Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/N2NspBR_5ccnUx1N0X85QSRTDeE.roa
File:                     N2NspBR_5ccnUx1N0X85QSRTDeE.roa (raw, json)
Hash identifier:          4f/BoAOQB5QHFGIX6TuUoRargPmjL7meSgY5Q/A1uTI=
Subject key identifier:   37:63:6C:A4:14:7F:E5:C7:27:53:1D:4D:D1:7F:39:41:24:53:0D:E1
Certificate issuer:       /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial:       018AD1A5039286C2D6EBDC1B6944EBE0DB62
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/N2NspBR_5ccnUx1N0X85QSRTDeE.roa
Signing time:             Tue 26 Sep 2023 13:19:27 +0000
ROA not before:           Tue 26 Sep 2023 13:19:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216256
IP address blocks:        2a13:c7c7::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d1:a5:03:92:86:c2:d6:eb:dc:1b:69:44:eb:e0:db:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
        Validity
            Not Before: Sep 26 13:19:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37636ca4147fe5c727531d4dd17f394124530de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:db:c3:e7:e0:ba:e1:3d:0b:6e:88:45:c1:
                    1b:60:27:2d:17:ee:9f:09:d0:2f:d2:03:59:fd:9d:
                    e1:4b:b0:ea:8a:49:9a:70:8c:fd:f8:9c:86:a1:20:
                    69:32:5f:66:fa:66:b1:65:ce:47:26:e6:13:45:70:
                    64:22:ea:a9:c2:c6:66:ef:9d:cb:f7:ea:e6:df:19:
                    85:f7:9f:42:fa:2c:81:c8:dd:1b:0c:1a:08:1c:a8:
                    c9:ce:91:93:12:2a:45:d7:d3:0d:9d:88:e6:c5:38:
                    72:58:89:14:74:a2:df:c9:87:c4:36:de:7b:d3:87:
                    63:73:75:b9:78:41:6e:f3:7e:4e:85:e6:77:17:58:
                    15:f4:99:7a:73:11:25:ed:40:da:19:59:a4:30:37:
                    47:60:17:c4:19:7a:d0:17:05:9f:4d:15:4d:11:7d:
                    3f:6c:38:10:48:96:5a:19:be:00:a5:87:8e:b5:e9:
                    9e:34:83:33:a3:b4:a0:63:44:0e:bd:1e:a0:b8:96:
                    56:d9:4d:a5:83:0c:3f:e8:65:25:9b:0e:3c:d1:68:
                    7d:41:47:b8:53:db:11:dc:f0:ab:ec:89:c2:a8:39:
                    59:1b:d9:c9:d3:24:a6:65:a8:25:96:90:3b:2a:be:
                    23:a3:c7:42:97:f3:9c:06:a3:7e:35:80:d9:54:50:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:6C:A4:14:7F:E5:C7:27:53:1D:4D:D1:7F:39:41:24:53:0D:E1
            X509v3 Authority Key Identifier:
                keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/N2NspBR_5ccnUx1N0X85QSRTDeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:da:ef:1f:e8:2d:5f:d1:33:ac:f6:6b:54:23:03:80:e8:51:
         1a:1f:44:5b:ad:c5:db:42:ef:0b:10:36:42:94:90:ce:c6:91:
         be:15:01:78:d2:99:25:88:eb:36:28:99:86:ea:80:12:b5:fa:
         30:85:c9:36:98:ed:1b:68:66:84:f4:7f:7c:e3:2c:86:a6:7b:
         6d:19:4c:04:64:7d:e8:4b:13:30:a4:2e:b7:14:09:9a:8b:be:
         b2:21:bb:b6:89:d3:b0:af:e9:de:fc:ce:b4:8b:79:f8:1e:c3:
         97:c0:32:7e:3e:e6:01:d5:60:22:63:3a:cd:5a:75:ca:ee:8b:
         f1:8f:0b:ab:4c:fb:d0:00:be:0b:43:2f:3f:ba:6a:83:7a:7d:
         6e:87:11:0c:a7:e9:39:aa:f5:16:88:cb:58:5c:19:1c:79:5c:
         60:cd:03:ee:f6:f1:d4:e9:73:ec:3e:74:2b:fa:bf:cc:70:a2:
         e4:af:70:5e:1e:dd:2e:74:cb:e3:93:b8:50:09:63:c2:4f:6c:
         70:1a:cb:95:f7:a3:4b:6b:3b:05:92:55:fc:5d:21:6d:17:c3:
         fd:9c:f1:f3:2c:1e:7f:a0:44:11:24:58:13:d7:a4:5d:46:43:
         0c:33:88:46:4d:b4:0d:bc:f6:33:e5:0f:76:28:e0:e7:6b:5a:
         91:c8:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----