Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa
File:                     q11xOm0KIHX1UgJJO2xE_bZAXcA.roa (raw, json)
Hash identifier:          Js/g54HEVZ+EmmDXA3mX1Jbu8vnszJPGTkqPTD9P+Hs=
Subject key identifier:   AB:5D:71:3A:6D:0A:20:75:F5:52:02:49:3B:6C:44:FD:B6:40:5D:C0
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       0189FEA3F2FDDC95C0850B9108DAE960EB9A
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa
Signing time:             Wed 16 Aug 2023 13:58:24 +0000
ROA not before:           Wed 16 Aug 2023 13:58:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203496
IP address blocks:        2a13:a207:fff0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fe:a3:f2:fd:dc:95:c0:85:0b:91:08:da:e9:60:eb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Aug 16 13:58:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab5d713a6d0a2075f55202493b6c44fdb6405dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:09:49:5d:77:3a:42:8c:fd:5b:e8:9d:f2:
                    b6:b4:03:6f:7f:30:d4:0c:28:47:29:8f:e3:2b:e9:
                    2e:3e:fe:20:49:46:88:33:54:b3:16:56:61:fc:eb:
                    54:e8:cd:37:7e:15:71:3a:ef:e7:9b:bd:7f:11:da:
                    ef:81:08:3a:a2:30:9f:01:46:c6:f0:4d:38:6f:e5:
                    bc:a6:a9:ce:95:ef:4f:63:24:20:2b:de:2f:9f:4a:
                    2a:42:22:77:fc:aa:39:5c:68:31:c1:f5:9d:99:7c:
                    f1:fd:37:80:92:19:59:3e:94:5a:17:f6:14:29:9f:
                    87:bf:98:c3:ad:9f:ad:9d:4a:f3:46:94:81:b4:9e:
                    f9:62:17:2e:36:38:95:6d:2a:18:7b:f8:e9:10:5a:
                    a5:4e:10:91:4d:a3:2f:df:ba:ab:19:3e:00:ca:3e:
                    0e:a9:cc:fe:fc:bc:eb:f8:52:f0:4d:d2:f8:cd:c9:
                    5f:02:34:9c:ae:e8:70:4a:be:c4:29:a0:26:19:a8:
                    32:8f:6d:59:c4:2a:fa:85:ce:89:5c:b0:6c:08:44:
                    43:03:1c:bd:7f:b7:c7:19:76:0a:cf:8f:c7:dd:59:
                    e9:01:5e:ca:d9:7e:c6:98:fe:ae:91:1d:78:b7:0a:
                    fb:73:0f:ec:97:d8:7b:a6:74:87:e9:b7:7a:a8:63:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5D:71:3A:6D:0A:20:75:F5:52:02:49:3B:6C:44:FD:B6:40:5D:C0
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a207:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:80:79:3d:5e:70:10:b8:22:bc:99:57:b8:67:ea:90:31:
         11:c3:2f:79:bd:2e:01:f4:89:fb:4c:f6:5f:13:86:39:64:a8:
         38:26:ba:9e:5d:24:0e:c2:b9:d0:f4:42:5e:f4:8c:11:29:9b:
         17:ab:fb:65:65:51:af:14:8a:c0:28:70:01:b8:95:8d:f5:31:
         7b:66:6b:c5:73:96:2c:3b:59:81:8e:58:85:e3:65:bc:f8:18:
         d6:35:e2:e4:0f:03:bb:a7:33:4b:7b:c4:c0:7b:d0:0f:c4:e0:
         f3:89:36:9c:6b:2a:c5:1b:08:20:c7:6a:2f:37:5f:f8:09:53:
         c6:20:9d:17:25:f0:00:95:3f:31:b0:d1:a2:79:1b:94:ed:3b:
         3a:b2:9c:77:59:67:28:3c:f2:3e:96:14:00:d1:78:6a:fd:70:
         5c:51:4f:76:72:97:31:e0:5f:00:38:5d:ff:73:30:26:f7:12:
         82:27:84:86:b2:77:93:24:83:4f:01:91:13:c9:12:b7:53:2c:
         66:60:51:b3:a7:dd:4b:df:b2:ae:65:17:07:38:cf:96:e7:14:
         08:7c:6b:db:9b:d5:32:1c:61:e2:bb:79:e2:f9:bc:9d:36:b4:
         a4:a0:b6:73:a8:ec:d8:5e:9a:24:8a:f0:0c:5a:f0:6a:1c:b9:
         c1:cd:a9:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYn+o/L93JXAhQuRCNrpYOuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjMwODE2MTM1ODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjVkNzEzYTZkMGEyMDc1ZjU1MjAyNDkzYjZjNDRmZGI2NDA1ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRsJSV13OkKM/VvonfK2tANvfzDU
DChHKY/jK+kuPv4gSUaIM1SzFlZh/OtU6M03fhVxOu/nm71/EdrvgQg6ojCfAUbG
8E04b+W8pqnOle9PYyQgK94vn0oqQiJ3/Ko5XGgxwfWdmXzx/TeAkhlZPpRaF/YU
KZ+Hv5jDrZ+tnUrzRpSBtJ75YhcuNjiVbSoYe/jpEFqlThCRTaMv37qrGT4Ayj4O
qcz+/Lzr+FLwTdL4zclfAjScruhwSr7EKaAmGagyj21ZxCr6hc6JXLBsCERDAxy9
f7fHGXYKz4/H3VnpAV7K2X7GmP6ukR14twr7cw/sl9h7pnSH6bd6qGNzawIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKtdcTptCiB19VICSTtsRP22QF3AMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvcTExeE9tMEtJSFgxVWdKSk8yeEVfYlpBWGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOiB//w
MA0GCSqGSIb3DQEBCwUAA4IBAQBOIYB5PV5wELgivJlXuGfqkDERwy95vS4B9In7
TPZfE4Y5ZKg4JrqeXSQOwrnQ9EJe9IwRKZsXq/tlZVGvFIrAKHABuJWN9TF7ZmvF
c5YsO1mBjliF42W8+BjWNeLkDwO7pzNLe8TAe9APxODziTacayrFGwggx2ovN1/4
CVPGIJ0XJfAAlT8xsNGieRuU7Ts6spx3WWcoPPI+lhQA0Xhq/XBcUU92cpcx4F8A
OF3/czAm9xKCJ4SGsneTJINPAZETyRK3UyxmYFGzp91L37KuZRcHOM+W5xQIfGvb
m9UyHGHiu3ni+bydNrSkoLZzqOzYXpokivAMWvBqHLnBzanF
-----END CERTIFICATE-----