Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/nlwrFWK3hydf_absv_OrBEMaR78.roa
File:                     nlwrFWK3hydf_absv_OrBEMaR78.roa (raw, json)
Hash identifier:          rgPck0jeRW0NNCwBG5Qme8tX8Zm5lVwwFyBWOCCQg5o=
Subject key identifier:   9E:5C:2B:15:62:B7:87:27:5F:FD:A6:EC:BF:F3:AB:04:43:1A:47:BF
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       018571DE787717231CE0FD552822996E65C3
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/nlwrFWK3hydf_absv_OrBEMaR78.roa
Signing time:             Mon 02 Jan 2023 09:44:43 +0000
ROA not before:           Mon 02 Jan 2023 09:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51345
IP address blocks:        2a13:1c46::/32 maxlen: 64
                          2a13:1c40::/29 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:de:78:77:17:23:1c:e0:fd:55:28:22:99:6e:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Jan  2 09:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e5c2b1562b787275ffda6ecbff3ab04431a47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:fc:05:a8:4e:a5:8f:bd:08:55:72:0c:af:
                    e6:3a:ef:28:ae:60:b1:0d:ce:2b:89:cc:06:00:33:
                    28:54:3e:7b:83:6d:7e:4b:b7:e9:cf:70:35:cc:57:
                    f1:d2:ed:be:74:2d:51:c6:56:b0:21:3a:a8:1b:d1:
                    01:79:02:a5:39:3e:f4:9e:3a:6f:78:94:de:46:43:
                    be:78:96:6c:64:b5:e0:40:85:78:81:85:0c:95:d8:
                    ff:0b:95:d3:a2:3e:a1:1a:07:3f:8b:31:81:e6:cf:
                    08:52:ef:aa:3d:7a:99:db:e5:a1:27:ea:4a:15:3d:
                    ac:27:4d:fa:82:83:ea:09:d0:0f:7f:59:70:05:c5:
                    9d:47:0d:18:b1:64:a1:6b:9c:43:f9:2b:03:c3:6a:
                    50:ad:d0:22:0a:7a:39:52:4d:89:92:d6:0d:56:bb:
                    51:5e:8e:bf:04:2b:f5:0e:c2:5e:71:0a:8b:eb:d3:
                    0d:72:29:5a:10:11:61:cc:09:ad:87:b9:52:13:78:
                    02:d6:d3:6c:4e:47:6b:31:eb:40:10:07:2e:79:23:
                    dc:5f:43:81:7d:fd:a1:57:71:11:f6:95:25:d2:27:
                    5b:21:73:c5:b5:75:37:8c:05:7d:50:74:14:b8:5b:
                    1e:23:37:1c:fb:59:dc:f2:38:60:e6:85:6b:bc:53:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:2B:15:62:B7:87:27:5F:FD:A6:EC:BF:F3:AB:04:43:1A:47:BF
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/nlwrFWK3hydf_absv_OrBEMaR78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9f:ab:ad:80:6f:3a:77:83:f1:bb:b3:b0:02:4b:f4:57:9c:a0:
         c6:0c:c1:e4:45:73:a9:5c:e3:2b:18:5d:e3:30:54:6a:67:2f:
         2c:ba:bd:43:ca:11:40:ac:af:0c:e5:81:27:82:bb:d3:80:be:
         ad:34:c5:6c:75:d5:07:c1:07:63:e2:cc:a9:b1:45:20:26:92:
         bc:c4:70:c3:ea:ea:93:31:4a:2d:95:4c:43:f3:1f:1c:29:fa:
         ce:f1:22:94:05:69:d3:ec:d8:a6:0f:01:44:9a:95:cb:38:6a:
         78:fa:9b:40:14:6c:86:da:8b:0c:86:a1:e7:d6:06:81:2f:5c:
         dd:6b:3f:6c:3a:d4:5b:c7:a7:15:82:24:a3:e4:40:ac:e0:83:
         73:41:50:46:9e:1b:12:f8:d8:af:96:02:f3:54:9f:a0:3c:8c:
         63:a2:1c:8a:d8:ef:5a:9b:a2:31:53:03:c9:58:d8:7a:0a:db:
         19:5e:0f:e7:c4:b6:db:fe:fc:b1:0f:8a:52:f7:67:e5:22:5f:
         7d:5a:37:b7:57:74:f7:16:44:2c:a5:24:8f:16:83:aa:38:b4:
         bb:d2:29:6e:7f:36:6d:fa:05:ea:9b:86:9e:77:76:35:02:fb:
         58:44:72:d2:a8:a3:d7:72:33:94:81:a8:1a:bf:bf:4f:09:7f:
         80:90:26:02
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVx3nh3FyMc4P1VKCKZbmXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh
NTU2MDEwHhcNMjMwMTAyMDk0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTVjMmIxNTYyYjc4NzI3NWZmZGE2ZWNiZmYzYWIwNDQzMWE0N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02/8BahOpY+9CFVyDK/mOu8ormCx
Dc4ricwGADMoVD57g21+S7fpz3A1zFfx0u2+dC1RxlawITqoG9EBeQKlOT70njpv
eJTeRkO+eJZsZLXgQIV4gYUMldj/C5XToj6hGgc/izGB5s8IUu+qPXqZ2+WhJ+pK
FT2sJ036goPqCdAPf1lwBcWdRw0YsWSha5xD+SsDw2pQrdAiCno5Uk2JktYNVrtR
Xo6/BCv1DsJecQqL69MNcilaEBFhzAmth7lSE3gC1tNsTkdrMetAEAcueSPcX0OB
ff2hV3ER9pUl0idbIXPFtXU3jAV9UHQUuFseIzcc+1nc8jhg5oVrvFP5jQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ5cKxVit4cnX/2m7L/zqwRDGke/MB8GA1UdIwQY
MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt
NjJjMDFkYzY5Y2NhLzEvbmx3ckZXSzNoeWRmX2Fic3ZfT3JCRU1hUjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh
LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMcQDAN
BgkqhkiG9w0BAQsFAAOCAQEAn6utgG86d4Pxu7OwAkv0V5ygxgzB5EVzqVzjKxhd
4zBUamcvLLq9Q8oRQKyvDOWBJ4K704C+rTTFbHXVB8EHY+LMqbFFICaSvMRww+rq
kzFKLZVMQ/MfHCn6zvEilAVp0+zYpg8BRJqVyzhqePqbQBRshtqLDIah59YGgS9c
3Ws/bDrUW8enFYIko+RArOCDc0FQRp4bEvjYr5YC81SfoDyMY6IcitjvWpuiMVMD
yVjYegrbGV4P58S22/78sQ+KUvdn5SJffVo3t1d09xZELKUkjxaDqji0u9Ipbn82
bfoF6puGnnd2NQL7WERy0qij13IzlIGoGr+/Twl/gJAmAg==
-----END CERTIFICATE-----