Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/d48bEEW2CdEsYmjax2i0wtAYMyI.roa
File:                     d48bEEW2CdEsYmjax2i0wtAYMyI.roa (raw, json)
Hash identifier:          El/izD3XttVpIAx30KuOyA9Yvj0r4Hmlg+SD9tjOIlQ=
Subject key identifier:   77:8F:1B:10:45:B6:09:D1:2C:62:68:DA:C7:68:B4:C2:D0:18:33:22
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       0186CB090C476068AD7FCCCADB5A1E5D4C40
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/d48bEEW2CdEsYmjax2i0wtAYMyI.roa
Signing time:             Fri 10 Mar 2023 10:20:13 +0000
ROA not before:           Fri 10 Mar 2023 10:20:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202361
IP address blocks:        2a13:40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cb:09:0c:47:60:68:ad:7f:cc:ca:db:5a:1e:5d:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Mar 10 10:20:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=778f1b1045b609d12c6268dac768b4c2d0183322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:ac:e2:b8:21:ec:66:5f:41:be:f8:86:28:
                    07:ce:85:ff:84:5c:35:a9:2e:58:97:1a:8f:29:2c:
                    e7:6e:a1:7e:d7:e9:34:57:bc:3b:2d:2b:dc:72:a1:
                    d5:1d:7b:9a:a0:1c:28:19:fe:fc:d3:e8:4d:3c:fc:
                    ad:32:9a:bf:bb:df:43:34:9b:7f:ef:55:51:6b:21:
                    77:0e:b9:2b:91:e2:2e:50:ca:77:12:a0:43:5c:c0:
                    71:03:08:65:2b:c4:21:fa:73:a9:a5:1e:99:68:03:
                    e9:d5:ad:ad:1a:f0:32:5b:00:6e:39:0b:cd:1a:39:
                    2d:77:25:d8:df:e9:68:67:d9:4b:96:79:72:35:d3:
                    98:d9:c2:de:e6:0b:d2:72:d4:2d:70:b5:4f:bb:61:
                    76:7f:27:62:45:30:12:dc:b2:69:c9:ea:89:b2:29:
                    ea:e8:e2:5b:66:af:03:80:f6:a3:92:16:08:b5:f3:
                    d1:43:2c:83:8e:f5:c9:46:0a:49:ed:3c:71:d2:64:
                    68:7b:98:98:5a:62:3b:92:75:27:f0:5f:45:11:56:
                    5d:17:24:6f:ee:3c:4f:53:a3:fd:67:15:d3:9b:5a:
                    d6:37:9b:39:60:9d:86:a2:af:91:03:76:50:9e:45:
                    47:0b:21:8d:bd:b2:40:ff:a4:1d:15:3b:35:26:a1:
                    dc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8F:1B:10:45:B6:09:D1:2C:62:68:DA:C7:68:B4:C2:D0:18:33:22
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/d48bEEW2CdEsYmjax2i0wtAYMyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:75:2a:df:f2:b8:82:21:75:7b:c2:ed:ce:f7:50:72:7a:
         11:96:72:74:a7:af:f5:17:d0:bd:25:71:a7:9c:dd:0f:5e:92:
         62:20:cd:43:c7:cd:e1:88:b3:33:66:e5:c3:1b:35:cc:68:ae:
         9d:54:33:b5:e4:82:51:5b:4f:bb:ab:a4:31:07:4d:27:65:1c:
         48:1a:0d:7f:57:dd:0f:00:16:20:80:e7:23:89:af:a6:75:52:
         46:8d:a2:b7:fa:4e:8c:9d:7a:f7:52:47:e0:24:a4:75:c5:9b:
         d5:74:c9:aa:23:6d:b7:bf:0b:bb:1e:99:0e:fa:bd:d0:cd:cf:
         e6:26:2f:7b:6e:55:89:bd:9a:72:b8:ee:7c:70:9e:fd:32:3f:
         ca:e9:a4:21:cc:1f:b0:f6:fa:5f:12:6c:bd:2e:25:e8:43:cc:
         4f:75:59:ea:ad:e7:c1:48:bb:10:01:2f:30:34:85:bc:70:b6:
         6d:e6:eb:a8:6d:ab:9c:91:b8:cf:04:77:52:54:68:15:d2:c0:
         e0:7a:40:c6:e5:74:6c:82:07:10:c2:4b:68:1a:3b:d1:fc:13:
         31:b5:9d:98:5a:ba:7a:bb:f7:2c:9c:28:67:62:a0:68:0a:36:
         d0:86:dd:88:d6:6c:d7:9c:47:f8:a0:7c:7d:2b:e9:ad:12:68:
         2b:5d:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----