Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/FkktR8f08xc77QoXx2KS1qX7ixw.roa
File:                     FkktR8f08xc77QoXx2KS1qX7ixw.roa (raw, json)
Hash identifier:          4bexpqQn1QoPcbdf1oWLOGsHEJ1nEkt2dJW0qwq28Pg=
Subject key identifier:   16:49:2D:47:C7:F4:F3:17:3B:ED:0A:17:C7:62:92:D6:A5:FB:8B:1C
Certificate issuer:       /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial:       018B8AC60847CA780FF7532CD75757398BA2
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/FkktR8f08xc77QoXx2KS1qX7ixw.roa
Signing time:             Wed 01 Nov 2023 12:05:15 +0000
ROA not before:           Wed 01 Nov 2023 12:05:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        185.216.13.0/24 maxlen: 24
                          2a13:6300::/32 maxlen: 32
                          2a13:6303::/32 maxlen: 32
                          2a13:6301::/32 maxlen: 32
                          2a13:6304::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8a:c6:08:47:ca:78:0f:f7:53:2c:d7:57:57:39:8b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
        Validity
            Not Before: Nov  1 12:05:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16492d47c7f4f3173bed0a17c76292d6a5fb8b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:3f:de:0d:38:ef:8b:90:66:a5:7d:41:bb:
                    c2:b9:07:ab:d5:27:8f:75:34:e8:89:24:93:b8:52:
                    1b:c7:07:98:e2:53:b1:e9:f2:7e:e5:9e:a9:ae:bf:
                    f9:ef:25:75:44:dd:44:a6:e3:f2:35:f8:09:db:92:
                    92:7f:6b:04:80:bf:e2:7a:05:03:b1:52:f3:0e:7b:
                    5f:0d:f3:47:62:60:c6:21:42:20:25:ec:0c:6e:79:
                    10:2f:87:1a:a7:56:c5:ba:ba:db:b8:48:f1:6e:ab:
                    94:4d:66:2d:81:71:1a:83:97:80:9b:2c:5b:cb:2a:
                    82:7e:df:b5:28:cf:37:44:06:b6:19:8e:6d:32:e0:
                    cc:60:97:a0:4a:93:24:ce:14:a4:b5:43:6a:b3:cd:
                    d6:19:06:6e:ce:e6:fb:2d:2b:75:01:6c:04:49:64:
                    81:1a:da:0a:58:56:d0:e0:59:3e:a2:2c:f4:d6:f8:
                    a3:9a:9a:2e:06:8e:f7:d8:da:68:a9:5b:b4:50:49:
                    7d:e5:88:94:25:19:da:02:52:bd:eb:f8:72:b2:f5:
                    84:92:f1:7c:24:2e:fe:05:be:60:fb:3d:b0:b3:ac:
                    7d:d8:30:44:a0:13:ba:83:7e:34:18:6a:b9:6f:74:
                    ee:97:6f:ca:66:5c:3c:8a:34:fa:65:2d:0d:8d:1f:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:49:2D:47:C7:F4:F3:17:3B:ED:0A:17:C7:62:92:D6:A5:FB:8B:1C
            X509v3 Authority Key Identifier:
                keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/FkktR8f08xc77QoXx2KS1qX7ixw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.13.0/24
                IPv6:
                  2a13:6300::/31
                  2a13:6303::-2a13:6304:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         43:18:c0:03:b8:5c:b3:9a:12:58:de:bc:14:dc:e7:f1:2a:aa:
         f3:7a:75:48:97:4a:05:5c:fb:78:68:1e:8d:23:f2:61:1e:60:
         b4:84:81:4d:a3:47:01:0c:ff:11:59:96:17:ec:98:66:00:d6:
         27:0b:a3:b0:0a:54:31:7d:3b:9b:2c:28:06:17:ae:33:39:a9:
         5c:14:1e:98:fd:d4:b4:18:ef:79:c2:b9:ea:a0:3f:46:f5:bc:
         3a:9c:8b:00:7a:6e:12:2a:8b:f8:d3:28:80:7a:c7:3f:59:a5:
         31:10:04:d3:53:3f:5b:8f:ce:c4:26:c5:10:8d:62:5b:c4:ec:
         0d:9a:d8:14:bf:cb:e6:39:25:f7:a8:27:2a:bf:99:bd:9d:09:
         39:ae:c5:af:84:4c:7e:bb:3e:8c:ac:5a:de:a1:51:d5:df:3e:
         89:ff:33:f8:d0:fc:b5:2c:70:59:12:2b:26:53:01:06:92:02:
         b4:4d:a2:d5:82:50:9d:d0:21:fc:99:4b:06:6c:79:0e:71:a0:
         9a:3b:c9:2f:01:99:5e:c8:71:fc:5b:23:d9:e8:1c:65:2f:fd:
         6d:56:ca:41:9b:aa:64:48:05:d1:da:71:38:85:f1:17:a3:89:
         63:dd:87:2f:00:bb:6a:ba:1c:ed:2c:53:bf:2e:bd:6c:47:d6:
         4f:96:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----