Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/ZRQDZ2soXj_tQDQZmdy_JqL6QZk.roa
File:                     ZRQDZ2soXj_tQDQZmdy_JqL6QZk.roa (raw, json)
Hash identifier:          EnJu7sv5IqXO2teULjNVKSom876r3YEviQ2m+BjmWaM=
Subject key identifier:   65:14:03:67:6B:28:5E:3F:ED:40:34:19:99:DC:BF:26:A2:FA:41:99
Certificate issuer:       /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial:       01856F2FF55EFD5148AE1ABA92C94CA995F3
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/ZRQDZ2soXj_tQDQZmdy_JqL6QZk.roa
Signing time:             Sun 01 Jan 2023 21:14:52 +0000
ROA not before:           Sun 01 Jan 2023 21:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13046
IP address blocks:        2a13:16c0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:2f:f5:5e:fd:51:48:ae:1a:ba:92:c9:4c:a9:95:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
        Validity
            Not Before: Jan  1 21:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=651403676b285e3fed40341999dcbf26a2fa4199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:cb:32:48:ed:d3:2d:65:8d:9b:02:68:e8:
                    8f:54:d2:3c:ca:86:a6:4a:ef:e8:dc:a5:75:66:50:
                    8c:cc:98:1b:82:47:50:cf:7b:ea:0a:33:2d:74:34:
                    0d:f1:cb:1d:c4:65:fe:36:e6:86:5b:40:b3:77:90:
                    1b:6a:a8:4b:9b:c0:04:1a:69:95:ce:49:9c:cf:fc:
                    a5:2f:fe:06:0e:6f:1f:c8:11:17:ad:bb:65:27:ef:
                    33:98:02:12:4c:80:b9:2a:e0:5f:a8:3f:50:a3:de:
                    da:a6:04:6c:a8:3c:82:45:4d:f0:7e:96:c3:f3:e3:
                    20:68:b7:12:5e:e3:fa:58:1d:8c:4b:b9:15:17:21:
                    67:35:b3:3d:27:c3:eb:45:34:e5:26:9d:ee:69:83:
                    ed:9c:f3:cb:9c:cf:c8:d2:ce:b5:05:82:a9:00:b5:
                    ea:29:da:8f:a7:bc:c8:89:96:83:a5:ec:46:74:4f:
                    3f:68:67:c5:a0:6e:57:6e:30:fc:e4:bb:6a:54:d9:
                    23:24:2e:65:0f:47:06:e1:9b:e9:66:9c:ae:d1:39:
                    e3:8a:14:8a:eb:83:e5:3d:7e:3d:f6:33:91:69:c9:
                    79:7b:01:97:48:68:68:fe:6a:ba:79:97:99:99:0f:
                    73:8e:6f:dd:37:5b:63:0c:20:fd:2a:31:a9:a4:b6:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:14:03:67:6B:28:5E:3F:ED:40:34:19:99:DC:BF:26:A2:FA:41:99
            X509v3 Authority Key Identifier:
                keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/ZRQDZ2soXj_tQDQZmdy_JqL6QZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:16c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         70:47:da:27:09:0a:5b:3f:72:a1:af:8b:d4:a3:79:f7:9c:c8:
         57:d1:70:bb:c8:a5:d1:96:2f:0c:ff:8e:72:9b:9f:16:62:15:
         ee:a6:3d:ba:cb:08:a9:71:e5:e7:11:e0:04:90:40:3c:72:a7:
         c7:60:b5:2e:29:01:d3:7a:3b:80:4a:dc:2f:a8:0f:22:2f:a1:
         c1:36:05:67:bc:0b:7e:a3:5f:b4:98:20:e4:0c:06:4a:4c:13:
         8f:27:ab:3d:73:76:60:6b:6b:30:c9:be:65:9d:15:43:ab:cd:
         fa:eb:fc:b5:0f:02:03:63:8f:24:42:93:38:1a:c7:37:f2:bd:
         28:67:36:2b:9b:a3:d5:01:b2:64:47:d8:24:2c:3c:3f:11:7a:
         0f:12:ca:a5:9e:f2:0d:c8:7e:cc:e9:ba:51:e4:50:8a:cc:9d:
         93:6f:e9:e9:45:03:38:9a:71:b2:4b:94:eb:1a:72:ab:31:29:
         3f:6f:1e:29:54:3b:c1:b0:cf:7f:88:37:1b:28:cd:82:9d:63:
         12:e1:f7:92:34:5b:87:54:fc:21:5f:a8:57:f6:3b:9a:07:b5:
         ec:0c:3f:63:c7:29:8e:88:ee:f9:0a:d6:ed:e2:50:9f:e3:cb:
         29:b4:3b:2d:1c:98:37:5f:05:c0:fc:2d:fd:f8:e6:f4:16:85:
         6a:a9:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----