Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/tJphjGPwvE-HprLoVJnJRrCYE4Y.roa
File:                     tJphjGPwvE-HprLoVJnJRrCYE4Y.roa (raw, json)
Hash identifier:          0wTsNXevquQMF6xoq6FF7aWFJ1NLeD2naG/S/4tXta8=
Subject key identifier:   B4:9A:61:8C:63:F0:BC:4F:87:A6:B2:E8:54:99:C9:46:B0:98:13:86
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       01856CE5F53EDBE757999314D6F606A643EF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/tJphjGPwvE-HprLoVJnJRrCYE4Y.roa
Signing time:             Sun 01 Jan 2023 10:34:47 +0000
ROA not before:           Sun 01 Jan 2023 10:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18178
IP address blocks:        2a13:2200::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e5:f5:3e:db:e7:57:99:93:14:d6:f6:06:a6:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Jan  1 10:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b49a618c63f0bc4f87a6b2e85499c946b0981386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:66:b2:51:b6:7b:40:2e:eb:35:88:56:bd:
                    4e:e3:fc:e3:cc:86:bc:2d:2b:9e:2c:8a:34:07:8f:
                    07:ce:4a:e7:70:7c:4d:55:47:f9:93:8a:70:5b:d9:
                    64:f9:70:d6:13:af:50:19:0e:f8:4d:59:76:3a:81:
                    3f:1b:14:f1:bf:f6:09:a5:a0:12:ba:43:de:bf:bb:
                    a8:e4:a8:a5:ff:30:00:9b:57:2a:1e:4a:94:87:80:
                    66:1d:0e:6d:79:02:fd:b3:83:ab:d9:15:b8:f5:81:
                    14:6f:9b:78:13:ea:e5:35:eb:b9:6a:f3:37:0e:4f:
                    68:a8:ef:32:d4:38:53:41:79:d9:d6:1d:ed:10:e1:
                    c6:4d:45:f2:a8:e1:ab:d0:90:d9:43:1d:ab:34:c3:
                    36:1d:6c:5f:ee:08:fd:37:19:c2:52:21:75:ac:07:
                    4a:1e:9f:46:c9:03:45:7a:1a:82:c3:79:7f:b8:b3:
                    78:28:b8:d9:da:2d:c7:d5:e3:37:dc:5e:56:a9:ff:
                    43:fd:d1:86:76:c5:a0:51:37:14:1a:ce:8c:9c:26:
                    51:50:3b:05:93:72:f2:7f:a2:fc:97:3b:2a:2b:54:
                    1f:27:70:71:5e:50:18:d4:5a:e9:98:92:ed:bf:3b:
                    4f:04:9d:c0:e7:af:19:d4:c4:31:54:2b:57:9f:0b:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9A:61:8C:63:F0:BC:4F:87:A6:B2:E8:54:99:C9:46:B0:98:13:86
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/tJphjGPwvE-HprLoVJnJRrCYE4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2200::/47

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:22:4c:03:b8:c5:63:c0:dc:2f:38:87:48:d2:20:cb:bc:
         4f:d1:42:77:cb:7f:da:c6:59:ba:e4:ed:a9:c1:25:81:3e:9d:
         9f:f9:9b:ce:4f:97:d2:3b:84:4b:52:99:34:1e:ab:9c:2b:5f:
         9b:d3:18:3d:46:34:a7:6b:1a:ff:32:78:34:45:19:f7:72:d4:
         e9:29:26:82:c2:3e:45:3d:e4:9c:da:0e:c1:f5:f4:9c:66:90:
         57:b8:38:15:af:89:50:0f:f6:f6:e3:9b:e7:b8:86:83:a6:14:
         7b:b3:29:f8:0c:3c:f8:9a:b1:4a:c5:8a:68:0e:9f:0f:c8:ca:
         23:af:f4:41:58:83:91:40:32:87:f5:6c:fc:c4:c5:d2:2b:e5:
         90:52:75:b7:57:db:db:b8:86:dd:94:50:41:f5:9c:ca:d2:6b:
         38:53:cd:de:93:45:b3:2b:80:8b:de:1d:56:62:36:32:2c:0c:
         e7:cc:96:27:eb:da:c9:c3:bb:14:7d:45:af:5d:b8:b1:a1:39:
         24:f6:93:24:2f:cb:36:ae:df:53:0f:2a:d6:77:b5:e8:bb:17:
         fb:72:8b:3f:4d:37:26:f9:07:ab:f4:a2:41:c4:35:fc:fe:92:
         3f:ad:84:dd:92:45:6c:a0:c6:63:c0:0f:97:48:49:e5:1b:c4:
         77:9b:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----