Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/J8uMw-1umrD4TdtoVpREmP6dTjI.roa
File:                     J8uMw-1umrD4TdtoVpREmP6dTjI.roa (raw, json)
Hash identifier:          qb4O8jNBjq7DreqxFfVLrQmyRWJxj1GnNnB1yJ239ew=
Subject key identifier:   27:CB:8C:C3:ED:6E:9A:B0:F8:4D:DB:68:56:94:44:98:FE:9D:4E:32
Certificate issuer:       /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial:       01856F9DCD520AA09C4365962F23C244AACE
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/J8uMw-1umrD4TdtoVpREmP6dTjI.roa
Signing time:             Sun 01 Jan 2023 23:14:50 +0000
ROA not before:           Sun 01 Jan 2023 23:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a13:3c0:3::/48 maxlen: 48
                          2a13:3c0:6::/48 maxlen: 48
                          2a13:3c0:11::/48 maxlen: 48
                          2a13:3c0:1::/48 maxlen: 48
                          2a13:3c0:9::/48 maxlen: 48
                          2a13:3c0:7::/48 maxlen: 48
                          2a13:3c0:2::/48 maxlen: 48
                          2a13:3c0:5::/48 maxlen: 48
                          2a13:3c0:8::/48 maxlen: 48
                          2a13:3c0:10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:cd:52:0a:a0:9c:43:65:96:2f:23:c2:44:aa:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
        Validity
            Not Before: Jan  1 23:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27cb8cc3ed6e9ab0f84ddb6856944498fe9d4e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:e6:3a:56:2a:28:04:b4:3f:98:f0:9e:04:
                    5e:00:99:af:28:dc:ad:e2:8b:6d:04:a8:2a:8b:5f:
                    cd:c0:3f:9c:b3:d2:e1:a2:19:38:55:47:34:76:31:
                    61:86:49:59:e5:84:96:11:d3:33:3b:4b:f2:fb:9b:
                    dd:99:6f:95:dd:96:2d:2b:bb:62:13:e6:f7:84:fb:
                    29:a0:b6:5e:ac:f9:ec:ad:15:30:81:b6:67:96:bd:
                    f2:5b:4e:90:cf:f1:ac:ce:0f:35:7b:2e:ba:0c:6a:
                    74:d6:1f:44:90:e9:51:9a:2c:ed:15:1d:e2:26:73:
                    50:bb:01:fa:8f:cb:f9:e4:39:8d:fe:3b:34:1f:0f:
                    82:b7:44:b9:3b:b6:56:82:3d:46:60:24:e5:ad:6d:
                    3f:55:49:3e:82:9d:c8:da:46:7d:5f:da:ad:e3:c7:
                    3d:5e:1f:56:df:f1:db:01:13:12:3d:b7:3f:0a:af:
                    a2:bd:6e:c5:97:b1:46:d7:14:6e:63:ac:7b:c9:b2:
                    4c:d5:fa:cf:29:4f:1c:a0:8c:9d:eb:54:3f:23:1a:
                    21:fe:e4:4c:e1:a1:4f:bf:4a:37:87:cb:f1:ed:f8:
                    b0:f5:17:1e:f1:9b:1f:78:8f:cb:6e:9f:cc:b3:f1:
                    b3:e6:de:73:2d:ff:0d:cd:5a:78:1e:3e:43:a8:50:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CB:8C:C3:ED:6E:9A:B0:F8:4D:DB:68:56:94:44:98:FE:9D:4E:32
