Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa
File:                     YTymXphgw-bMLjM5K0i72lF4KF8.roa (raw, json)
Hash identifier:          gNZ3cakeYR1iduAe4M5AtUwfM9G1iu2+qFoeA0gYZkE=
Subject key identifier:   61:3C:A6:5E:98:60:C3:E6:CC:2E:33:39:2B:48:BB:DA:51:78:28:5F
Certificate issuer:       /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial:       0186554B28C2AFB6E9002BB7BB03556BD254
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa
Signing time:             Wed 15 Feb 2023 13:37:13 +0000
ROA not before:           Wed 15 Feb 2023 13:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        2a13:5941::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:55:4b:28:c2:af:b6:e9:00:2b:b7:bb:03:55:6b:d2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
        Validity
            Not Before: Feb 15 13:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=613ca65e9860c3e6cc2e33392b48bbda5178285f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:14:73:35:33:1b:e4:42:14:81:3c:a9:b0:
                    1d:73:5f:dc:4e:e5:f5:e1:22:29:d7:8a:6e:1f:50:
                    9d:84:a2:e3:58:31:de:58:ca:28:4f:61:a3:49:3a:
                    cd:79:28:b4:df:d5:6f:27:cb:be:09:93:96:0d:b9:
                    13:f1:de:c8:d5:00:f0:c6:64:b9:7f:7d:20:65:a3:
                    c3:d4:6a:06:b1:c3:d7:a1:9b:22:eb:50:a6:85:4b:
                    42:16:fb:74:c8:30:95:6a:2c:16:30:0b:18:5e:2e:
                    77:4c:b4:f8:13:fc:aa:db:6d:47:2c:2b:be:c9:1e:
                    92:bc:8e:79:ee:c5:24:41:c6:e4:3f:bc:f6:f0:34:
                    ff:57:03:83:10:56:b1:6b:ef:93:df:fe:b2:02:52:
                    66:70:e2:bb:cf:9a:8e:11:7b:f3:d5:bf:a2:6a:06:
                    88:d9:64:05:75:7f:15:b1:5c:21:ed:96:cd:3a:f5:
                    35:ea:6a:53:0a:be:15:92:c0:e5:12:1c:00:83:77:
                    e6:96:a4:cb:ac:16:e8:e1:c7:eb:50:66:de:17:82:
                    74:d4:10:e5:a3:03:71:2e:fb:45:b8:99:57:8a:19:
                    96:e7:fd:6b:e5:dc:db:8c:b1:5c:e6:b2:68:e2:a3:
                    bd:a7:58:59:25:60:77:fc:18:82:c3:2c:34:72:58:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3C:A6:5E:98:60:C3:E6:CC:2E:33:39:2B:48:BB:DA:51:78:28:5F
            X509v3 Authority Key Identifier:
                keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/YTymXphgw-bMLjM5K0i72lF4KF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5941::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:63:32:f2:3a:bf:29:86:4e:a7:66:ee:c9:16:36:63:bf:
         0d:94:b2:9a:04:5d:36:c8:5c:7a:62:b1:8d:eb:ee:b7:54:3f:
         a5:a8:e0:d2:9a:18:95:f8:a4:e9:74:ca:98:22:95:5e:67:85:
         6b:7b:39:be:15:97:c6:89:f5:ab:de:01:3b:95:c3:48:64:eb:
         c5:02:28:70:60:9a:de:65:21:ac:f7:40:42:28:53:53:bb:fc:
         4e:9b:2d:e8:11:5d:ff:72:d9:99:80:1e:4c:e8:d0:fa:46:8d:
         a2:8c:47:59:9b:24:96:12:4e:86:70:9a:56:94:b8:a4:64:52:
         01:a9:11:ec:fa:8b:6d:fc:d8:95:4d:e5:60:8e:74:d1:a2:31:
         95:95:80:6d:a3:3b:35:97:68:2f:86:62:fd:32:8b:bb:fa:cf:
         b7:10:ad:04:28:59:bd:0d:7f:a5:d2:56:03:e3:d7:61:5a:25:
         68:52:92:f2:87:82:1c:50:80:f4:b6:79:fa:1f:50:ed:63:16:
         ff:85:ee:ca:45:74:cc:06:2c:e2:31:d7:bd:36:2f:f9:7d:13:
         aa:ef:07:f8:65:ca:46:6a:84:b3:fd:2a:c8:16:c9:8c:0a:bf:
         0e:e1:99:95:a1:b7:7b:b4:d5:70:9f:57:6a:3a:82:f7:b2:47:
         ba:ad:5a:20
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZVSyjCr7bpACu3uwNVa9JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZTI2NTMxNzljYWZlNWZmNjY1MWM2MDU4YjY3YWQyZDJj
ODQ4NWUwHhcNMjMwMjE1MTMzNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTNjYTY1ZTk4NjBjM2U2Y2MyZTMzMzkyYjQ4YmJkYTUxNzgyODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5EUczUzG+RCFIE8qbAdc1/cTuX1
4SIp14puH1CdhKLjWDHeWMooT2GjSTrNeSi039VvJ8u+CZOWDbkT8d7I1QDwxmS5
f30gZaPD1GoGscPXoZsi61CmhUtCFvt0yDCVaiwWMAsYXi53TLT4E/yq221HLCu+
yR6SvI557sUkQcbkP7z28DT/VwODEFaxa++T3/6yAlJmcOK7z5qOEXvz1b+iagaI
2WQFdX8VsVwh7ZbNOvU16mpTCr4VksDlEhwAg3fmlqTLrBbo4cfrUGbeF4J01BDl
owNxLvtFuJlXihmW5/1r5dzbjLFc5rJo4qO9p1hZJWB3/BiCwyw0cliGEQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGE8pl6YYMPmzC4zOStIu9pReChfMB8GA1UdIwQY
MBaAFOriZTF5yv5f9mUcYFi2etLSyEheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTkt
OTkyZDc5N2Y0YmJiLzEvWVR5bVhwaGd3LWJNTGpNNUswaTcybEY0S0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTktOTkyZDc5N2Y0YmJi
LzEvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhNZQTAN
BgkqhkiG9w0BAQsFAAOCAQEAnkVjMvI6vymGTqdm7skWNmO/DZSymgRdNshcemKx
jevut1Q/pajg0poYlfik6XTKmCKVXmeFa3s5vhWXxon1q94BO5XDSGTrxQIocGCa
3mUhrPdAQihTU7v8Tpst6BFd/3LZmYAeTOjQ+kaNooxHWZsklhJOhnCaVpS4pGRS
AakR7PqLbfzYlU3lYI500aIxlZWAbaM7NZdoL4Zi/TKLu/rPtxCtBChZvQ1/pdJW
A+PXYVolaFKS8oeCHFCA9LZ5+h9Q7WMW/4XuykV0zAYs4jHXvTYv+X0Tqu8H+GXK
RmqEs/0qyBbJjAq/DuGZlaG3e7TVcJ9XajqC97JHuq1aIA==
-----END CERTIFICATE-----