Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/NFpPtWcfJSjDGQVU9oOljHiNUyM.roa
File:                     NFpPtWcfJSjDGQVU9oOljHiNUyM.roa (raw, json)
Hash identifier:          9JnjojoF1wbwk/q2mlhukubCNpoRUSl/eEYbuagy8XU=
Subject key identifier:   34:5A:4F:B5:67:1F:25:28:C3:19:05:54:F6:83:A5:8C:78:8D:53:23
Certificate issuer:       /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial:       0189500068F1F75FA63C31F720FDF728731B
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/NFpPtWcfJSjDGQVU9oOljHiNUyM.roa
Signing time:             Thu 13 Jul 2023 16:05:51 +0000
ROA not before:           Thu 13 Jul 2023 16:05:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203416
IP address blocks:        2a13:c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:50:00:68:f1:f7:5f:a6:3c:31:f7:20:fd:f7:28:73:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
        Validity
            Not Before: Jul 13 16:05:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=345a4fb5671f2528c3190554f683a58c788d5323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bf:64:92:08:22:9c:00:be:ee:5b:17:e4:d6:
                    8f:8b:b0:0e:00:54:d3:11:db:4c:8b:f4:a2:c8:0c:
                    10:5c:86:e7:aa:6d:da:3a:db:72:af:4d:06:e3:42:
                    e7:d9:9f:1a:0f:25:bf:93:f8:64:01:c9:36:61:7a:
                    ae:50:44:f1:b0:5f:17:96:3e:e2:42:ce:c3:3a:d5:
                    9e:37:2b:6d:f5:8a:3d:f7:78:94:5c:cf:13:d1:89:
                    e8:2b:ee:5a:69:02:82:2d:b5:b4:6b:f8:a6:fe:29:
                    3d:10:2d:12:55:d9:db:e0:4d:2d:2c:d5:57:18:ab:
                    4f:52:61:2c:91:87:65:af:b5:dc:fa:20:20:6e:f9:
                    0e:cc:2a:71:a4:83:63:97:1d:a0:f8:d0:11:90:d5:
                    66:9e:f8:07:b1:d7:50:c9:a0:20:cb:aa:fa:da:49:
                    d3:79:e1:0d:be:a9:e0:40:f1:69:70:ed:6d:1b:5b:
                    73:d1:42:bd:6d:41:e7:1e:64:33:90:b0:16:6d:66:
                    24:ba:1e:a1:37:51:9d:b7:f3:f0:bf:c4:41:b3:ed:
                    c6:4f:61:41:d3:05:75:69:1d:95:c3:4f:fb:d9:3b:
                    24:83:d9:45:7b:9c:fc:f5:b2:e6:20:a1:dc:ec:60:
                    5d:04:7c:49:d5:7b:5c:a5:ac:1f:b2:c6:33:b2:73:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:4F:B5:67:1F:25:28:C3:19:05:54:F6:83:A5:8C:78:8D:53:23
            X509v3 Authority Key Identifier:
                keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/NFpPtWcfJSjDGQVU9oOljHiNUyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:38:28:6e:a6:95:ee:38:a7:ad:8f:c9:35:40:01:eb:e7:
         af:ce:89:18:b4:67:16:97:2d:59:b3:07:7f:72:b1:6a:17:ba:
         8d:69:72:d0:8a:ed:65:f0:16:e4:40:9d:00:73:7d:32:a3:06:
         fa:e9:df:a6:02:d0:14:1f:77:07:7b:26:63:93:6a:b0:4d:b4:
         d5:bf:a9:a8:c6:09:cf:30:7c:4b:40:9e:1c:2e:a9:8c:b7:55:
         b7:12:89:13:88:7b:51:e8:8e:d1:44:b0:df:c2:49:5c:71:52:
         16:3a:62:42:d5:7a:e2:d2:c7:ea:76:a4:67:a3:16:a4:f7:05:
         38:e6:8a:29:83:7e:c8:cd:2c:57:8a:b0:54:fd:e1:4c:1e:bf:
         26:4a:be:c1:1f:33:03:c3:a1:24:24:93:d6:31:df:b1:fa:b7:
         4b:b2:9d:ca:ae:d9:4c:41:94:c3:00:b8:78:3c:3e:93:d6:7f:
         bb:bb:42:fb:81:f4:3e:b1:fb:df:61:dc:c2:e2:6d:f4:10:6c:
         dc:53:83:6b:7a:26:2e:64:59:36:3f:07:ad:52:a0:59:73:5d:
         b2:2a:0f:2e:81:32:5e:00:97:15:0a:6b:e2:4d:7d:84:cb:d1:
         f8:f5:82:22:84:43:a5:af:e1:d8:13:0a:66:ee:33:d8:0d:c3:
         32:31:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----