Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mSm13u_3vpDTrdI5R-8MnJSuJxw.roa
File:                     mSm13u_3vpDTrdI5R-8MnJSuJxw.roa (raw, json)
Hash identifier:          06i70APaJHjoVHzHzTDUFQfvGpMfWPsuSIbZcP1yvQs=
Subject key identifier:   99:29:B5:DE:EF:F7:BE:90:D3:AD:D2:39:47:EF:0C:9C:94:AE:27:1C
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018692CD7CFEA73AA876E34E4AAE0E412BC4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mSm13u_3vpDTrdI5R-8MnJSuJxw.roa
Signing time:             Mon 27 Feb 2023 12:16:25 +0000
ROA not before:           Mon 27 Feb 2023 12:16:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203629
IP address blocks:        2a0c:77c3::/32 maxlen: 32
                          2a0d:3884::/32 maxlen: 32
                          2a0d:3880::/32 maxlen: 32
                          2a0c:77c7::/32 maxlen: 32
                          2a0d:3883::/32 maxlen: 32
                          2a0d:3885::/32 maxlen: 32
                          2a0c:77c0::/32 maxlen: 32
                          2a0c:77c6::/32 maxlen: 32
                          2a0d:3882::/32 maxlen: 32
                          2a0c:77c5::/32 maxlen: 32
                          2a0c:77c1::/32 maxlen: 32
                          2a0d:3886::/32 maxlen: 32
                          2a0c:77c4::/32 maxlen: 32
                          2a0c:77c2::/32 maxlen: 32
                          2a0d:3887::/32 maxlen: 32
                          2a0d:3881::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:cd:7c:fe:a7:3a:a8:76:e3:4e:4a:ae:0e:41:2b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Feb 27 12:16:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9929b5deeff7be90d3add23947ef0c9c94ae271c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:69:04:1b:ef:de:4e:7b:db:2f:81:74:55:
                    7d:72:18:7e:93:07:df:bb:5a:fe:d8:d9:7a:7f:19:
                    3f:56:1f:3d:11:92:29:04:84:94:10:6f:2f:9d:c8:
                    48:b8:cb:d5:f4:c2:62:15:b9:dd:b5:de:d6:60:11:
                    f5:4a:92:d2:ef:72:3b:bb:00:13:99:fb:7a:0c:a6:
                    b5:85:80:61:e8:d8:c1:60:98:ee:dd:df:17:4f:0f:
                    08:63:ab:73:5c:27:5f:21:35:da:80:b8:c4:07:28:
                    45:d8:31:9d:3f:50:96:7a:a6:c9:b2:31:c3:78:9f:
                    d9:68:1c:59:dc:9c:e4:32:d5:83:2d:bd:a7:fa:a0:
                    99:8c:10:43:d6:72:ad:9b:e7:bc:d1:b6:8d:d7:0a:
                    e3:8c:19:e1:3c:62:31:9b:84:da:fc:93:08:f4:af:
                    69:fb:04:e3:28:9d:53:d2:d1:fc:59:97:7f:a2:27:
                    c3:97:00:8e:a2:a4:31:2a:74:2d:dd:9a:89:e6:0f:
                    a4:53:2e:d3:dd:1a:e0:71:f6:02:fa:dc:21:fd:01:
                    c6:42:93:e4:89:c7:f2:c2:74:35:0d:30:6e:a1:64:
                    9e:ba:b6:d8:fb:f7:1b:33:f6:37:be:55:42:13:a2:
                    70:5f:ef:43:26:b9:81:38:0e:08:0c:8e:8e:40:d4:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:29:B5:DE:EF:F7:BE:90:D3:AD:D2:39:47:EF:0C:9C:94:AE:27:1C
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mSm13u_3vpDTrdI5R-8MnJSuJxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:77c0::/29
                  2a0d:3880::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:b3:c2:3f:fb:9a:77:e9:28:29:32:f6:ea:a6:a3:d1:d2:
         56:8b:50:5b:eb:39:4c:b9:c6:ee:36:69:53:19:00:6d:b1:af:
         ec:d9:15:54:6a:84:c3:13:b3:99:40:54:24:3f:73:e3:f9:44:
         a3:a6:81:09:24:44:1d:bc:b6:bd:02:86:ed:b2:37:f0:c4:e3:
         51:16:bb:6b:eb:e1:73:38:ed:30:e3:44:ff:57:b2:56:93:1c:
         7a:8c:21:08:1e:cc:b8:04:09:46:2b:f3:ac:a3:ee:ac:52:86:
         9d:28:ce:e4:ba:e0:dd:e3:10:7e:b4:35:0e:76:df:d1:93:df:
         b8:7a:2c:46:e7:ec:2f:d1:3f:69:62:14:e0:e4:8d:f2:89:c7:
         48:67:e1:94:67:7a:5c:a1:fc:77:da:c4:54:c0:aa:0c:67:7a:
         d8:bc:60:29:47:85:e4:6f:12:ed:7c:41:9d:f1:38:42:87:22:
         80:00:ea:80:12:4d:61:23:e0:b2:3d:30:bb:94:22:d6:13:b9:
         3a:ef:ab:4d:9a:2c:b0:92:b7:6c:b8:50:67:0a:dc:4e:f9:9c:
         ee:ea:9d:e0:b0:d0:39:07:60:bc:92:9c:47:8a:de:e9:b4:ca:
         4b:6a:f1:bb:57:00:78:d1:f8:81:7e:57:f0:34:2a:bc:62:d6:
         4b:00:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----