Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/q-4GgDJtS15jYaxEOZlQXWxJSbI.roa
File:                     q-4GgDJtS15jYaxEOZlQXWxJSbI.roa (raw, json)
Hash identifier:          RvvGCnPbnC0u+h3lrXT0EQBaHEZ7QdRsMrp2y2a8fIg=
Subject key identifier:   AB:EE:06:80:32:6D:4B:5E:63:61:AC:44:39:99:50:5D:6C:49:49:B2
Certificate issuer:       /CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
Certificate serial:       0188765611669CA236AB2493CA6F7C981440
Authority key identifier: EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/q-4GgDJtS15jYaxEOZlQXWxJSbI.roa
Signing time:             Thu 01 Jun 2023 09:42:12 +0000
ROA not before:           Thu 01 Jun 2023 09:42:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13054
IP address blocks:        213.164.64.0/19 maxlen: 24
                          2a03:3500::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:76:56:11:66:9c:a2:36:ab:24:93:ca:6f:7c:98:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd250f341ffcc3613b599ea96e0d19c2e6fe350
        Validity
            Not Before: Jun  1 09:42:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=abee0680326d4b5e6361ac443999505d6c4949b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:c8:00:9b:dc:80:48:32:e0:d5:8d:8c:0e:
                    e7:2a:5a:d4:11:82:f6:34:71:a0:3c:53:12:a4:9a:
                    79:67:f7:99:8c:08:4b:b6:15:bc:c4:5b:5d:1c:a4:
                    7d:b7:92:9d:49:9d:ad:ea:e6:5a:b7:b7:79:0a:2a:
                    9b:69:f1:34:b2:82:50:4a:83:32:77:59:ac:7e:8f:
                    3b:e6:f7:57:a6:b9:27:76:a9:38:82:fb:62:67:10:
                    3a:54:cf:61:69:40:82:77:be:a2:bf:df:6c:e4:7a:
                    f0:56:65:80:d9:96:df:04:51:3f:16:e2:d0:48:fe:
                    f9:b3:62:be:46:30:48:f9:fc:7d:e4:98:d8:24:93:
                    0c:ab:3b:9c:0f:fc:d3:6e:50:05:2d:52:71:4f:9a:
                    77:73:d7:8a:0b:9e:1e:22:89:b9:7d:a1:f9:9d:f4:
                    4c:9b:53:6b:b8:30:51:97:9f:81:1c:9a:63:17:c9:
                    72:1b:01:67:4c:43:ec:e6:45:45:e1:a0:4e:96:36:
                    2a:00:0d:2a:a7:b0:53:83:c0:41:24:9c:1a:0a:22:
                    6f:d2:99:69:1c:62:3a:f9:5e:57:41:c3:89:35:8b:
                    44:bf:1f:4c:70:98:52:f3:97:eb:16:db:00:7e:85:
                    e2:33:1d:18:2b:a4:0b:be:87:12:af:40:95:1c:63:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EE:06:80:32:6D:4B:5E:63:61:AC:44:39:99:50:5D:6C:49:49:B2
            X509v3 Authority Key Identifier:
                keyid:EF:D2:50:F3:41:FF:CC:36:13:B5:99:EA:96:E0:D1:9C:2E:6F:E3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79JQ80H_zDYTtZnqluDRnC5v41A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/q-4GgDJtS15jYaxEOZlQXWxJSbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11df3c-c42a-49cc-956b-2a72176d0abf/1/79JQ80H_zDYTtZnqluDRnC5v41A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.164.64.0/19
                IPv6:
                  2a03:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:14:89:97:1a:39:35:20:d4:d1:b1:56:fd:f0:d9:2f:2d:ea:
         f1:08:dc:c4:eb:96:fd:61:6f:64:ad:0b:13:59:34:91:f9:2b:
         26:06:be:9d:78:be:67:ca:fb:d1:b0:9d:18:8b:fc:ce:4f:be:
         0b:50:69:67:cc:1f:47:e0:ea:0e:7f:03:3c:93:8f:2c:99:df:
         4f:4e:b7:37:d6:fa:cf:84:00:7e:29:54:d8:ea:02:49:d4:fd:
         74:e8:7c:78:83:79:b7:ac:33:c7:e3:22:d6:c0:cd:6b:51:53:
         57:26:45:49:20:83:27:98:b4:b7:15:42:e6:76:12:43:02:c8:
         32:b0:76:be:4b:3d:29:3e:bb:e8:a5:cf:aa:2f:da:3f:49:fb:
         cf:58:3a:5e:35:c6:29:ab:bf:dd:0d:9e:fe:a4:04:62:b4:bd:
         af:8e:63:d5:e6:20:85:6f:43:c3:a7:45:e5:db:74:93:af:00:
         b4:98:6d:58:f6:72:31:76:f2:70:61:05:07:85:83:6e:01:63:
         48:e3:4e:c2:c2:b0:fd:d0:54:f0:ed:8b:b7:86:07:b4:0d:6d:
         8c:cc:80:1f:47:ed:0f:3a:75:5f:f1:f6:4a:f0:67:fc:6e:ea:
         fb:e4:17:36:a9:cd:bb:d6:bc:48:46:0a:6a:67:81:4b:2d:68:
         ef:e9:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----