Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/SNWHKIVxDHM-GGzpaxrxf9YFyO4.roa
File:                     SNWHKIVxDHM-GGzpaxrxf9YFyO4.roa (raw, json)
Hash identifier:          o67JRKvIKK8w7lOUFdyE3z4lzCI9xfbbqXO/H30o3Lw=
Subject key identifier:   48:D5:87:28:85:71:0C:73:3E:18:6C:E9:6B:1A:F1:7F:D6:05:C8:EE
Certificate issuer:       /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial:       018AA2FB9044756DDC6C35DED72D52B62297
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/SNWHKIVxDHM-GGzpaxrxf9YFyO4.roa
Signing time:             Sun 17 Sep 2023 11:51:50 +0000
ROA not before:           Sun 17 Sep 2023 11:51:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207726
IP address blocks:        2a13:5ac0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a2:fb:90:44:75:6d:dc:6c:35:de:d7:2d:52:b6:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
        Validity
            Not Before: Sep 17 11:51:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48d5872885710c733e186ce96b1af17fd605c8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:54:e6:26:72:eb:c8:bd:5b:9e:eb:e2:30:
                    d4:90:55:95:88:04:46:3c:8f:54:88:89:6c:81:df:
                    26:01:45:2a:45:d9:17:a2:83:e7:03:73:d6:84:07:
                    2a:74:32:77:be:28:a2:c8:3f:8b:82:c0:d9:e7:48:
                    27:b4:fe:ff:34:cc:6a:5b:fe:b9:d8:a3:81:f5:86:
                    c8:86:9d:0d:b4:b7:b8:ce:9d:9f:dd:af:30:8c:72:
                    03:e6:79:76:34:9a:81:55:56:cf:00:67:f1:77:f9:
                    5d:53:15:d3:5e:81:f5:34:b6:4d:c4:23:78:24:14:
                    39:f4:87:b2:93:25:43:3e:b9:92:b9:1b:c5:3f:c1:
                    d4:82:81:11:21:b5:b9:c3:36:07:84:07:78:56:5b:
                    ae:8e:59:33:eb:5b:a7:99:a8:41:f8:9e:b5:fd:6d:
                    c7:5f:fb:f9:25:75:9c:45:db:c3:da:5a:a3:04:27:
                    6d:ab:3c:31:b2:c7:f7:4e:48:0b:01:e6:69:88:89:
                    62:f5:4c:9b:a5:be:1b:e8:59:f4:af:82:8f:9d:c6:
                    f8:07:c2:d8:f2:4f:8b:87:b2:6a:42:c2:67:1e:cf:
                    28:46:3c:b3:1c:81:ee:9b:f1:5d:51:65:d0:86:3b:
                    91:b7:91:42:d8:fc:99:4c:c2:3b:cc:19:1c:56:c5:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:87:28:85:71:0C:73:3E:18:6C:E9:6B:1A:F1:7F:D6:05:C8:EE
            X509v3 Authority Key Identifier:
                keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/SNWHKIVxDHM-GGzpaxrxf9YFyO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5ac0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:71:2b:3c:f0:48:f5:5f:47:08:a2:39:7b:b7:cb:47:58:9c:
         af:f2:5e:a3:a2:e3:2c:46:9a:7c:be:6b:40:10:b9:a5:b3:a0:
         91:eb:8a:f2:5f:b9:b6:04:6d:44:c2:f8:8a:6b:ae:1f:9b:97:
         97:b5:f5:4b:04:99:b1:f8:bf:4a:42:6e:23:e2:15:b1:4a:bb:
         9f:0c:70:e4:90:0b:40:06:13:52:42:79:fa:63:17:bc:3b:bb:
         ce:6b:e0:f5:5d:0f:08:c5:60:f4:d5:f1:13:26:72:46:26:62:
         7d:75:b0:bf:05:0a:5f:62:d4:98:1e:45:ae:91:83:3c:54:7c:
         80:cc:d4:0e:5c:96:d3:b4:ef:c8:38:9e:03:39:4b:36:d8:1e:
         49:36:02:ab:48:9b:0f:be:bc:ca:90:e5:7f:1e:a2:0d:52:fd:
         36:a5:5c:27:fe:51:8e:0d:b2:d7:7a:11:96:44:d0:01:01:69:
         84:62:54:8a:ca:fb:76:dc:e3:90:b9:66:f0:4e:71:a1:79:ea:
         4f:fa:9a:c0:75:bf:a6:61:17:fe:bc:20:57:25:7c:3b:70:86:
         a1:ec:16:ab:81:c8:c5:86:20:d5:a9:cb:5c:7b:c4:1c:02:92:
         3d:80:33:3c:eb:a6:f9:39:f7:72:86:30:26:49:8b:4d:38:24:
         30:79:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----