Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa
File:                     Bcv2wz733tiRIq21TSXKYyY0414.roa (raw, json)
Hash identifier:          duGbt6nOkcXcrg98WPL24120AXc5Fuxb5kAMT3RiHvA=
Subject key identifier:   05:CB:F6:C3:3E:F7:DE:D8:91:22:AD:B5:4D:25:CA:63:26:34:E3:5E
Certificate issuer:       /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial:       0187323A4CFB58F3920585D8823711BB14A8
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa
Signing time:             Thu 30 Mar 2023 11:14:54 +0000
ROA not before:           Thu 30 Mar 2023 11:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199637
IP address blocks:        2a13:e480::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:32:3a:4c:fb:58:f3:92:05:85:d8:82:37:11:bb:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
        Validity
            Not Before: Mar 30 11:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05cbf6c33ef7ded89122adb54d25ca632634e35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:f0:4d:dc:07:d6:3e:d7:50:f9:08:39:32:
                    44:28:a8:23:8c:59:12:f0:83:cd:d4:a9:d8:a5:f7:
                    48:75:e1:ff:be:34:9a:b4:8e:e6:40:3a:b2:3b:88:
                    c8:4e:ed:bb:cd:32:cf:e1:6f:68:3b:ad:eb:a0:b0:
                    d6:9a:59:cb:27:17:0b:45:64:d0:d9:5b:bf:ac:8c:
                    86:00:f0:1a:59:c1:4a:b2:b1:79:b5:0e:41:9f:0e:
                    76:01:01:c3:76:93:bc:f6:75:14:2f:53:59:5e:b1:
                    11:e7:9f:67:50:9a:67:68:bd:ee:2e:94:bd:6d:ea:
                    0a:11:90:34:f5:76:96:d0:55:64:0b:8b:f6:82:f4:
                    bb:3e:46:35:5d:15:06:51:7e:b5:df:b7:e5:91:d4:
                    8d:13:52:8d:07:cd:84:55:74:4a:de:bd:62:9c:b7:
                    93:7b:35:43:da:1e:ab:bd:b8:24:bd:48:f2:8d:6d:
                    f5:50:d5:b9:dc:60:f5:97:76:b6:3d:aa:bb:fa:76:
                    c6:72:b0:3e:c3:58:6b:80:82:d7:d8:54:a2:6c:fd:
                    43:8c:94:ef:93:06:01:5d:94:48:e0:c5:6c:9e:13:
                    68:68:ea:8f:9a:c9:f5:06:19:de:87:32:b4:a1:1d:
                    59:b2:d6:3e:66:eb:96:27:f7:cf:2a:4b:8f:09:63:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:F6:C3:3E:F7:DE:D8:91:22:AD:B5:4D:25:CA:63:26:34:E3:5E
            X509v3 Authority Key Identifier:
                keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/Bcv2wz733tiRIq21TSXKYyY0414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e480::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:05:d3:e4:dd:75:72:41:c1:fd:e8:1e:1c:b8:33:e8:59:ec:
         85:f0:ec:58:94:4b:8f:1c:cc:21:9b:32:75:01:96:89:a2:05:
         5b:13:dd:2c:85:96:4b:7a:6d:62:ad:06:64:d7:ee:09:da:6d:
         20:a7:76:b5:54:56:c4:1b:be:44:f2:0d:14:cd:f5:27:f2:70:
         67:0f:ce:96:82:7e:a3:c7:fd:07:da:02:04:f6:cf:f4:fe:98:
         6a:cf:d5:9a:f0:d3:2f:2b:89:ef:99:9a:10:e7:98:43:ed:92:
         82:1a:67:21:a4:dd:1a:92:a0:f9:bb:f3:bd:41:88:f4:b8:66:
         57:bc:a8:9c:e7:45:83:03:63:ef:17:55:0d:d5:3e:8e:47:09:
         9e:21:bd:ac:ea:76:7a:73:00:f4:ef:71:ec:68:38:80:bc:b2:
         c3:19:e8:60:88:2c:e9:e7:36:5f:34:33:fa:9e:33:82:29:7f:
         25:3b:95:25:23:6a:23:bb:ba:13:01:fb:a2:f4:20:d8:bc:4d:
         20:13:9e:ac:41:0e:ba:8c:80:b4:bd:36:96:f7:0b:36:f9:fc:
         ee:31:08:66:4e:96:87:7c:6a:e0:15:01:1c:e4:ba:c9:39:0b:
         7c:76:82:1c:51:de:60:a3:8c:9f:c6:52:aa:03:78:1c:d3:aa:
         32:8a:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----