Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa
File:                     Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa (raw, json)
Hash identifier:          2FTgzCflK0elb/ej4du0Ie3/YYRq9WMknjp0JK0WE8A=
Subject key identifier:   42:2F:A1:40:02:1B:D8:98:AB:3A:9D:EB:30:67:CB:19:E2:F1:14:20
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       01863AF898DDBD387309BDCE903A0A52A336
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa
Signing time:             Fri 10 Feb 2023 10:56:55 +0000
ROA not before:           Fri 10 Feb 2023 10:56:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213320
IP address blocks:        2a13:8a00::/29 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:f8:98:dd:bd:38:73:09:bd:ce:90:3a:0a:52:a3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: Feb 10 10:56:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=422fa140021bd898ab3a9deb3067cb19e2f11420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:b4:38:a7:61:a0:ce:fa:71:4a:20:3b:4b:
                    af:49:ea:7c:65:88:5d:ea:98:fc:dd:ba:20:67:96:
                    9f:79:fb:42:96:ca:8b:f1:ed:52:03:9c:66:72:c8:
                    51:f4:f5:58:c1:a1:85:35:a5:e2:95:55:10:c8:51:
                    8a:8f:72:e1:5d:bc:57:d6:9e:bb:a7:a8:34:ff:a4:
                    ca:fd:a4:a8:68:7b:ef:e1:88:8e:a8:9c:1e:3b:5f:
                    86:e7:59:bb:79:42:03:e3:be:e5:c2:96:39:dc:da:
                    f4:5a:9b:95:b2:f8:ce:ce:cd:9a:77:95:db:81:a0:
                    05:62:9d:82:13:81:0a:60:dd:86:c5:f9:28:c8:7b:
                    60:66:a9:04:8f:46:24:6c:09:2f:47:59:25:0e:be:
                    db:d5:db:b3:24:27:30:ed:cc:0e:f3:57:d0:f8:99:
                    08:a5:13:50:f0:1a:66:21:46:f8:66:cc:4d:10:6e:
                    5a:43:8d:37:24:a1:3c:f3:2b:25:46:24:8f:9c:d0:
                    84:6a:86:62:82:32:8c:7f:14:61:f6:5f:83:4a:3f:
                    9a:11:35:30:c8:5e:75:8b:bb:c9:a8:ce:6f:86:39:
                    21:fe:83:da:35:f8:1a:8e:ab:93:81:58:42:1c:1b:
                    c4:8a:06:d5:6e:d9:a9:2e:c9:0e:98:53:44:ef:6a:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:A1:40:02:1B:D8:98:AB:3A:9D:EB:30:67:CB:19:E2:F1:14:20
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/Qi-hQAIb2JirOp3rMGfLGeLxFCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:8a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         47:f6:23:9a:a6:1e:fe:d9:1f:66:7d:f2:b8:a6:1d:41:93:bb:
         fc:3c:98:0b:81:2e:47:82:0d:e7:9a:c7:07:09:8e:2a:b3:b8:
         b1:6f:46:4c:55:66:45:32:a8:c0:6b:94:72:86:e3:5e:e1:4c:
         58:df:89:a5:8b:92:7f:bd:22:6b:df:7b:20:0d:87:e5:23:07:
         cd:54:a1:28:1e:c3:96:86:2b:99:09:2c:91:f8:e1:4a:14:21:
         5b:54:14:da:bc:41:9c:c0:19:ac:4e:e5:35:f2:82:22:a1:ec:
         24:67:01:09:b3:9d:54:9c:cd:ee:0b:10:c2:19:5e:90:39:1e:
         d5:dc:92:d3:30:c8:3f:8c:dc:af:a3:df:72:00:2f:6a:dd:6c:
         b7:50:f5:70:e8:f2:49:c6:c8:c6:61:36:f4:96:a9:d3:44:28:
         77:24:03:88:bb:ea:3e:a6:d3:a5:43:63:dc:ae:4b:15:85:9a:
         89:50:4d:b4:86:56:7e:11:bd:c4:5e:40:5a:1d:71:ba:a3:89:
         f7:6a:dd:b6:6d:a8:f1:24:53:92:88:90:50:85:a5:ad:39:9a:
         ea:fb:36:53:b5:5c:6d:1e:4e:c3:2b:f0:03:dc:54:f0:b2:27:
         81:22:30:08:d5:93:cf:37:94:1c:28:85:9a:1f:bb:84:e6:4e:
         05:21:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----