Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa
File:                     W6S3Fru4QC6GhIRqNIq4gSSY08E.roa (raw, json)
Hash identifier:          mIGjqO3li+l+U0g152zP2hmAMhs5KDWkV9GM+p+MIkk=
Subject key identifier:   5B:A4:B7:16:BB:B8:40:2E:86:84:84:6A:34:8A:B8:81:24:98:D3:C1
Certificate issuer:       /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial:       018971EDA409CF2E61BF83EDE6CB965825B2
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa
Signing time:             Thu 20 Jul 2023 06:12:26 +0000
ROA not before:           Thu 20 Jul 2023 06:12:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60504
IP address blocks:        2a13:82c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:71:ed:a4:09:cf:2e:61:bf:83:ed:e6:cb:96:58:25:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
        Validity
            Not Before: Jul 20 06:12:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ba4b716bbb8402e8684846a348ab8812498d3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:c1:a4:8e:af:6b:69:01:0f:0c:02:be:60:
                    97:2d:80:1c:59:62:bb:08:1e:b6:b7:01:ae:bc:ff:
                    dd:56:c3:87:96:c2:04:d8:8e:8f:e1:0e:58:c5:0a:
                    2a:48:f6:01:69:73:07:59:2f:00:dc:30:7b:cb:aa:
                    5b:1b:43:95:40:ee:86:12:4a:a2:36:0e:95:85:52:
                    16:35:6d:0e:cb:5a:a8:1d:d5:ee:3b:b2:78:e1:bf:
                    d8:2f:ff:3a:cc:03:f2:0c:d2:81:4c:6d:e1:0c:23:
                    b9:0a:7f:bd:75:75:9b:95:0d:7d:2c:44:c3:da:de:
                    e9:70:c8:42:9b:cc:5d:81:2d:fa:19:5d:d5:99:7d:
                    21:17:4b:d4:e0:54:32:db:97:c9:d6:ce:95:bb:86:
                    73:b9:29:94:e3:5f:f6:70:1a:71:f8:7f:0a:a1:fa:
                    d5:83:a5:61:eb:2b:e2:76:c5:25:8d:ae:d9:b2:87:
                    e4:3e:98:da:ca:ed:e2:0b:60:e3:a9:88:48:fb:58:
                    93:70:90:6c:5a:8a:15:63:84:92:0b:2b:d0:49:a6:
                    ca:4c:fc:5c:e6:9e:1a:a5:61:40:32:21:71:5f:ab:
                    1f:46:d3:04:5a:59:9d:5b:72:ed:8a:f8:ac:74:68:
                    7f:9e:b3:37:ec:43:8c:2f:f8:f0:13:84:19:dc:52:
                    2d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A4:B7:16:BB:B8:40:2E:86:84:84:6A:34:8A:B8:81:24:98:D3:C1
            X509v3 Authority Key Identifier:
                keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:82c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:c2:48:43:44:24:b5:12:a6:de:1f:87:44:c4:00:9c:e7:
         3f:d1:9b:ca:57:bc:ee:9a:a8:c8:10:bd:10:30:7f:f2:fa:e4:
         2e:a8:33:50:1b:e8:54:f1:07:7b:94:95:63:73:7d:21:6d:06:
         ae:b0:df:78:c4:13:08:28:3f:ce:c3:a5:8d:f8:a8:c0:3e:72:
         eb:c2:76:11:ec:15:78:2b:c2:3b:b8:6e:71:69:49:af:ef:40:
         0e:f6:a6:56:7f:5b:79:36:e1:70:4b:32:43:25:cd:68:b9:f7:
         d5:b4:05:3d:07:85:07:da:72:f9:a8:73:ed:89:53:ef:68:7f:
         3f:0a:06:1a:0b:f5:f5:b8:66:eb:c4:c3:68:fb:4d:ce:d2:67:
         49:5d:51:e7:9d:e1:84:e3:91:3e:3d:86:db:7a:0e:19:5e:4e:
         37:1a:27:50:13:90:79:e0:bc:05:c9:b1:5b:72:61:34:c3:87:
         54:2c:e5:60:21:84:ba:6d:5c:26:73:f0:74:19:1a:ab:09:fb:
         13:13:15:0b:cf:c6:f2:2e:aa:9b:09:5c:08:bd:d3:86:ed:90:
         3b:6e:fc:49:e8:fe:2c:77:8e:8d:ea:98:13:88:6e:84:0e:ab:
         55:cf:10:cd:75:0e:ba:97:ee:b8:e3:5b:68:3f:f5:e6:a8:1b:
         79:7b:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----