Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/HibLTKBLbrQ1KOzddGT3ot5Ljlo.roa
File:                     HibLTKBLbrQ1KOzddGT3ot5Ljlo.roa (raw, json)
Hash identifier:          HemxdW+VDhpyTEUjbl+DhZ5UgyYVMQlSe+bfSXn5kOY=
Subject key identifier:   1E:26:CB:4C:A0:4B:6E:B4:35:28:EC:DD:74:64:F7:A2:DE:4B:8E:5A
Certificate issuer:       /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial:       0187CEB6D645E3F39CF08799A2565E90CDEE
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/HibLTKBLbrQ1KOzddGT3ot5Ljlo.roa
Signing time:             Sat 29 Apr 2023 20:31:41 +0000
ROA not before:           Sat 29 Apr 2023 20:31:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212077
IP address blocks:        2a13:7b40:1::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ce:b6:d6:45:e3:f3:9c:f0:87:99:a2:56:5e:90:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
        Validity
            Not Before: Apr 29 20:31:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e26cb4ca04b6eb43528ecdd7464f7a2de4b8e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:d4:13:af:82:0e:ac:61:7f:5a:ab:ad:a9:
                    fc:61:6f:1b:9b:99:5c:23:bf:76:38:9f:d0:f4:7a:
                    de:94:1f:cd:06:38:a4:c3:bf:70:85:44:56:61:2a:
                    3f:7b:83:2a:7d:35:7d:21:87:51:e2:50:e8:63:39:
                    8c:1a:58:8b:65:41:5f:07:77:c6:b2:0d:a2:7e:57:
                    48:0b:80:e1:28:20:a8:17:da:14:44:e6:e3:40:61:
                    1b:d2:65:fd:a2:c3:c3:49:29:34:39:99:0b:12:eb:
                    55:1a:8b:e0:3e:e0:8e:7c:b7:a1:d6:8f:f9:ca:e7:
                    9d:0b:86:c8:80:b2:08:96:96:ee:fe:d1:ab:7a:04:
                    8a:5c:4d:b3:d7:6a:e5:25:ee:d7:37:c2:41:43:0b:
                    b1:9d:8a:d8:51:58:5f:10:49:32:26:47:6a:d6:1a:
                    96:00:55:d0:24:dd:27:3c:6b:46:a4:cf:81:a0:39:
                    de:47:6c:24:bf:d5:e5:9d:69:3c:18:eb:a7:ff:4c:
                    8b:ef:b3:58:ae:14:f3:90:b5:2f:86:ca:25:dc:65:
                    91:e0:16:d9:6c:eb:52:f7:91:46:80:60:ec:d9:e0:
                    8b:41:34:12:d8:af:44:8a:5a:70:47:46:23:55:42:
                    05:82:5b:32:95:44:18:27:d1:d5:1b:38:65:f2:74:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:CB:4C:A0:4B:6E:B4:35:28:EC:DD:74:64:F7:A2:DE:4B:8E:5A
            X509v3 Authority Key Identifier:
                keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/HibLTKBLbrQ1KOzddGT3ot5Ljlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7b40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:49:cb:ed:6d:5d:1c:fa:c3:1d:4f:ac:f1:3b:a2:14:4b:6e:
         00:7a:22:d3:69:69:2d:c9:c1:90:10:c2:f3:fb:c5:2f:56:e8:
         e7:7d:c2:4d:b0:6b:38:8e:8d:31:41:03:7c:c9:fa:e9:86:f5:
         c4:06:b2:8c:b3:cc:4b:75:58:d3:7e:75:93:88:56:9b:c1:ea:
         2f:e4:08:7a:20:94:43:bd:08:89:f4:68:a4:90:4d:b1:e9:bc:
         ad:99:00:f1:c4:4d:76:be:ce:02:90:95:3d:fa:f4:03:4e:86:
         c0:25:33:e9:88:59:a1:4d:18:c5:3b:43:0e:e6:62:32:1b:1e:
         4c:c0:87:90:5f:e2:af:45:5b:a4:b2:85:45:73:80:ef:62:ee:
         01:09:55:23:38:73:96:cc:b0:26:19:1d:20:1c:9e:58:8b:cb:
         e8:3c:b2:46:85:28:70:59:ed:02:0a:48:63:df:12:46:d1:5f:
         c1:da:bc:2a:c1:fc:e4:aa:ee:24:d1:6f:ae:50:24:ce:cb:8e:
         f2:d5:fc:e6:38:b1:da:0e:63:7f:c1:fb:7a:7c:4c:fd:f5:11:
         6d:39:0c:d3:04:63:18:0d:3f:40:c4:23:d6:0b:2c:21:1c:fd:
         c6:73:c9:20:3b:10:67:e7:11:58:d4:a5:68:47:dc:c9:f3:45:
         84:8b:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----