Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa
File:                     1-B66fIPWlleJjfocXVnCxjOkXtU.roa (raw, json)
Hash identifier:          PEY1PFyEp9vlWFLA/RJFwt79kkFbIjBmfNrNdnF8fD8=
Subject key identifier:   F8:1E:BA:7C:83:D6:96:57:89:8D:FA:1C:5D:59:C2:C6:33:A4:5E:D5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7D460E06439CE6841EA7C5F8E6D88
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa
Signing time:             Mon 02 Jan 2023 05:15:19 +0000
ROA not before:           Mon 02 Jan 2023 05:15:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208529
IP address blocks:        2a0e:b107:178a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:d4:60:e0:64:39:ce:68:41:ea:7c:5f:8e:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f81eba7c83d69657898dfa1c5d59c2c633a45ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:fc:94:c1:4f:c3:d2:00:36:b3:d1:4b:47:
                    97:49:57:bf:dc:e8:4c:aa:06:3a:7e:1d:35:8a:21:
                    13:e8:c2:9a:98:89:ae:5f:5c:d5:b8:70:03:26:d4:
                    73:1d:cf:1d:04:c3:3b:68:3a:a2:3e:74:bd:3b:23:
                    78:d0:2f:d0:3c:74:14:12:2d:e4:d8:7c:8d:67:8f:
                    5a:37:af:7b:ee:ab:64:67:ee:04:19:59:48:e0:b6:
                    7d:17:94:33:b3:b0:ef:f4:66:20:ca:75:46:de:0a:
                    90:97:6b:19:61:25:65:0f:75:b8:3a:e3:5c:3a:23:
                    37:4d:7d:c7:69:86:0d:01:db:24:44:cc:83:22:ca:
                    b0:95:e8:58:49:32:58:f8:9f:a6:96:a2:a5:db:33:
                    23:41:f7:ee:d3:bd:ba:89:56:42:4e:cb:b3:83:95:
                    d5:53:25:c4:bb:2d:58:58:7a:75:f2:09:91:9a:d6:
                    6f:4d:dd:87:0e:ae:fd:bb:7a:a3:bf:83:f2:5b:2f:
                    8b:ce:8a:f9:3a:4c:3c:7f:d7:01:31:e7:6c:de:6c:
                    41:8e:58:e1:4d:54:ce:2d:95:77:42:35:35:88:1f:
                    70:07:8f:58:fb:d4:19:77:2c:53:d5:24:7f:45:2d:
                    d2:33:36:0d:e5:ef:87:8c:18:82:6b:af:94:90:12:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:BA:7C:83:D6:96:57:89:8D:FA:1C:5D:59:C2:C6:33:A4:5E:D5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-B66fIPWlleJjfocXVnCxjOkXtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:178a::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:a4:54:b8:5f:43:47:59:9e:da:d8:c6:e1:f9:0f:53:df:
         19:12:c3:61:46:26:36:f3:bb:28:c5:8d:2c:52:4f:48:57:7f:
         54:bf:4f:18:0a:94:0f:8b:68:2c:f0:cf:03:60:30:56:18:d2:
         cc:a7:b3:36:f3:ab:07:8e:25:25:81:44:8d:5a:60:a8:ba:7c:
         71:ed:47:d9:e0:88:46:86:19:bc:e6:a1:51:13:dc:ac:e2:09:
         aa:2b:9d:1c:ea:c3:6d:fe:68:eb:58:40:ec:50:6b:21:e4:51:
         a4:eb:10:74:6e:0b:eb:5b:86:c3:44:49:60:13:c4:6c:1b:18:
         e2:1c:c0:37:e3:8f:88:70:fc:5c:b5:dd:9d:68:b7:54:b3:cc:
         e0:06:61:00:c9:5d:df:49:b0:07:23:4e:e3:a0:d3:50:33:57:
         5a:2d:5a:2b:83:bb:ca:38:70:0c:52:b0:72:b0:2b:86:67:93:
         8b:12:bb:9b:bc:0e:46:79:2a:8c:8a:d9:06:0f:57:02:94:3b:
         77:bf:51:cf:e9:56:59:ba:9d:a2:c2:37:ae:cd:3e:68:50:c7:
         fb:f6:5a:f9:60:ab:dd:56:91:94:4a:57:82:60:4e:ed:15:50:
         fe:42:16:45:01:6c:d8:1f:47:28:77:58:53:02:bd:4a:24:1d:
         12:94:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----