            X509v3 Authority Key Identifier:
                keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/J8uMw-1umrD4TdtoVpREmP6dTjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3c0:1::-2a13:3c0:3:ffff:ffff:ffff:ffff:ffff
                  2a13:3c0:5::-2a13:3c0:9:ffff:ffff:ffff:ffff:ffff
                  2a13:3c0:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:43:c4:a6:6c:0a:35:2a:50:08:99:9a:c4:81:02:5c:a5:
         69:76:b3:b4:ac:a8:5a:4d:28:06:aa:67:43:1a:5f:5f:73:40:
         47:a8:97:66:12:5e:32:89:8e:9b:f0:8e:dd:ab:06:d9:8c:85:
         d6:d0:09:eb:6b:9d:cc:cb:e8:f1:c9:28:99:21:35:dc:dc:40:
         4e:a5:ea:80:6b:df:d0:a3:54:5e:25:01:4a:56:21:cb:34:78:
         85:13:a9:8f:28:74:84:3a:8b:46:9c:2e:df:06:fa:60:9d:24:
         aa:b9:fa:8c:f5:28:6d:22:f8:2f:7e:60:26:87:a6:b0:05:fa:
         70:ab:07:51:49:db:2a:c2:27:2f:22:14:7c:c7:2a:16:a8:cf:
         47:b7:37:69:a9:20:99:31:8d:83:54:1f:06:52:f9:07:2c:a0:
         b1:e7:36:35:c6:c7:6e:cb:0d:62:77:1f:be:87:fa:7e:e9:c3:
         fe:74:36:51:99:f4:f5:fc:48:25:91:54:0a:bd:bb:d0:67:fe:
         30:55:1f:2c:3e:dd:a7:23:be:83:29:b3:ad:f0:5b:37:e4:db:
         b0:94:4d:10:f1:68:e6:70:1e:5f:e6:c6:af:66:81:9d:9f:2d:
         b3:3e:04:20:ba:41:ff:14:f2:56:7f:a0:57:ff:0d:6c:f3:3b:
         76:53:a9:df
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYVvnc1SCqCcQ2WWLyPCRKrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2
MWE1MzYwHhcNMjMwMTAxMjMxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2NiOGNjM2VkNmU5YWIwZjg0ZGRiNjg1Njk0NDQ5OGZlOWQ0ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ojmOlYqKAS0P5jwngReAJmvKNyt
4ottBKgqi1/NwD+cs9Lhohk4VUc0djFhhklZ5YSWEdMzO0vy+5vdmW+V3ZYtK7ti
E+b3hPspoLZerPnsrRUwgbZnlr3yW06Qz/Gszg81ey66DGp01h9EkOlRmiztFR3i
JnNQuwH6j8v55DmN/js0Hw+Ct0S5O7ZWgj1GYCTlrW0/VUk+gp3I2kZ9X9qt48c9
Xh9W3/HbARMSPbc/Cq+ivW7Fl7FG1xRuY6x7ybJM1frPKU8coIyd61Q/Ixoh/uRM
4aFPv0o3h8vx7fiw9Rce8ZsfeI/Lbp/Ms/Gz5t5zLf8NzVp4Hj5DqFDXYwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFCfLjMPtbpqw+E3baFaURJj+nU4yMB8GA1UdIwQY
MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt
MzFhYjMyZmY3YzY4LzEvSjh1TXctMXVtckQ0VGR0b1ZwUkVtUDZkVGpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4
LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwAqEwPA
AAEDBwIqEwPAAAAwEgMHACoTA8AABQMHASoTA8AACAMHASoTA8AAEDANBgkqhkiG
9w0BAQsFAAOCAQEAiLFDxKZsCjUqUAiZmsSBAlylaXaztKyoWk0oBqpnQxpfX3NA
R6iXZhJeMomOm/CO3asG2YyF1tAJ62udzMvo8ckomSE13NxATqXqgGvf0KNUXiUB
SlYhyzR4hROpjyh0hDqLRpwu3wb6YJ0kqrn6jPUobSL4L35gJoemsAX6cKsHUUnb
KsInLyIUfMcqFqjPR7c3aakgmTGNg1QfBlL5Byygsec2NcbHbssNYncfvof6funD
/nQ2UZn09fxIJZFUCr270Gf+MFUfLD7dpyO+gymzrfBbN+TbsJRNEPFo5nAeX+bG
r2aBnZ8tsz4EILpB/xTyVn+gV/8NbPM7dlOp3w==
-----END CERTIFICATE-----