Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pj3n1Yqsy_3ZT3xwhU_6IK95hW0.roa
File:                     pj3n1Yqsy_3ZT3xwhU_6IK95hW0.roa (raw, json)
Hash identifier:          S18DByQ02BXTUiLonVlLM2/lBBY/6u4cLUvqCnb13+U=
Subject key identifier:   A6:3D:E7:D5:8A:AC:CB:FD:D9:4F:7C:70:85:4F:FA:20:AF:79:85:6D
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01870490702D14A34543EAFD26DCE2896AAE
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pj3n1Yqsy_3ZT3xwhU_6IK95hW0.roa
Signing time:             Tue 21 Mar 2023 14:26:27 +0000
ROA not before:           Tue 21 Mar 2023 14:26:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        2a13:3f85::/32 maxlen: 32
                          2a13:3f83::/32 maxlen: 32
                          2a13:3f87::/32 maxlen: 32
                          2a13:3f84::/32 maxlen: 32
                          2a13:3f80::/32 maxlen: 32
                          2a13:3f86::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:90:70:2d:14:a3:45:43:ea:fd:26:dc:e2:89:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Mar 21 14:26:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a63de7d58aaccbfdd94f7c70854ffa20af79856d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:62:65:86:34:f7:8b:77:ce:35:59:1a:42:
                    53:87:c8:79:a3:14:7e:94:75:99:97:83:fb:8b:6a:
                    28:f5:b9:46:e2:5c:53:85:ea:a6:b4:ee:e5:04:aa:
                    a7:e7:3c:7e:26:dd:7b:a5:2f:59:02:be:94:8a:6d:
                    df:b8:aa:02:69:b5:e5:81:0a:b5:a5:1b:2d:0a:99:
                    01:22:ef:82:8f:c1:81:8a:79:c3:74:81:df:60:cd:
                    67:3d:51:48:db:56:0f:55:5d:18:e4:f8:c0:e8:f9:
                    ef:3c:45:d5:6e:32:37:91:e4:94:a4:47:ed:f1:d1:
                    fa:d0:83:03:8a:d7:87:30:be:16:35:df:43:7a:a8:
                    04:7d:7f:ec:53:3b:63:6d:4f:d9:cd:4d:34:35:b7:
                    3a:eb:d9:8d:2f:fd:f5:cd:2b:fe:50:39:38:d8:32:
                    3b:22:63:c0:19:83:cb:17:ca:f9:36:e0:62:ae:61:
                    55:cf:d9:d9:cb:0d:31:27:87:5a:72:1f:6f:97:e0:
                    4b:ba:e6:10:e3:21:09:ba:d5:74:95:6b:6c:e6:6e:
                    be:07:ce:f7:a1:11:b2:56:8b:95:6c:b1:d6:23:f7:
                    d5:06:51:d8:97:e8:5a:38:cb:8b:21:ae:1c:62:3c:
                    81:57:81:48:e6:b7:2e:bd:df:1d:c6:2a:51:ee:1b:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:E7:D5:8A:AC:CB:FD:D9:4F:7C:70:85:4F:FA:20:AF:79:85:6D
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pj3n1Yqsy_3ZT3xwhU_6IK95hW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3f80::/32
                  2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         62:01:35:0b:96:02:92:68:8a:24:79:61:a9:5b:e4:e5:41:76:
         7b:e9:5b:c9:13:05:6e:dd:28:9d:2b:60:f3:96:7f:ac:a3:28:
         ef:c6:97:f0:9f:4f:52:ea:37:80:e8:90:4c:5f:42:f6:da:56:
         bd:34:33:54:23:20:17:d2:f7:63:33:a6:d0:1f:24:0b:13:40:
         b4:a1:94:03:71:9c:0a:32:00:b5:06:b3:59:79:30:9b:54:74:
         b2:05:b0:5e:3c:ff:01:96:b7:37:49:5f:a4:f1:5f:c2:59:65:
         aa:d7:ba:89:ef:64:ef:ed:11:7b:34:95:77:68:be:6d:de:70:
         71:be:6d:4e:4d:17:93:84:cf:c1:76:20:b5:76:93:0b:87:e1:
         cf:eb:bd:b2:c8:f1:33:2a:c0:d5:db:9f:0e:1c:6a:d3:1f:08:
         4a:cb:77:ae:26:b4:00:93:67:67:1a:b0:b3:3f:67:11:2f:46:
         17:f9:2e:9e:c6:1c:75:b7:01:26:b1:e2:19:2d:08:09:fe:51:
         dd:50:6e:92:4b:9b:10:c9:12:2e:6b:f2:4a:a4:7e:9d:ae:87:
         e5:06:3b:20:48:85:47:34:87:1d:fb:7f:ed:bf:cd:0c:01:12:
         22:18:53:e8:e7:35:cd:61:aa:21:fd:82:c1:a8:ea:74:ac:a6:
         61:ff:3c:df
-----BEGIN CERTIFICATE-----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