Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/lhcSI_-QTrineKodOwinfl_HsYo.roa
File:                     lhcSI_-QTrineKodOwinfl_HsYo.roa (raw, json)
Hash identifier:          42HtscgL4OhbYctcE1Gmri1bZEeRdfbeQfKfOJEUzJI=
Subject key identifier:   96:17:12:23:FF:90:4E:B8:A7:78:AA:1D:3B:08:A7:7E:5F:C7:B1:8A
Certificate issuer:       /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial:       018C14DAA08E5835B7554C2C095E75F37787
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/lhcSI_-QTrineKodOwinfl_HsYo.roa
Signing time:             Tue 28 Nov 2023 07:35:21 +0000
ROA not before:           Tue 28 Nov 2023 07:35:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47180
IP address blocks:        2a13:f8c0::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:da:a0:8e:58:35:b7:55:4c:2c:09:5e:75:f3:77:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
        Validity
            Not Before: Nov 28 07:35:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96171223ff904eb8a778aa1d3b08a77e5fc7b18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:b2:a9:df:bb:43:89:ee:ba:39:ff:e5:d1:
                    d0:7a:65:eb:47:3d:fd:87:cd:df:7d:1a:5f:cb:bf:
                    9c:45:b1:23:ed:9e:90:66:3b:2a:8b:c7:1f:fb:be:
                    bc:98:85:2a:58:20:02:94:a8:79:a8:32:b9:2e:e5:
                    3a:a6:69:d3:87:e0:2b:d6:4b:3d:6f:57:c2:ad:01:
                    2c:3b:30:f7:93:7a:86:57:80:e8:15:53:7e:a7:04:
                    d7:e9:95:ac:26:18:54:74:76:8f:6b:60:ae:61:aa:
                    74:33:dd:69:47:a9:6a:8a:b1:c0:75:1d:d7:37:50:
                    a4:87:84:2d:63:3f:92:de:bb:a2:d5:ef:71:6e:d7:
                    89:26:60:f0:32:9c:21:ce:44:8e:44:73:f7:35:7a:
                    37:55:97:b7:3f:88:ac:c3:e4:ae:52:d5:0d:d3:78:
                    6a:e1:0c:51:73:c4:9d:93:8d:87:5a:32:31:df:05:
                    5c:56:d2:2c:87:65:3a:83:5f:05:ad:6b:97:1b:58:
                    77:c7:4d:c4:e1:53:a8:ad:2c:eb:ff:86:33:87:ad:
                    cc:3a:f0:fd:23:c3:a9:c6:21:2e:57:84:c0:db:db:
                    9e:23:4a:00:c1:e9:f1:9e:01:01:16:fb:3f:bd:f6:
                    0b:df:d9:c3:49:99:db:51:2d:02:90:f1:3d:16:ef:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:12:23:FF:90:4E:B8:A7:78:AA:1D:3B:08:A7:7E:5F:C7:B1:8A
            X509v3 Authority Key Identifier:
                keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/lhcSI_-QTrineKodOwinfl_HsYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:f8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:24:8b:7f:7d:d6:34:a4:84:20:c7:18:81:d1:9d:9e:6a:fa:
         6b:56:a3:19:f8:3e:61:7c:0f:54:40:42:84:51:7f:c7:ea:5c:
         5f:f5:6b:12:72:83:e5:b8:91:a6:60:3d:70:76:78:83:1a:fe:
         e7:c6:57:16:ea:05:0d:0c:39:3b:68:44:c6:07:b3:45:35:97:
         ec:7f:ab:cf:9b:03:35:08:07:5f:5e:5b:4a:7b:a8:db:e7:64:
         f4:5e:72:89:74:e3:78:a4:9f:0a:fd:c2:e8:25:84:8c:d8:35:
         9a:57:5f:bf:fc:7e:d1:ee:c1:71:c8:ab:c0:95:01:b2:f7:8f:
         dd:ad:4a:c8:bb:01:65:11:10:5b:9f:93:f4:b8:58:0a:84:6d:
         c0:8b:3f:9d:1c:ac:70:88:00:26:f0:0e:57:c4:0d:ec:9f:2a:
         03:23:75:ad:2b:25:db:1f:3b:68:c3:77:09:46:08:a2:c7:68:
         10:3f:0d:14:63:56:79:cf:78:47:94:00:a2:42:9a:02:f7:33:
         8d:d3:ab:8e:80:b0:08:a5:5f:7d:6e:f2:da:5d:e6:d0:a7:3b:
         e6:ea:2b:95:49:6f:f5:a1:d8:4b:ae:ec:ac:a8:23:3c:5b:f2:
         09:0e:fe:6a:a7:1e:2b:7f:a0:4f:3d:30:5d:52:8f:ec:9a:15:
         42:e3:ed:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----