Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/6SfTHmf_CFgIRglfwgvk-sZv0yA.roa
File:                     6SfTHmf_CFgIRglfwgvk-sZv0yA.roa (raw, json)
Hash identifier:          81/Ijx3TBhizqW1zFjX66mXEGgFnCEJjk69g5hcVk4E=
Subject key identifier:   E9:27:D3:1E:67:FF:08:58:08:46:09:5F:C2:0B:E4:FA:C6:6F:D3:20
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       0186BBD4852715DD184C83F1F1F56C599A25
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/6SfTHmf_CFgIRglfwgvk-sZv0yA.roa
Signing time:             Tue 07 Mar 2023 11:28:32 +0000
ROA not before:           Tue 07 Mar 2023 11:28:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204339
IP address blocks:        2a13:3307::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bb:d4:85:27:15:dd:18:4c:83:f1:f1:f5:6c:59:9a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: Mar  7 11:28:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e927d31e67ff08580846095fc20be4fac66fd320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:fa:42:11:57:d6:21:e6:d2:35:0c:6e:17:
                    8a:67:4a:6d:59:fb:7e:9e:4a:56:fe:3a:2a:6d:19:
                    e7:b8:f0:5f:2f:29:5b:b2:56:c9:0c:6b:7f:1e:2a:
                    af:5d:26:b0:c0:aa:02:6c:3c:3d:2e:b4:cb:ec:6b:
                    f3:41:61:43:e0:fc:9b:25:e3:27:93:60:f2:8d:1c:
                    88:f1:19:39:20:b4:f9:5a:47:ec:47:07:96:18:b6:
                    a0:f1:05:89:f9:d0:80:dc:5c:87:8c:85:6a:63:6f:
                    8f:08:7d:45:26:71:4d:9c:97:3b:90:79:19:27:af:
                    a2:63:15:b1:89:9c:1a:79:46:bf:00:22:f7:d0:50:
                    cf:39:82:e1:1a:3e:19:25:6c:e2:2b:94:59:90:91:
                    38:25:d2:41:e7:6d:34:01:3a:29:6a:80:b3:a8:22:
                    5e:e5:54:5e:61:7c:25:f0:18:4a:1b:61:77:db:5d:
                    11:fb:e7:5d:ff:54:13:4e:cc:a8:c4:79:d4:f1:9a:
                    8d:5f:c7:6f:9c:33:9b:39:42:12:82:24:ce:df:3b:
                    18:6f:99:56:ce:41:8f:d7:18:4d:39:c8:ed:c8:5b:
                    99:ff:c7:61:b3:15:75:f5:73:c7:ee:1f:c9:2b:ae:
                    cf:79:4f:ee:34:a8:31:90:f9:28:19:b0:8c:10:9c:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:27:D3:1E:67:FF:08:58:08:46:09:5F:C2:0B:E4:FA:C6:6F:D3:20
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/6SfTHmf_CFgIRglfwgvk-sZv0yA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3307::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:b2:9f:a9:d3:d5:79:64:b7:f8:11:80:d5:6f:d7:31:70:
         00:91:f6:11:de:5e:c2:97:66:32:db:5a:f1:dd:59:2e:ff:e0:
         a5:41:59:54:c6:d2:74:20:03:b8:23:ee:ac:1e:39:ae:5e:42:
         ef:d7:10:18:e1:b5:a9:b0:3d:b4:90:a2:e7:11:66:ee:99:f8:
         6f:68:d9:97:8b:23:e2:a5:dc:b7:58:d2:35:70:64:d2:8e:1c:
         14:fc:7f:40:67:42:b1:0a:a0:ce:9b:b5:52:4a:30:33:26:d0:
         f2:5e:b1:92:d1:56:41:f4:42:59:89:38:63:f4:bf:14:8d:47:
         a9:a9:46:b4:71:f2:4c:66:0c:b6:bf:cc:f3:bb:bf:11:e7:ad:
         57:6d:ed:d6:7b:6b:cc:b7:7a:17:b9:3e:d8:45:3b:15:1c:a3:
         9f:72:0a:eb:21:bb:a5:d5:f1:97:f9:39:64:b2:4b:0b:ba:82:
         af:ce:dc:f9:1a:34:f9:f2:b1:be:b2:ed:ec:c6:11:fc:aa:be:
         e7:f0:50:b3:36:88:54:2b:76:ca:d4:63:b5:fc:a3:86:26:e6:
         88:d2:d0:d0:15:82:4a:4d:eb:97:15:db:9c:58:f2:40:e6:d2:
         e0:81:aa:6a:e9:51:b1:3e:72:9f:7f:dc:c1:63:7c:25:a6:76:
         4d:45:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----