Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/Egf9WFTTU3KMf-GQ2Gr7lqVu7iI.roa
File:                     Egf9WFTTU3KMf-GQ2Gr7lqVu7iI.roa (raw, json)
Hash identifier:          L2ofgITUS+HDye5t/P9YQcChq8/XXHm6Oko15BzgHgk=
Subject key identifier:   12:07:FD:58:54:D3:53:72:8C:7F:E1:90:D8:6A:FB:96:A5:6E:EE:22
Certificate issuer:       /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial:       018A6E0854753848B26BFCD329D11D722895
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/Egf9WFTTU3KMf-GQ2Gr7lqVu7iI.roa
Signing time:             Thu 07 Sep 2023 05:05:54 +0000
ROA not before:           Thu 07 Sep 2023 05:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216376
IP address blocks:        2a13:ab40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6e:08:54:75:38:48:b2:6b:fc:d3:29:d1:1d:72:28:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
        Validity
            Not Before: Sep  7 05:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1207fd5854d353728c7fe190d86afb96a56eee22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:89:d4:5e:88:c7:a5:0c:fd:17:1c:b2:80:
                    ef:a0:6f:50:ad:02:d8:07:d9:b1:33:75:ab:90:79:
                    54:1c:86:6d:7a:8d:96:a2:6d:5d:6e:f1:d9:14:3e:
                    2c:d6:4f:f4:8d:54:1d:20:56:01:a2:f5:95:d8:38:
                    e6:40:11:e5:e9:17:fe:25:b3:84:4f:24:f0:24:f3:
                    e6:0d:ac:b1:1f:2e:5c:6c:d0:92:74:e3:a7:6b:eb:
                    8a:ea:66:39:5e:8e:bb:c6:95:e5:06:56:6c:58:f9:
                    3a:a7:d0:61:ce:7d:fc:cd:40:00:2a:1e:d1:64:c0:
                    54:41:60:de:bb:02:7a:d5:ca:0a:cd:e8:b7:bb:c1:
                    51:c9:73:64:87:5c:3d:28:84:c9:78:80:5c:f6:c5:
                    b1:47:9f:30:04:4a:11:a7:a8:1b:38:02:e0:d1:c1:
                    56:d1:1b:a8:74:ae:fb:11:12:a3:33:5f:8b:26:11:
                    1d:f8:14:1e:41:8f:52:ff:86:01:e7:f3:61:a0:45:
                    f8:18:33:3d:f8:e4:36:74:05:f1:46:11:46:64:36:
                    f8:15:9d:7c:a0:32:8b:49:5b:ed:3a:9a:1a:62:bd:
                    66:93:ad:a5:9e:c9:ed:14:ba:8c:15:17:ce:84:ad:
                    c7:3f:f5:71:ba:7b:54:07:c3:84:b1:ac:09:6d:02:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:FD:58:54:D3:53:72:8C:7F:E1:90:D8:6A:FB:96:A5:6E:EE:22
            X509v3 Authority Key Identifier:
                keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/Egf9WFTTU3KMf-GQ2Gr7lqVu7iI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ab40::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:30:20:39:99:8e:18:20:94:7c:27:67:63:00:92:da:c6:00:
         9a:76:04:a9:9d:a6:ca:39:09:33:c8:fa:a0:b6:57:31:7f:41:
         65:33:cb:ee:14:8a:9d:c3:75:4a:1f:a2:3d:86:dc:31:95:fd:
         0c:2f:11:3e:1b:c1:d0:7b:7a:86:98:bd:b7:95:22:c2:a1:9d:
         36:32:4b:67:5a:78:8d:a9:18:82:ed:ba:cb:8b:a7:26:63:7d:
         bf:87:77:d7:ab:ba:7d:92:86:1d:64:a6:89:85:a2:2a:6b:e6:
         4f:04:bc:f4:3c:b5:38:a9:f6:33:df:19:81:6a:71:96:f6:ef:
         11:7f:e6:3e:a0:53:94:42:d9:2e:4d:1b:ba:b8:9a:55:cc:86:
         9c:5d:71:5b:bb:7b:70:5e:3c:38:63:62:7c:26:bb:f2:66:b7:
         a8:a7:9d:11:34:e1:be:68:57:2b:ab:62:dd:ba:40:0f:42:1e:
         a9:0a:be:35:32:82:64:52:d6:a1:42:b3:9f:1c:23:b5:56:74:
         0c:fe:f6:85:08:54:32:e0:ef:2e:11:b4:4d:40:7c:0e:fd:17:
         c4:10:90:7d:17:d5:23:e7:85:51:2a:4c:db:ce:86:01:bd:90:
         26:cb:8e:a5:06:8b:32:65:80:c5:b5:dd:56:cf:cc:f8:b0:eb:
         3c:91:30:0d
-----BEGIN CERTIFICATE-----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