Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/uS-0p2K3EkkJe5-2eitBVgm-McQ.roa
File:                     uS-0p2K3EkkJe5-2eitBVgm-McQ.roa (raw, json)
Hash identifier:          HJMThdBE5Vl8bKprhECnk/EkTRO1F1SB8vFw1fHR5Vk=
Subject key identifier:   B9:2F:B4:A7:62:B7:12:49:09:7B:9F:B6:7A:2B:41:56:09:BE:31:C4
Certificate issuer:       /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial:       018A9A8916D637AEF65F2EC209E4F7C3EE14
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/uS-0p2K3EkkJe5-2eitBVgm-McQ.roa
Signing time:             Fri 15 Sep 2023 20:29:50 +0000
ROA not before:           Fri 15 Sep 2023 20:29:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202163
IP address blocks:        185.51.13.0/24 maxlen: 24
                          185.51.14.0/24 maxlen: 24
                          185.51.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:89:16:d6:37:ae:f6:5f:2e:c2:09:e4:f7:c3:ee:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
        Validity
            Not Before: Sep 15 20:29:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b92fb4a762b71249097b9fb67a2b415609be31c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:26:eb:13:81:4d:c8:8b:34:5a:2b:54:9d:
                    4e:93:5f:b2:50:70:3b:c6:7f:bc:3a:de:4a:06:f5:
                    f8:8d:6b:29:fd:50:60:96:b1:ff:b4:33:30:f0:a5:
                    11:b0:03:35:08:5c:3d:1b:7c:0f:56:28:17:6a:19:
                    ab:bc:36:19:d6:52:11:29:c9:68:e2:19:9d:3f:ad:
                    8c:d5:9d:6d:24:8b:4c:52:b0:75:64:0c:de:a7:4d:
                    c4:99:bc:9e:4f:4a:68:bb:88:d5:ff:0d:07:01:f3:
                    d9:1f:ec:27:3d:62:10:0a:a8:4b:5e:25:60:fb:90:
                    8c:e6:fe:68:25:f3:d5:cc:1f:f7:6d:fd:e3:d2:73:
                    e7:bc:f5:92:b6:fc:cd:87:d9:37:7e:85:51:6d:1f:
                    10:1f:88:d1:64:5e:31:d8:8c:9a:95:2c:0e:9e:8d:
                    0f:e3:48:78:c7:ea:de:ca:0a:2e:be:c8:ae:1f:cf:
                    cd:17:db:e6:02:7f:a6:41:6d:25:79:de:de:5b:30:
                    b7:11:19:10:66:32:0a:a9:22:4e:db:79:54:dd:02:
                    99:16:f1:08:d8:3a:b9:66:10:4a:90:08:d4:d4:09:
                    98:f9:5b:3e:e1:ce:19:75:fe:90:dc:25:d8:c9:ef:
                    85:d6:fb:0e:dc:61:48:72:0b:06:f2:ef:b0:87:7e:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2F:B4:A7:62:B7:12:49:09:7B:9F:B6:7A:2B:41:56:09:BE:31:C4
            X509v3 Authority Key Identifier:
                keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/uS-0p2K3EkkJe5-2eitBVgm-McQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.13.0-185.51.15.255

    Signature Algorithm: sha256WithRSAEncryption
         89:db:a9:03:b7:c4:b6:a4:94:86:e0:d0:d4:78:b2:28:8e:26:
         98:4c:bb:26:dd:7d:21:d0:f9:ae:39:d3:1f:d8:83:d6:e7:cb:
         14:99:4e:4f:59:7f:15:45:98:69:37:da:7e:ef:59:4c:09:9c:
         14:4e:68:88:c4:13:46:5f:f2:8e:56:fe:43:cc:95:9e:a3:72:
         a4:dc:9f:3e:b2:54:27:68:05:46:4f:49:1e:a1:3f:41:75:74:
         ba:3e:33:89:42:f4:e0:ab:f5:98:ed:8d:47:0d:b5:fc:c8:76:
         ec:1e:87:82:b4:17:c4:66:70:40:5f:43:06:b2:81:78:f8:c3:
         41:47:9e:77:53:13:fb:6c:fb:15:c6:53:e7:d3:be:09:09:2e:
         32:d2:13:ca:7a:0e:7e:a1:f7:d7:d3:2c:57:f5:f3:c2:9d:d3:
         bb:bf:ab:b0:f3:56:da:6a:b9:01:e3:64:98:b4:d9:a1:df:8b:
         f9:0b:7a:86:b8:35:83:aa:a9:4c:b8:7b:ca:90:a7:00:5c:2f:
         e1:7a:71:36:e9:7b:64:85:5f:bc:3f:e3:44:11:b9:b0:f6:ea:
         be:2d:89:63:0c:f3:a4:fd:18:1b:c7:c1:d0:34:f3:9d:d8:de:
         9e:92:10:b3:4a:9b:a1:dc:82:23:ee:a1:bf:3e:9e:ef:41:a5:
         8c:f2:31:fa
-----BEGIN CERTIFICATE-----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