Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/JEW16PH0kxOEL7QxMENG7K8pfKM.roa
File:                     JEW16PH0kxOEL7QxMENG7K8pfKM.roa (raw, json)
Hash identifier:          umUwpmKFJTGXdm1x4cSFIFjIc0cxs+Oi9wra+cQTimE=
Subject key identifier:   24:45:B5:E8:F1:F4:93:13:84:2F:B4:31:30:43:46:EC:AF:29:7C:A3
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       018854966E9EEEFC52BB74536CCB477920E6
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/JEW16PH0kxOEL7QxMENG7K8pfKM.roa
Signing time:             Thu 25 May 2023 20:25:24 +0000
ROA not before:           Thu 25 May 2023 20:25:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199614
IP address blocks:        2a13:a280::/29 maxlen: 29
                          2a13:a280:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:54:96:6e:9e:ee:fc:52:bb:74:53:6c:cb:47:79:20:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: May 25 20:25:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2445b5e8f1f49313842fb431304346ecaf297ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:f4:46:fc:ed:3b:41:4a:d1:2f:15:03:2a:
                    77:9c:66:43:90:ec:ea:9c:95:d6:40:cc:03:6a:8f:
                    56:7a:06:7e:c2:77:57:db:f6:60:8e:ee:5d:db:66:
                    be:79:a4:38:f5:14:dc:74:a5:50:cd:3b:eb:57:53:
                    24:b8:d8:d6:73:8d:44:ce:36:cb:74:cc:98:41:aa:
                    3f:41:14:0e:51:3c:33:df:81:22:42:3d:91:fd:4e:
                    87:d9:19:92:a7:d8:95:72:3e:1e:7f:e6:c4:9d:5b:
                    52:67:9c:91:9b:59:2b:8d:9a:d5:66:bf:7d:f0:8c:
                    26:7a:37:a7:20:e8:09:b4:5a:3b:1a:a9:95:a3:70:
                    a5:00:fc:77:ce:f5:9f:88:aa:a5:b9:23:ce:27:1d:
                    e6:9c:9a:48:b8:39:80:22:08:af:03:39:c4:d1:73:
                    ec:b2:42:98:d4:c4:fa:53:48:af:e0:0b:72:9e:9a:
                    bc:56:0c:93:e2:b7:51:83:1f:8e:8d:bb:25:3b:5d:
                    a6:e6:19:97:7b:b6:6e:70:e7:64:db:fb:56:83:b5:
                    a1:35:ad:b8:74:54:3b:52:eb:30:54:e0:ae:a9:d9:
                    ed:e0:8f:47:33:c6:67:5d:5c:46:16:d7:a3:db:51:
                    45:ad:c3:09:c0:21:2d:25:0b:b6:94:43:c3:90:31:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:45:B5:E8:F1:F4:93:13:84:2F:B4:31:30:43:46:EC:AF:29:7C:A3
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/JEW16PH0kxOEL7QxMENG7K8pfKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a280::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:83:55:0c:1d:1d:f8:98:fa:7a:8e:41:f3:5a:96:45:7e:
         ff:ba:33:e9:79:f3:7b:3f:ba:6c:09:3e:c6:93:77:c4:9b:81:
         8d:ed:a5:26:74:ec:38:b7:01:5c:30:b6:32:d1:36:48:75:13:
         fd:5e:d2:54:4c:75:99:8f:bd:02:bc:a2:28:86:42:c5:60:00:
         6d:09:d7:19:c4:da:b8:4b:c7:66:68:f6:48:47:d8:cd:67:ff:
         83:f1:cc:56:5c:d9:70:e4:9c:60:3b:84:14:8e:6f:93:d2:b0:
         e9:6f:df:71:d1:cf:11:23:ea:ff:d8:b3:cc:ea:3a:12:f6:7d:
         29:66:7e:77:b3:e8:46:62:a7:5e:4b:e8:f2:ff:c5:22:31:60:
         af:76:69:72:45:9a:4d:1f:2b:10:c4:3a:1f:2f:ab:48:3b:f4:
         34:df:3d:a6:b3:fa:5d:17:ef:bc:19:a0:e1:70:94:98:5c:be:
         d6:d5:db:1a:b2:59:2e:d0:99:79:d0:10:41:24:79:a8:97:0d:
         3e:ad:11:e8:29:6f:19:09:44:25:dc:11:cd:da:e5:0b:76:46:
         bd:26:39:af:aa:14:52:67:a9:bf:50:88:eb:8c:33:9c:bf:b2:
         b5:a6:fd:34:71:e2:dc:0d:a7:68:47:43:2b:08:eb:4e:07:c3:
         8e:dc:39:92
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 23:21:53 2023 by rpki-client on console-ams.rpki-client.org