Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/E-6QAXQva9ZZAT--mmldta6SHdA.roa
File:                     E-6QAXQva9ZZAT--mmldta6SHdA.roa (raw, json)
Hash identifier:          Nw/yznzXuCf8bBhXF+mSLEy7mFH4Slp3EqiBc4tmZKI=
Subject key identifier:   13:EE:90:01:74:2F:6B:D6:59:01:3F:BE:9A:69:5D:B5:AE:92:1D:D0
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       018AD317CDC39332F27CECED61870D9ACDBB
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/E-6QAXQva9ZZAT--mmldta6SHdA.roa
Signing time:             Tue 26 Sep 2023 20:04:27 +0000
ROA not before:           Tue 26 Sep 2023 20:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199614
IP address blocks:        2a13:a280::/29 maxlen: 29
                          2a13:a280::/33 maxlen: 33
                          2a13:a280:8000::/33 maxlen: 33
                          2a13:a281::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d3:17:cd:c3:93:32:f2:7c:ec:ed:61:87:0d:9a:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Sep 26 20:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13ee9001742f6bd659013fbe9a695db5ae921dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:a8:18:b2:5d:1b:5b:dc:a7:ea:d9:6a:f9:
                    7b:90:a2:a7:ea:ab:12:04:06:f0:be:92:8d:6a:97:
                    75:4c:2d:4c:67:54:9f:3b:f5:6e:c2:cc:79:ba:f6:
                    f7:d8:3f:46:77:53:85:2f:a8:84:a6:53:09:fe:30:
                    f0:27:bb:68:ad:65:5f:ff:aa:58:8b:8d:6b:f0:80:
                    8f:24:ea:f5:2f:db:c3:fa:7c:48:a8:91:ec:54:b6:
                    a9:fe:5b:8e:7e:66:57:53:59:32:01:14:4b:07:2a:
                    1e:1c:b7:4d:4a:11:5c:a6:58:4e:72:4d:ac:80:ea:
                    b1:a5:fa:bf:55:9d:b0:cf:7a:ca:e6:a5:ba:7e:a8:
                    9b:9c:1a:ce:b1:bb:25:b7:6d:d4:f4:e4:97:3a:21:
                    69:60:4e:dc:f3:c9:1a:8f:db:78:9c:83:27:21:44:
                    45:39:42:a2:4b:2e:ef:79:12:5e:26:b1:6d:43:38:
                    56:80:44:8c:1a:49:85:a5:fd:7c:68:3c:8f:f3:a8:
                    c2:1c:17:39:40:e7:52:99:ff:4e:9b:e4:38:81:0c:
                    85:18:65:7a:f0:ab:67:6a:22:4d:cc:12:6f:39:9c:
                    2f:c9:37:ca:d2:a0:b2:9c:84:e2:be:31:5d:66:39:
                    97:1d:91:27:57:0c:88:b5:a4:43:40:ce:c2:3c:af:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:90:01:74:2F:6B:D6:59:01:3F:BE:9A:69:5D:B5:AE:92:1D:D0
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/E-6QAXQva9ZZAT--mmldta6SHdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a280::/29

    Signature Algorithm: sha256WithRSAEncryption
         d6:23:0e:41:3e:a6:01:7b:b6:fc:fe:4a:ea:af:74:95:ec:00:
         15:4c:22:c9:e3:52:fc:b4:04:04:12:5b:1e:c2:a4:1d:79:41:
         55:51:01:14:52:07:78:4a:e2:9c:7d:da:73:fe:8a:78:1c:47:
         af:41:16:b9:44:d8:54:e0:97:63:40:10:ca:78:66:e4:73:72:
         8a:cb:85:8d:f3:9f:28:c8:8e:b4:0d:b9:14:78:2c:0e:b5:b3:
         a6:0c:19:cf:2b:61:4e:8d:b2:3e:ab:2a:e4:75:92:53:f9:d1:
         31:77:6b:23:7b:1e:07:c0:9a:74:b0:8e:4a:a7:83:eb:9d:d3:
         0c:d8:3c:d7:4c:1b:b3:c9:d7:5d:33:12:e3:02:dc:ea:96:52:
         e3:46:dd:4c:ad:4b:be:38:28:db:15:65:05:82:46:f9:8b:28:
         06:30:17:e4:2a:e6:c0:e0:b2:45:61:17:6b:8a:4e:c3:cc:3f:
         db:7a:68:64:10:56:33:57:1f:0b:7f:26:55:5f:b9:3c:0f:69:
         7b:39:0f:1a:3c:a3:18:40:78:df:b7:20:8c:4d:01:49:28:05:
         76:b9:48:80:36:bf:d3:4b:5e:16:23:7d:63:87:9d:47:66:93:
         4b:e6:77:fb:55:31:5a:84:fc:6f:08:54:ff:b9:9d:a2:3a:1c:
         ff:b4:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----