Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1CY-gz2gq6LTBwx4Ei5su__lb3c.roa
File:                     1CY-gz2gq6LTBwx4Ei5su__lb3c.roa (raw, json)
Hash identifier:          etYexxbyr2X00I7OicAsBYSBoSD/ZB4Nqfk2h8cSNJs=
Subject key identifier:   D4:26:3E:83:3D:A0:AB:A2:D3:07:0C:78:12:2E:6C:BB:FF:E5:6F:77
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187D04A974551C1616DBB099E44ADF4C768
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1CY-gz2gq6LTBwx4Ei5su__lb3c.roa
Signing time:             Sun 30 Apr 2023 03:52:41 +0000
ROA not before:           Sun 30 Apr 2023 03:52:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199310
IP address blocks:        2a0e:97c0:220::/44 maxlen: 48
                          2a0e:b107:21c0::/45 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d0:4a:97:45:51:c1:61:6d:bb:09:9e:44:ad:f4:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 30 03:52:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d4263e833da0aba2d3070c78122e6cbbffe56f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:35:c3:0e:df:