Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/s8hxn3PA2TYLCbYak4UN4kZIH3c.roa
File:                     s8hxn3PA2TYLCbYak4UN4kZIH3c.roa (raw, json)
Hash identifier:          Cz7QlQL7cnqYS76qfcn8+NVdq7DTuQ47b17ft28BGtc=
Subject key identifier:   B3:C8:71:9F:73:C0:D9:36:0B:09:B6:1A:93:85:0D:E2:46:48:1F:77
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       01856ED49B763165CDD229DA48FE77B0C616
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/s8hxn3PA2TYLCbYak4UN4kZIH3c.roa
Signing time:             Sun 01 Jan 2023 19:35:05 +0000
ROA not before:           Sun 01 Jan 2023 19:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:7f00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:9b:76:31:65:cd:d2:29:da:48:fe:77:b0:c6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: Jan  1 19:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b3c8719f73c0d9360b09b61a93850de246481f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:5c:e8:11:88:76:86:9c:0c:72:fd:07:95:
                    62:d9:78:68:62:1f:a6:0c:9b:ac:e2:35:21:07:94:
                    6b:76:06:0f:79:25:68:37:36:5d:94:e2:76:66:d0:
                    43:ec:b0:8c:e7:28:a6:53:38:54:55:2e:21:b1:af:
                    c3:28:0e:f9:57:13:3f:ce:05:85:e8:4f:b5:8e:92:
                    9a:6d:98:4f:e1:4e:9b:c4:f6:f9:1f:16:70:57:92:
                    1e:74:b1:89:a3:47:bc:fb:fd:5f:8b:f7:47:b7:f8:
                    66:f7:5a:d0:a7:a4:c9:ee:2c:ae:ea:70:23:71:af:
                    f6:d1:c1:15:1c:6e:16:01:ff:a0:13:5a:7b:bb:a8:
                    7d:46:2b:cd:21:dd:3c:9e:58:82:c2:2d:12:a5:78:
                    5b:45:ac:3c:fc:07:a6:55:cc:f2:6b:b9:7f:b0:0d:
                    27:1a:78:50:bc:06:c7:dd:52:46:38:b6:25:e8:fb:
                    9c:86:16:b5:ae:73:d8:48:e0:f7:be:91:d8:94:a5:
                    e1:ed:d5:ae:af:c6:7f:55:c5:dd:d3:73:08:06:1b:
                    21:63:54:de:12:b4:9b:10:7b:d8:dd:3b:86:3c:e0:
                    5f:1b:f6:19:80:af:72:d2:7f:37:71:99:1a:b8:6a:
                    15:e3:a8:ad:cb:ef:93:00:a2:76:3a:a4:40:e1:6e:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C8:71:9F:73:C0:D9:36:0B:09:B6:1A:93:85:0D:E2:46:48:1F:77
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/s8hxn3PA2TYLCbYak4UN4kZIH3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:ef:f6:c0:75:0c:6a:2b:d3:a6:39:9a:46:c1:06:cc:a3:
         9e:5c:ac:ce:7f:41:79:4b:94:ed:bd:72:18:81:62:fb:19:a7:
         e8:79:b0:72:26:bd:02:e6:44:26:d2:14:30:9b:b3:d0:79:1e:
         64:4a:d9:f9:b9:a7:0a:b6:89:18:cb:fa:25:25:8a:53:55:18:
         2b:5f:99:7d:0d:49:f2:5b:f4:a2:ef:09:8e:0e:2a:5b:94:86:
         dd:50:a4:df:58:6e:05:bd:08:45:84:0b:92:4f:66:9a:d6:98:
         da:03:16:b7:70:24:8b:b3:f0:8d:40:f9:ca:a7:89:30:89:8a:
         1b:59:5f:b4:01:d0:3c:ce:8b:a4:e7:d0:2b:9a:f2:00:3d:b6:
         25:7f:d8:37:f1:aa:76:e4:dd:e7:29:9a:24:e5:ab:1d:34:72:
         ae:60:59:13:3b:98:c3:46:3c:d6:5c:32:3f:0c:08:16:27:1a:
         9e:5b:0e:b6:85:ac:e7:ef:e5:7f:fe:8c:e3:ae:20:0d:79:6e:
         93:4e:ab:ff:64:8c:a5:38:1d:54:dc:71:7d:84:29:a1:ca:45:
         28:77:de:88:6a:60:84:cc:ad:83:21:6c:1a:7f:37:c0:d0:f3:
         1b:9e:94:7b:09:ed:b5:af:ad:aa:e8:78:3f:e4:eb:db:27:10:
         45:fe:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----