Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h_I_xSDxsiy21Fn1B_F0uhd577g.roa
File:                     h_I_xSDxsiy21Fn1B_F0uhd577g.roa (raw, json)
Hash identifier:          FlyI6fQm3Z8uh+0Udli7zFQG4BniXXv/1lOTytKV4cQ=
Subject key identifier:   87:F2:3F:C5:20:F1:B2:2C:B6:D4:59:F5:07:F1:74:BA:17:79:EF:B8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187DAEE0186DFE8D8CF6A9DBCC49D29E2E2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h_I_xSDxsiy21Fn1B_F0uhd577g.roa
Signing time:             Tue 02 May 2023 05:27:23 +0000
ROA not before:           Tue 02 May 2023 05:27:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211659
IP address blocks:        2a0e:97c0:261::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:da:ee:01:86:df:e8:d8:cf:6a:9d:bc:c4:9d:29:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May  2 05:27:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87f23fc520f1b22cb6d459f507f174ba1779efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:a6:e3:2b:08:41:f2:76:53:78:5f:52:b9:
                    46:6d:62:28:c6:08:a5:6f:f1:b4:c8:22:69:c4:2c:
                    3b:7a:1a:ea:1d:3b:92:52:b4:d3:52:d5:86:d7:8d:
                    c2:43:26:ba:ca:a3:ad:ac:31:e9:ca:21:a5:f1:b2:
                    f8:e8:90:40:22:ce:da:e4:b3:46:10:1a:63:dd:3c:
                    e7:ab:c0:80:58:af:79:c6:52:02:b9:d5:4b:d2:3f:
                    d2:14:63:1f:8a:3a:ac:a7:c6:16:5d:32:a9:12:bc:
                    58:2a:8d:8c:3e:68:5d:c2:df:b1:7b:58:f4:7e:23:
                    9c:88:28:f1:50:b7:9f:c8:9b:c4:02:59:8c:3f:49:
                    bc:0e:47:5f:58:6e:b3:2c:dd:62:47:4c:51:0d:a4:
                    19:b0:85:71:0d:1b:29:6f:af:66:5f:0b:c5:f8:e1:
                    51:07:06:21:3b:79:57:4e:82:e3:6e:d3:7f:77:48:
                    ac:60:d7:78:41:c5:8b:db:ed:0d:18:6f:e8:e8:1c:
                    57:e0:df:eb:51:ed:09:5f:cb:4d:cf:91:d2:e4:0a:
                    6a:7c:d9:df:3e:87:e4:ba:14:3e:e2:d4:2b:46:5a:
                    a5:f3:19:a6:27:bb:e9:38:16:66:f3:4a:9f:24:eb:
                    79:02:61:e7:2c:6b:fe:21:0b:71:86:d8:53:d5:e8:
                    6b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:3F:C5:20:F1:B2:2C:B6:D4:59:F5:07:F1:74:BA:17:79:EF:B8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h_I_xSDxsiy21Fn1B_F0uhd577g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:261::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:5f:ee:c6:bc:dd:b7:61:12:b1:8c:bf:25:d2:d6:b4:ad:05:
         24:20:a8:29:5e:ec:ad:c8:df:90:e8:52:9a:f2:c1:c6:83:33:
         01:01:cf:7a:0b:71:db:2b:6a:f8:6a:ca:1c:62:23:91:74:dc:
         4f:5d:9c:78:51:8e:c0:a4:6a:af:a3:52:3e:61:c7:38:d0:51:
         83:b4:8c:5f:70:94:73:a5:ac:ed:32:f3:50:75:70:f2:b3:02:
         3b:45:f8:d1:3a:f2:ba:b4:ba:03:f1:03:3f:b0:6a:76:03:8b:
         58:74:69:92:fa:a8:cf:6d:b1:41:75:2b:5d:e9:36:82:2f:fe:
         87:5a:8c:8e:50:e4:59:a4:f1:99:55:34:dd:4b:c8:4a:56:49:
         3b:96:39:7e:34:a4:c2:4e:c9:59:16:da:f9:49:92:f9:1e:e0:
         44:7a:65:8d:bf:fd:29:a9:29:ca:aa:a9:f5:06:9c:04:c7:fe:
         ac:12:27:f0:10:f6:69:4f:a3:67:15:f2:9e:0d:16:93:b5:00:
         bf:5e:02:85:1d:a5:18:65:d2:5a:be:c7:44:f6:10:ec:e9:49:
         cf:77:67:ac:9f:e5:4d:76:24:54:5d:5a:9a:02:c1:4c:e0:d1:
         56:fc:68:30:b3:85:9c:ef:f4:4f:70:d2:e7:29:b4:ca:f0:ec:
         d8:68:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----