Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/EgGnkCOvmfPlS1JaWSbgJGf0aFc.roa
File:                     EgGnkCOvmfPlS1JaWSbgJGf0aFc.roa (raw, json)
Hash identifier:          TJTIBOtq1iAo4CWr5/w+tO5eqIlY5IXiIWpTYVRyAO8=
Subject key identifier:   12:01:A7:90:23:AF:99:F3:E5:4B:52:5A:59:26:E0:24:67:F4:68:57
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       01856F9DCEE8BF4165DD65255B2772A023D7
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/EgGnkCOvmfPlS1JaWSbgJGf0aFc.roa
Signing time:             Sun 01 Jan 2023 23:14:51 +0000
ROA not before:           Sun 01 Jan 2023 23:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51844
IP address blocks:        2a13:3c0:103::/48 maxlen: 48
                          2a13:3c0:101::/48 maxlen: 48
                          2a13:3c0:104::/48 maxlen: 48
                          2a13:3c0:102::/48 maxlen: 48
                          2a13:3c0:105::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:ce:e8:bf:41:65:dd:65:25:5b:27:72:a0:23:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Jan  1 23:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1201a79023af99f3e54b525a5926e02467f46857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:87:fe:b9:f3:da:f8:3d:85:09:a2:a7:47:
                    ed:e0:4b:55:73:d0:7a:df:ec:87:39:4b:9e:34:6b:
                    06:eb:fe:17:23:4f:17:2c:54:7f:f4:94:b7:d5:50:
                    de:28:7c:a5:ef:50:ee:b9:d4:96:9b:f4:00:fb:29:
                    1c:de:be:ae:37:bf:41:bc:fa:54:90:75:0f:cf:55:
                    2e:7a:17:ed:5e:b1:44:61:6f:32:a0:54:3f:df:51:
                    ea:fb:b2:5d:c4:f0:42:a4:82:2d:27:ad:e1:cf:3d:
                    79:8f:18:49:fc:36:34:1e:bf:86:5e:9e:f7:51:46:
                    5d:df:11:51:2f:b4:5d:00:df:b1:a1:cf:71:4c:82:
                    7f:71:7f:2b:ff:52:b6:f2:ad:5c:81:93:c5:e6:fe:
                    9a:45:c6:bb:8b:cb:2d:6d:fd:ea:07:da:c1:96:a3:
                    47:fb:25:64:c9:99:48:b2:30:f0:5d:ca:0b:7d:7c:
                    97:c6:e0:54:ad:de:4b:f9:6f:02:6b:9e:3c:7e:da:
                    62:9a:35:ac:21:a0:41:02:c2:5a:3a:dd:83:96:27:
                    d2:6b:1c:8f:db:48:26:06:42:a2:0a:09:5e:6f:43:
                    da:17:88:e9:46:f6:40:35:a4:7d:16:5c:e6:6a:01:
                    bf:9b:85:77:80:89:f0:b5:a2:68:da:0b:7a:88:cb:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:01:A7:90:23:AF:99:F3:E5:4B:52:5A:59:26:E0:24:67:F4:68:57
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/EgGnkCOvmfPlS1JaWSbgJGf0aFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3c0:101::-2a13:3c0:105:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:9b:0e:5b:86:7d:fa:54:58:ab:13:c2:85:a0:21:61:a2:
         d2:0f:72:cb:a0:ef:ba:84:2e:f7:9b:86:a2:46:01:db:42:5e:
         45:33:e0:e0:b4:b2:4a:cf:39:5a:fa:40:9b:bf:46:2e:69:ae:
         16:86:5e:d8:33:8c:10:68:9b:f8:4d:7e:68:09:59:f6:eb:92:
         3e:d2:6b:ce:1f:e1:bf:32:d6:f4:c2:ac:87:d3:41:2a:51:18:
         5e:10:88:d4:5f:c9:2c:3e:aa:d3:0a:b3:26:49:74:4a:d6:13:
         92:f0:40:25:4f:81:51:c0:38:dc:d4:61:bb:b7:91:db:e5:56:
         73:51:4d:6b:5d:36:c0:fe:02:bd:f8:52:6c:d4:d5:56:73:3e:
         9d:a9:34:bf:82:41:aa:c7:e5:b5:81:b0:55:1c:b6:da:b1:bb:
         eb:9d:bf:84:84:88:8b:f2:f1:e5:88:d2:c3:fb:5c:ac:4b:b0:
         ce:b5:1f:b0:7b:69:61:01:07:a8:10:ca:d3:42:38:17:35:94:
         ca:51:dd:07:d0:d9:6e:88:fc:26:09:4c:f8:50:c9:fe:f6:df:
         0d:32:a8:2d:8c:62:8b:05:fd:ae:0a:05:7f:cc:01:48:68:f3:
         ec:cb:56:5f:97:7f:c0:5f:e3:43:a9:03:b5:12:2a:d2:a5:1c:
         ad:9c:96:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----