Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/B4UApRDcR-atUUv5cUeR6jgEBlA.roa
File:                     B4UApRDcR-atUUv5cUeR6jgEBlA.roa (raw, json)
Hash identifier:          k2Pf0m5+J2mkv6lI9lbKl++wr54gsKhlKf/eV5+wBPM=
Subject key identifier:   07:85:00:A5:10:DC:47:E6:AD:51:4B:F9:71:47:91:EA:38:04:06:50
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       0188B7CBC0289C44506A7F244CE9D46EE3F9
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/B4UApRDcR-atUUv5cUeR6jgEBlA.roa
Signing time:             Wed 14 Jun 2023 02:46:03 +0000
ROA not before:           Wed 14 Jun 2023 02:46:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        2a13:a286:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b7:cb:c0:28:9c:44:50:6a:7f:24:4c:e9:d4:6e:e3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Jun 14 02:46:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=078500a510dc47e6ad514bf9714791ea38040650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:48:fe:83:9f:d2:74:fb:a8:39:68:44:f5:
                    55:9d:21:07:a0:af:cf:b6:2f:19:08:64:14:9e:98:
                    6f:cc:2b:29:92:ec:dc:c5:c5:6b:43:d0:2b:34:14:
                    21:67:cb:4a:cf:b3:0d:79:c1:d6:d4:1a:65:9c:79:
                    08:90:bf:c7:86:ab:89:25:2e:b8:e8:ac:b1:83:1f:
                    3f:4f:30:f3:db:3a:70:32:fb:67:54:71:85:05:5a:
                    3b:1a:08:90:c6:02:0a:78:99:1f:e6:53:8a:dc:a5:
                    51:15:81:17:2d:62:bc:0f:b6:d5:fa:82:17:bc:e7:
                    fa:94:be:23:a6:09:92:28:45:84:6e:a1:08:07:b7:
                    2a:9f:4c:23:f1:41:9a:af:ef:3e:79:07:d4:5a:06:
                    99:24:f5:44:74:44:5e:b7:e4:dd:4e:12:f3:19:0b:
                    b6:48:a3:c7:3c:48:dd:0e:f3:8e:ee:f0:9c:3a:ff:
                    25:b7:97:66:28:2f:94:be:f5:8c:cb:b9:25:e5:f1:
                    90:06:6c:bd:b5:9c:98:f9:c3:d0:1b:46:89:7e:e1:
                    a7:e3:88:ec:ec:b6:9f:5e:08:48:67:1f:a4:9c:21:
                    10:4f:0a:93:c5:c0:56:30:e6:1b:ad:07:b3:c6:78:
                    30:d5:eb:65:0a:0e:40:75:9c:13:c5:13:0d:c9:02:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:85:00:A5:10:DC:47:E6:AD:51:4B:F9:71:47:91:EA:38:04:06:50
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/B4UApRDcR-atUUv5cUeR6jgEBlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a286:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:21:d3:25:61:2e:a2:7e:a2:53:c7:b7:74:b1:8e:5d:2a:fe:
         e3:4a:4f:63:87:71:30:5d:fc:10:7a:e9:7c:38:58:f6:62:a6:
         24:f4:66:f3:dd:28:d8:11:ce:32:f2:ab:08:91:1a:c3:de:29:
         5b:13:66:9e:90:35:f2:b3:cf:2a:99:7b:99:0c:fb:80:ee:14:
         c0:dd:f1:51:de:57:4a:e2:3b:b2:8f:4e:33:44:97:46:90:dc:
         2a:09:89:ba:54:4a:2b:26:6d:4c:68:58:f9:9c:02:66:97:3b:
         25:06:8f:54:aa:36:7f:21:d5:55:33:f0:04:97:70:ed:f8:93:
         82:a5:f1:a9:b5:12:69:21:f3:ec:f0:04:12:e4:d5:7e:bb:85:
         79:13:3f:f6:a7:b2:6d:1e:b0:1d:56:1a:cc:fc:f3:17:33:71:
         56:df:bf:44:47:35:da:62:94:e2:bf:65:b9:06:29:79:19:30:
         09:52:c1:0f:2f:f6:32:45:bd:fc:7f:60:fa:f1:e2:48:6e:87:
         6a:f7:d2:fc:d2:3e:bb:c3:1f:e6:d6:61:78:e6:ce:56:e3:2e:
         06:65:cc:e9:98:34:c4:65:18:7a:34:0f:b1:cb:b8:08:18:6d:
         29:d4:f0:c5:72:6c:a4:18:a2:c2:ba:56:47:9b:43:23:ad:94:
         ef:46:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----