:1d:
                    97:06:a9:ad:00:d2:7c:61:88:77:a3:b5:16:0b:25:
                    12:a0:d4:5b:1d:4b:51:4e:ca:8e:19:18:6f:c7:98:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:13:94:B3:45:BE:05:C5:B9:EE:97:88:E4:25:08:BD:40:78:48
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/8bETlLNFvgXFue6XiOQlCL1AeEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c0::/48
                  2a13:c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:3e:dc:29:6e:af:9b:cd:c6:f3:74:99:23:eb:67:2f:e4:b9:
         b5:7b:91:68:89:86:c2:dd:56:d6:ba:10:2d:c4:f3:58:0a:65:
         68:7d:a7:a6:9d:dd:a1:6c:95:19:6e:0d:e5:53:d1:9d:1b:93:
         ab:76:3b:7e:97:c6:c8:f4:7e:af:b9:41:33:7c:39:00:43:64:
         62:e9:3f:f7:52:d2:48:b6:9f:1c:f4:cb:86:d7:dc:7e:73:67:
         05:e5:c2:56:ad:03:7b:ca:06:22:18:28:1f:7e:75:0c:43:04:
         6e:7e:39:dc:71:cc:c7:20:9e:55:79:ea:7a:8c:ad:dc:3d:d2:
         89:99:6d:26:bd:1f:50:a7:56:8b:12:44:53:29:99:6a:31:c6:
         4d:53:60:8e:24:31:64:54:ff:15:fe:0e:71:35:aa:84:47:68:
         fe:41:29:eb:c3:ab:9c:ee:fe:3b:6f:74:9f:64:01:ab:00:e5:
         d3:3e:23:88:ee:85:10:df:87:6c:ed:0e:77:57:2c:0d:e7:93:
         15:84:f9:b4:8d:4e:f9:29:4d:4e:38:38:c2:57:f1:d5:80:f6:
         23:77:84:4d:7a:d1:2c:9c:69:d8:ad:50:a4:68:1a:d7:df:f2:
         0b:e7:b0:6a:2b:13:fc:45:ff:32:7a:54:6d:f2:09:3f:95:ff:
         67:8d:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----