Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/EC1ENh5HWxhtSQ5WCsmhWzWLxb4.roa
File:                     EC1ENh5HWxhtSQ5WCsmhWzWLxb4.roa (raw, json)
Hash identifier:          t27eylyaIMAIzE4S3Rfw7el9YgUs4MT5xo8pYYuG3hA=
Subject key identifier:   10:2D:44:36:1E:47:5B:18:6D:49:0E:56:0A:C9:A1:5B:35:8B:C5:BE
Certificate issuer:       /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial:       018A7F08B73749D6145948E862B9715F3EBC
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/EC1ENh5HWxhtSQ5WCsmhWzWLxb4.roa
Signing time:             Sun 10 Sep 2023 12:19:52 +0000
ROA not before:           Sun 10 Sep 2023 12:19:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53358
IP address blocks:        2a13:5884::/30 maxlen: 30
                          2a13:5880::/30 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7f:08:b7:37:49:d6:14:59:48:e8:62:b9:71:5f:3e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Validity
            Not Before: Sep 10 12:19:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=102d44361e475b186d490e560ac9a15b358bc5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:75:84:22:dc:b7:e6:1a:fe:09:bb:f2:55:
                    af:d7:b2:a1:c4:ae:b4:c0:4b:ed:9a:b7:97:db:a2:
                    b6:69:db:82:4f:e0:94:b8:b4:9e:46:07:b8:4b:6c:
                    51:75:92:f8:94:ba:7a:7b:8b:79:48:f9:59:9a:e3:
                    d6:51:b6:f8:af:2f:76:84:3e:d1:16:c3:d6:3d:55:
                    c5:32:dc:1c:00:2d:ec:2d:55:c7:d7:c9:38:43:64:
                    15:2c:16:9a:dc:c9:77:4d:fe:47:38:53:72:a0:cc:
                    77:59:e1:46:4b:ff:0e:33:80:d2:29:15:b8:48:84:
                    75:01:35:0a:fe:0e:82:1c:ff:5e:6a:9e:79:1f:6d:
                    a1:18:a3:72:d5:ab:a2:92:0d:00:68:24:40:2c:00:
                    49:04:27:5e:e2:69:7d:1b:18:cc:28:b8:a4:a9:2a:
                    b4:fc:3e:e9:78:ea:94:81:80:24:4d:f8:f1:3f:ae:
                    87:18:37:2a:cf:f3:7e:79:8f:8a:71:50:af:df:21:
                    93:4e:29:46:88:56:ee:30:7e:27:1a:a3:c3:b4:e6:
                    4d:05:3c:c6:cf:6b:87:f8:d2:5e:4e:71:1a:e1:cf:
                    50:b9:56:c1:f7:97:b9:3b:6a:a0:29:ac:a4:97:8d:
                    9b:18:91:bf:c7:dd:1c:f7:13:df:39:21:73:b9:49:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:44:36:1E:47:5B:18:6D:49:0E:56:0A:C9:A1:5B:35:8B:C5:BE
            X509v3 Authority Key Identifier:
                keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/EC1ENh5HWxhtSQ5WCsmhWzWLxb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5880::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:69:37:df:53:35:0e:7a:ae:6a:3a:09:e2:f0:cd:a2:b1:78:
         d4:06:cd:83:75:3d:2b:df:b4:75:d4:b5:cf:8b:07:b6:b4:5d:
         01:4f:4e:2a:52:f4:aa:84:48:f3:b0:6c:3f:16:4d:e8:27:04:
         24:2d:12:da:c5:c5:81:d5:57:8c:41:c6:d6:2f:8a:ae:26:35:
         1d:80:e3:18:fd:62:da:47:d7:bf:e4:d0:db:4f:6d:14:09:48:
         2e:7d:4c:9a:bd:91:a8:7a:a8:8d:31:57:57:2a:87:e5:cb:7c:
         1d:bc:ce:d7:2a:01:79:b8:2a:cc:e5:39:12:e4:de:9b:bd:87:
         f6:f3:01:44:bc:a4:b9:e2:28:f3:e1:36:08:bb:7d:5d:a6:1e:
         4d:86:24:d3:13:74:13:ed:fe:5b:8b:07:41:95:4a:a7:93:9f:
         e4:1e:2f:b8:f4:54:57:11:4c:4e:e2:05:31:06:54:98:9a:e7:
         b8:b1:be:e8:98:8f:f1:ab:8b:65:f0:c8:60:c5:aa:bb:b7:d8:
         28:41:22:06:e4:52:8e:d9:39:5d:42:77:80:48:92:aa:e0:67:
         91:6b:5d:3f:11:4a:3f:b0:f6:b7:30:2c:63:cc:58:0a:91:d6:
         5f:e9:53:dd:1f:0f:d8:7c:10:3e:fe:aa:da:ef:b3:f3:57:9b:
         24:92:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----