Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/PCELmMudsVxSwl4FUm_rO5xwyg8.roa
File:                     PCELmMudsVxSwl4FUm_rO5xwyg8.roa (raw, json)
Hash identifier:          Qm4JGFfOkg9Ulbo1r/yYGJ4gd4KdkSPuL55tZbeT/RI=
Subject key identifier:   3C:21:0B:98:CB:9D:B1:5C:52:C2:5E:05:52:6F:EB:3B:9C:70:CA:0F
Certificate issuer:       /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial:       0189B3514CCE2FA1325F283F91BEE4D0EF8E
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/PCELmMudsVxSwl4FUm_rO5xwyg8.roa
Signing time:             Tue 01 Aug 2023 22:56:37 +0000
ROA not before:           Tue 01 Aug 2023 22:56:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199614
IP address blocks:        2a13:a280::/29 maxlen: 29
                          2a13:a280:8000::/33 maxlen: 33
                          2a13:a280::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b3:51:4c:ce:2f:a1:32:5f:28:3f:91:be:e4:d0:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
        Validity
            Not Before: Aug  1 22:56:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3c210b98cb9db15c52c25e05526feb3b9c70ca0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:df:93:4b:3d:d5:10:61:fe:6e:dd:aa:ff:
                    6e:44:a5:fe:65:2d:24:99:c9:6a:2e:78:2d:1f:46:
                    9a:f6:66:1c:6e:fa:5d:0f:16:cd:68:fc:6f:77:9e:
                    3e:a6:35:12:a1:12:ac:03:c7:3f:ab:01:24:32:4b:
                    e7:c9:41:9f:4a:b8:8c:9d:e8:30:e4:32:f1:54:dc:
                    13:ca:76:88:88:b1:38:1e:15:e6:34:21:6e:a1:23:
                    0b:12:f4:a2:73:86:da:49:eb:b7:5d:0d:32:e4:06:
                    51:a1:bf:96:f6:82:71:68:dc:a0:44:90:9c:61:74:
                    f8:f1:4e:b7:df:8d:ae:c6:45:da:aa:67:0a:1f:79:
                    ac:3d:fb:73:7f:6c:a3:57:17:0d:c6:77:78:5d:35:
                    e1:c0:3c:ec:f5:aa:62:41:f8:90:e4:00:d8:0a:b0:
                    2a:26:3a:cf:90:b7:38:63:6c:44:41:07:b7:ae:aa:
                    2a:17:01:3d:bc:76:e8:7a:50:8c:dc:89:5c:e3:ea:
                    b2:c8:15:2f:2b:bc:91:4d:23:21:05:c7:3c:c6:99:
                    56:12:eb:f6:77:2d:33:60:61:bb:07:c2:92:45:62:
                    45:16:7d:20:aa:87:07:ad:fb:a9:c8:68:85:17:bd:
                    ef:82:7e:69:d7:5d:94:ae:31:c3:36:e1:86:1d:7b:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:0B:98:CB:9D:B1:5C:52:C2:5E:05:52:6F:EB:3B:9C:70:CA:0F
            X509v3 Authority Key Identifier:
                keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/PCELmMudsVxSwl4FUm_rO5xwyg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a280::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:46:e9:cc:b4:fb:05:c1:ee:36:2f:61:de:7d:89:14:1b:
         4a:cd:fe:0c:82:1f:15:f8:52:5e:06:92:36:21:c4:04:63:f3:
         d6:f6:25:b4:b7:a8:25:40:21:33:d3:5f:84:8a:d4:1c:68:5b:
         ee:ea:51:9d:b4:1a:f6:79:43:e5:bc:7a:4d:09:b4:dc:6e:0e:
         9f:71:55:d1:84:71:e1:ce:13:b1:ee:fc:0b:05:71:14:67:01:
         36:ba:3e:5a:55:64:a8:c8:2c:3f:eb:00:2d:ad:d6:ae:b6:a3:
         b9:7a:84:d7:d5:fc:3a:61:bf:a8:34:20:00:b1:e3:ff:22:c4:
         95:55:91:79:45:bb:6d:e7:c5:b5:21:72:77:97:f4:fd:cc:1e:
         65:c3:eb:87:51:71:4a:65:ac:2f:1d:fa:0c:17:90:95:5f:7a:
         99:39:1d:85:ce:3d:bc:58:21:a2:b5:90:96:35:df:da:fd:8c:
         03:c2:b7:a4:87:3f:fb:e0:3d:2d:77:9e:f7:3c:15:6a:e9:83:
         6f:72:26:80:8a:4b:87:52:82:8a:82:a8:d7:d8:a9:c9:df:9b:
         c2:24:61:d1:19:b1:8a:9f:28:24:ea:87:fd:7b:8b:34:b1:78:
         48:a4:dd:bb:e7:b9:e2:e9:9d:1c:3c:81:a5:e6:8b:23:16:09:
         29:31:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----