Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/w4F2HZ8CfbuRhwE5noTOyoth2ew.roa
File:                     w4F2HZ8CfbuRhwE5noTOyoth2ew.roa (raw, json)
Hash identifier:          PjwFlGPg2yhARwNZGL4TpkjipPtulhgUkkoHcsQIlDw=
Subject key identifier:   C3:81:76:1D:9F:02:7D:BB:91:87:01:39:9E:84:CE:CA:8B:61:D9:EC
Certificate issuer:       /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial:       018704B164890C9E13BFDFEE591F66C6B63F
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/w4F2HZ8CfbuRhwE5noTOyoth2ew.roa
Signing time:             Tue 21 Mar 2023 15:02:27 +0000
ROA not before:           Tue 21 Mar 2023 15:02:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51236
IP address blocks:        2a13:1080::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:b1:64:89:0c:9e:13:bf:df:ee:59:1f:66:c6:b6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
        Validity
            Not Before: Mar 21 15:02:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c381761d9f027dbb918701399e84ceca8b61d9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:83:e3:1f:17:01:95:53:f9:ec:fe:e6:0f:
                    be:f1:12:e0:f8:7f:b9:c5:ff:2f:f7:2a:fb:76:bc:
                    d8:9b:de:06:08:fe:fd:02:0b:01:12:2b:71:20:da:
                    f5:77:16:3b:71:20:97:51:0d:be:e5:2e:98:13:9c:
                    58:4b:8c:41:e1:2f:f7:f0:38:e9:63:5f:9b:69:87:
                    95:51:5a:3e:95:24:8d:13:31:64:a0:9e:84:c9:b2:
                    bf:6a:45:36:5a:72:ff:83:2c:a5:cc:52:82:ea:fe:
                    a4:26:f0:95:36:91:9d:2b:ef:e3:51:46:43:0e:b1:
                    f2:bc:5f:2b:04:1e:53:96:26:eb:00:09:6d:d7:65:
                    9d:1e:8a:14:98:89:2b:f8:c9:6e:4f:0e:0b:53:0c:
                    de:ca:f8:6a:b0:b8:f9:90:69:b1:69:84:6d:1f:32:
                    f3:7d:b3:4f:f0:af:39:a1:ee:db:b9:ad:80:9e:37:
                    b3:24:65:a7:15:c8:d1:94:98:2e:cf:11:0d:56:20:
                    5b:13:62:be:44:5d:7b:4b:2b:e1:48:01:f0:6d:7a:
                    b9:2a:a7:fb:69:21:e3:38:d3:9c:b3:7e:85:44:c3:
                    d2:97:ec:e3:86:89:74:18:bf:ac:8b:54:27:d0:e9:
                    29:37:2f:cb:44:02:8b:30:a2:1e:8a:27:26:77:36:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:76:1D:9F:02:7D:BB:91:87:01:39:9E:84:CE:CA:8B:61:D9:EC
            X509v3 Authority Key Identifier:
                keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/w4F2HZ8CfbuRhwE5noTOyoth2ew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1080::/29

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:b6:be:5b:78:d1:d7:15:de:ea:c5:02:13:e0:90:7e:ce:
         16:7d:6d:1c:a0:24:27:27:09:4c:d1:da:02:9f:84:c7:e0:0d:
         89:56:2f:bc:a5:74:7b:3e:61:10:2e:54:31:52:35:7c:cd:44:
         25:95:86:e6:4c:ff:4b:7a:94:da:17:7f:cd:38:83:11:79:05:
         56:48:6a:b5:e6:c5:d5:29:02:fd:18:19:5d:12:ac:8f:66:21:
         5a:0f:5c:be:f2:17:f3:f1:75:52:f2:6c:c4:0a:75:4b:e1:e0:
         89:87:dc:dd:e8:68:ea:15:c8:0e:4a:7b:d3:9e:0e:71:6c:4b:
         12:51:3d:51:17:79:2f:03:05:2f:2e:51:7e:5a:ee:27:0f:eb:
         01:4a:65:2c:69:ca:f2:fb:4d:89:7f:7f:a3:60:0b:78:46:84:
         34:e3:fc:36:75:29:cd:8b:bb:25:6f:59:86:2b:b7:6e:e8:95:
         c9:29:01:8a:3b:3e:73:99:9b:09:ad:20:5b:f2:82:b0:ce:75:
         f8:61:64:3f:e3:a7:4b:ac:48:ed:b3:37:35:b8:8b:8f:0e:d1:
         53:b8:af:46:f2:27:dd:bf:e6:ab:ba:44:f9:66:9f:c2:35:30:
         dc:68:91:1e:20:1f:3d:2a:67:a6:b2:69:58:79:58:d7:ba:55:
         16:af:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----