Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/accldvEEe_nhQrMAzQKvYPNVaXA.roa
File:                     accldvEEe_nhQrMAzQKvYPNVaXA.roa (raw, json)
Hash identifier:          YkrYGCYspjOzXO0og6OOKwsuQBRcKqIAEe6yX1fwrAE=
Subject key identifier:   69:C7:25:76:F1:04:7B:F9:E1:42:B3:00:CD:02:AF:60:F3:55:69:70
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01904F1F614D4909DC55C1FBD969C871EDDE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/accldvEEe_nhQrMAzQKvYPNVaXA.roa
Signing time:             Tue 25 Jun 2024 11:19:34 +0000
ROA not before:           Tue 25 Jun 2024 11:19:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202931
IP address blocks:        2a13:8380::/32 maxlen: 48
                          2a13:8381::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 25 Jun 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:1f:61:4d:49:09:dc:55:c1:fb:d9:69:c8:71:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 25 11:19:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=69c72576f1047bf9e142b300cd02af60f3556970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:28:61:56:70:b1:bc:5b:19:9b:42:df:e8:
                    ec:11:cc:01:68:0f:ed:82:28:f1:99:c2:61:ff:90:
                    b0:48:93:d2:9c:e6:02:83:56:4e:7f:74:7e:66:05:
                    aa:7b:41:f3:35:5b:3c:cc:85:c8:28:e7:c5:d1:c5:
                    84:a6:e3:63:e0:77:9b:3c:63:f7:aa:d6:1e:90:e1:
                    af:19:79:28:1d:7d:fb:e5:f6:4e:5f:4c:28:ee:24:
                    79:0f:f6:69:de:97:69:4f:94:a0:7f:3b:a7:7d:b9:
                    63:3d:18:cc:af:53:4b:d2:24:dc:17:61:9a:84:4b:
                    b6:b0:e6:b5:33:d4:66:99:68:c4:b6:5e:ed:87:d6:
                    c9:75:c0:ae:6f:8c:59:5b:4c:c7:c8:f8:06:3d:f7:
                    64:fd:ac:20:d3:e0:d2:a4:0c:32:77:ea:b0:8c:9e:
                    7e:9a:ee:38:16:42:49:2f:b5:d5:de:03:1a:2a:65:
                    a1:fb:2c:ff:26:59:a9:50:06:34:f6:4b:20:28:c9:
                    d3:e1:a9:d1:eb:cd:8d:fc:48:49:8c:bb:fe:94:5e:
                    47:3a:1d:3c:29:e7:bb:69:9a:0e:3c:bb:0e:e8:4a:
                    a1:bf:ac:63:92:30:fa:16:c0:0f:41:5c:d6:04:72:
                    43:fe:fc:c6:01:40:68:5c:33:6a:eb:73:14:91:e6:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:25:76:F1:04:7B:F9:E1:42:B3:00:CD:02:AF:60:F3:55:69:70
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/accldvEEe_nhQrMAzQKvYPNVaXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:8380::/31

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:ef:5e:34:b0:c1:2f:28:1b:71:99:c5:8a:3f:fd:e1:58:
         dc:94:b1:96:5c:a2:80:75:b1:49:e5:51:ea:70:da:de:f3:5a:
         39:2b:82:4d:f5:40:bf:f0:6d:bf:ad:88:1f:6b:db:40:e5:21:
         a1:af:e9:c6:a9:5c:4c:bd:98:ab:93:d7:39:85:a0:28:97:e4:
         c8:ee:8a:99:f1:22:3b:3b:3d:62:66:10:19:73:73:70:48:13:
         32:1d:99:1a:fa:d4:76:06:af:84:88:57:f8:8f:83:d5:fc:26:
         18:a8:fd:0a:83:1b:55:37:c5:e3:5f:31:6a:3f:c8:f1:22:90:
         34:e6:d2:7f:ec:38:47:dd:a6:6b:17:41:53:ad:c5:50:08:e1:
         d6:e9:7f:f4:20:32:a7:c5:a1:d1:a1:8b:f6:74:c3:88:83:76:
         ad:10:4d:ca:d2:f9:9a:31:f6:cb:20:bc:d6:ca:93:73:74:18:
         b3:ea:35:a9:54:b0:86:08:2b:24:98:bd:f5:0c:d2:23:e4:98:
         c0:5a:b5:18:f7:16:a3:f5:da:26:01:40:fc:b7:f1:be:f1:7c:
         36:1b:93:c4:7e:8d:8c:15:54:16:1b:a5:2e:43:48:b3:9a:6a:
         33:34:3b:f7:da:12:a1:b1:66:c2:26:05:47:4f:a7:3f:d1:6c:
         e4:cf:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----