Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/iCQQy-t_mkMeVY66nZGuZt5IU3Y.roa
File:                     iCQQy-t_mkMeVY66nZGuZt5IU3Y.roa (raw, json)
Hash identifier:          aXrLlKobUw1AbCnuDna3XfM0e5JyFfO3zLIc2aosvpo=
Subject key identifier:   88:24:10:CB:EB:7F:9A:43:1E:55:8E:BA:9D:91:AE:66:DE:48:53:76
Certificate issuer:       /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial:       0187CF00130C9E67F7D3CD0D793D4E438AF2
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/iCQQy-t_mkMeVY66nZGuZt5IU3Y.roa
Signing time:             Sat 29 Apr 2023 21:51:41 +0000
ROA not before:           Sat 29 Apr 2023 21:51:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212077
IP address blocks:        2a13:7b40:1::/48 maxlen: 48
                          2a13:7b40:1::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:cf:00:13:0c:9e:67:f7:d3:cd:0d:79:3d:4e:43:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
        Validity
            Not Before: Apr 29 21:51:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=882410cbeb7f9a431e558eba9d91ae66de485376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:24:6d:06:ea:c8:2f:1e:a5:57:e1:1f:e1:
                    ce:63:d0:73:96:08:d6:24:a4:42:1d:3e:66:9b:30:
                    a6:e4:c9:58:ff:ad:0b:e8:91:d2:72:67:8c:9b:2f:
                    bd:cc:3a:fc:0f:2e:a5:a1:7b:51:12:a4:a3:e7:69:
                    15:ba:f8:22:25:0f:67:1f:0b:15:52:68:1b:0c:4b:
                    3a:ea:17:ea:4c:67:05:9b:b3:81:c8:7f:39:ba:90:
                    49:56:c4:62:9b:25:d6:4d:e5:14:50:fa:37:65:3b:
                    35:9c:40:99:77:4c:47:ae:c7:3b:03:47:bb:36:6e:
                    08:30:bd:75:a0:d4:48:ce:9a:f9:da:1f:cb:95:57:
                    50:dc:d3:3d:35:a2:a4:53:cf:d0:d5:7a:76:17:73:
                    0d:36:d3:d6:55:f6:7d:40:bd:3f:11:2a:2d:9a:c9:
                    42:df:42:15:aa:b4:ef:f5:2b:6b:77:97:29:5f:05:
                    32:43:de:b5:90:e0:1a:00:06:2c:60:a8:ce:d3:7c:
                    0f:eb:86:ce:98:85:f5:e5:13:48:f8:a8:0e:4b:15:
                    35:eb:57:81:a7:96:92:b6:cb:b3:bf:89:c3:79:b9:
                    c6:b5:61:f5:2f:4f:e1:36:40:e7:16:65:64:8f:63:
                    c2:ed:fc:d6:86:c0:38:86:b5:44:3b:b4:40:5f:01:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:10:CB:EB:7F:9A:43:1E:55:8E:BA:9D:91:AE:66:DE:48:53:76
            X509v3 Authority Key Identifier:
                keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/iCQQy-t_mkMeVY66nZGuZt5IU3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7b40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:db:c1:01:fc:f8:d3:e5:8d:ee:5d:39:66:0a:c9:93:2d:
         ac:86:c4:33:24:b4:58:e7:5f:e8:30:1d:9e:9f:24:38:48:4b:
         bb:51:6d:44:20:b9:61:d1:75:b1:e3:0a:21:f6:47:35:3a:1a:
         39:00:6c:f3:13:09:01:8e:3d:de:6a:1f:33:e9:24:a8:3c:cf:
         91:5b:ee:af:fd:2a:10:a6:bb:c7:3f:94:37:a8:1d:37:75:f9:
         b9:61:2b:54:93:07:4e:36:7b:20:b7:fa:da:8b:35:51:7c:c2:
         07:56:31:ee:63:62:73:9a:51:be:d2:cf:60:cd:26:9b:08:23:
         0f:45:bf:0b:7b:f5:39:ec:dc:b8:21:13:cc:2a:96:a2:92:43:
         4c:51:c7:e9:74:53:98:e0:4d:2c:90:2e:9b:3a:8c:92:ec:5f:
         ff:8d:02:9f:43:d4:2b:be:bd:fc:53:1a:d7:98:68:47:23:08:
         e0:4d:b0:ca:2a:de:d7:aa:ab:04:02:9b:85:e0:1e:07:88:2d:
         8f:ba:a3:a5:87:68:72:0b:3d:c8:a8:33:e0:98:cc:b8:c9:96:
         c5:5a:df:7a:22:5f:64:74:22:c8:3d:2c:37:49:d3:cc:58:74:
         a4:4d:c4:ff:93:ce:87:23:9f:48:9b:79:ef:0d:83:b2:c4:e3:
         25:70:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----