Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/07wgsdXuRGRMQoGvmRl5WToS2x4.roa
File:                     07wgsdXuRGRMQoGvmRl5WToS2x4.roa (raw, json)
Hash identifier:          0RKQ/w9NGRYFUo1L/SpxiRNlxgeIU2FUO62YdDNUL3U=
Subject key identifier:   D3:BC:20:B1:D5:EE:44:64:4C:42:81:AF:99:19:79:59:3A:12:DB:1E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48ADB2EEF4280F2A7E4997183A6FC1A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/07wgsdXuRGRMQoGvmRl5WToS2x4.roa
Signing time:             Tue 24 Jan 2023 16:09:43 +0000
ROA not before:           Tue 24 Jan 2023 16:09:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207111
IP address blocks:        2a0e:b107:1900::/48 maxlen: 48
                          2a0e:b107:1901::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:db:2e:ef:42:80:f2:a7:e4:99:71:83:a6:fc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3bc20b1d5ee44644c4281af991979593a12db1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:0a:b0:b5:ee:74:c2:f5:9f:52:95:0b:8e:
                    5f:8e:9b:32:80:9e:c2:80:fb:08:9b:34:e5:2b:37:
                    94:ad:f6:f0:dd:fc:5b:4e:a4:6b:1b:0e:c5:2c:9a:
                    d4:18:49:07:11:f8:67:48:22:b1:c6:0f:60:64:a0:
                    13:82:9e:70:95:9b:7f:2c:6d:e7:a6:3d:4a:e3:5e:
                    25:6e:f4:61:aa:b9:b4:fc:ff:15:e2:2e:0b:ac:e7:
                    f6:d2:29:8f:30:d9:db:c9:5a:16:87:39:3b:6a:eb:
                    79:7a:a5:7c:d3:bf:d4:6d:fb:41:45:b9:08:5f:8e:
                    65:ec:f1:c3:aa:b7:30:ae:40:2d:38:49:25:66:16:
                    b4:18:2c:91:d2:9f:5e:e1:ef:49:fc:0f:6c:b5:f3:
                    89:14:28:09:b8:df:83:50:3d:d8:12:d9:4e:cb:68:
                    08:00:ab:2c:9b:f5:23:be:51:16:d5:c2:30:06:a0:
                    f7:86:6c:61:aa:6a:63:37:7a:5f:12:17:60:95:12:
                    af:ca:d8:74:f3:2d:09:e1:f9:f8:6b:f8:66:2d:20:
                    06:2b:d8:c2:15:fa:12:7a:53:18:ab:b8:30:a3:a4:
                    26:e6:4b:37:9f:a3:6a:f5:9f:e2:1e:92:96:97:a9:
                    04:0f:1e:aa:f4:00:e2:57:a4:0c:b4:f5:1a:8e:36:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:20:B1:D5:EE:44:64:4C:42:81:AF:99:19:79:59:3A:12:DB:1E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/07wgsdXuRGRMQoGvmRl5WToS2x4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1900::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:89:37:ec:b6:99:8f:7b:24:36:6a:ba:e3:af:93:27:64:
         c9:58:75:4c:d8:de:0f:b2:e3:36:4e:04:39:03:26:f1:11:e6:
         63:80:95:1d:82:92:b5:96:9b:46:9e:31:c2:e7:19:32:ac:66:
         ea:1b:6e:86:43:4a:ac:a4:14:74:05:14:0c:bb:55:04:2b:1e:
         ad:0c:3d:97:8d:3e:18:c0:0a:47:fa:59:da:08:54:98:d1:85:
         b5:df:32:fd:39:4c:3a:66:e3:9b:29:36:62:fd:fa:df:b6:81:
         da:c3:df:ed:b6:37:8c:2c:a5:15:85:8e:bd:48:8b:ee:f4:e8:
         17:3d:d4:4e:fd:eb:1c:99:ed:c6:d4:55:75:c6:bb:bd:8c:b5:
         c1:76:21:c8:0f:16:d0:8f:b4:d5:3c:e8:f9:4d:94:a3:17:7b:
         f2:8d:70:c3:d2:63:07:82:c9:d5:d4:18:9c:22:85:9d:47:f1:
         d5:95:e6:81:2f:09:35:c9:6c:f9:ca:29:ee:ea:a5:cd:aa:10:
         a1:13:1a:64:87:de:3e:d1:9d:2a:26:6f:62:aa:fc:06:a9:37:
         8b:50:21:cd:0b:97:a8:c4:92:e6:36:cb:87:1d:50:dc:ed:19:
         f8:ef:82:49:26:4f:4b:24:9b:3a:d5:a7:58:01:df:cc:36:c8:
         3b:b2:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----