Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa
File:                     9lJfjF_J1CbwM09BuovndEREwV0.roa (raw, json)
Hash identifier:          Sy5u135EZffA97zIyZFnQ0UnwQ7LDFDvPU2Z6Q7pd/g=
Subject key identifier:   F6:52:5F:8C:5F:C9:D4:26:F0:33:4F:41:BA:8B:E7:74:44:44:C1:5D
Certificate issuer:       /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial:       0187C571C94581D86D2923444FB029A7E352
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa
Signing time:             Fri 28 Apr 2023 01:19:41 +0000
ROA not before:           Fri 28 Apr 2023 01:19:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.216.13.0/24 maxlen: 24
                          2a13:6300::/32 maxlen: 32
                          2a13:6301::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c5:71:c9:45:81:d8:6d:29:23:44:4f:b0:29:a7:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
        Validity
            Not Before: Apr 28 01:19:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6525f8c5fc9d426f0334f41ba8be7744444c15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:ce:39:63:fe:ee:b9:ce:27:9c:65:d2:6b:
                    a2:af:57:e4:d2:ab:3b:32:d0:e4:3e:be:b3:78:81:
                    6d:ca:a1:80:cc:b1:98:87:fc:9f:19:b1:cb:1d:54:
                    3e:3c:c6:96:d3:70:f4:1a:a0:d5:55:44:24:cb:a4:
                    5c:9b:75:ea:67:18:0d:4b:0e:4b:9a:f3:17:a6:4f:
                    7c:38:98:cc:e8:60:7e:c1:25:0c:d5:4c:72:69:b6:
                    ee:6b:6f:9b:ad:ea:e9:cf:7e:11:32:a3:78:aa:cf:
                    f8:60:6e:50:23:99:dd:6a:47:16:e7:d1:67:61:49:
                    83:02:39:cc:0e:d9:98:c0:ec:bc:d8:75:a3:d6:80:
                    f9:07:d6:f3:f7:f6:ff:ad:62:1b:63:1d:7b:62:c6:
                    26:65:8b:c3:b3:e9:84:e2:c0:cd:28:10:f0:b2:cf:
                    8b:ac:3c:81:51:4f:ed:1e:46:f3:82:43:57:d5:73:
                    ab:36:74:d2:3a:51:55:b9:eb:78:3e:02:6b:c7:fd:
                    15:3a:a2:c9:87:3c:a2:a8:0c:25:93:ab:19:6b:98:
                    32:b5:9f:5f:17:c5:f3:7c:66:68:e7:28:a3:13:c7:
                    b2:65:0d:e0:50:f9:ee:51:72:78:3c:27:13:bf:ee:
                    29:33:a0:a4:ac:83:c7:33:dc:64:4e:45:3b:7a:bb:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:5F:8C:5F:C9:D4:26:F0:33:4F:41:BA:8B:E7:74:44:44:C1:5D
            X509v3 Authority Key Identifier:
                keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/9lJfjF_J1CbwM09BuovndEREwV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.13.0/24
                IPv6:
                  2a13:6300::/31

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:e0:02:d0:3e:3d:2d:4c:18:5a:68:04:a8:6d:89:84:cf:
         95:15:95:8a:fd:6d:44:ea:1d:5f:63:ac:07:df:3d:16:35:e9:
         c9:57:eb:de:7b:be:e0:7e:e2:b6:f0:fc:0c:b6:19:9d:63:f7:
         b5:85:6c:7b:6e:7d:10:93:43:ff:48:52:2f:9d:ba:2a:ca:95:
         db:c5:c0:71:c9:48:b5:8d:e7:2d:94:bd:9f:08:73:00:b5:d7:
         00:a8:a3:63:a8:a9:88:85:2f:fd:68:d7:3b:72:20:a6:b1:ab:
         a3:f4:c6:e8:a4:57:9e:c1:c9:d0:e5:65:a4:1d:f6:9d:76:d0:
         93:b5:fd:f0:6d:a4:e0:ad:21:b8:d1:be:4d:8e:3a:dd:4c:7a:
         42:4e:59:78:14:80:fe:bf:f4:a4:62:e6:f5:ed:fc:8e:ba:86:
         63:2e:8f:3d:9b:24:28:88:ae:9b:0e:14:8e:ae:c1:8e:c8:a6:
         d5:b8:6b:8f:8e:7c:d5:2c:db:4c:14:7f:f2:35:14:68:7e:32:
         b5:c1:b6:f7:30:15:cf:f4:03:ed:18:fa:38:cb:b3:08:02:67:
         16:f2:ca:7f:75:3a:ec:72:57:84:d8:2e:b3:9c:78:ff:45:9e:
         da:d5:6a:b0:ff:d5:d2:4f:aa:66:36:86:4b:d9:e8:b5:02:2a:
         89:08:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----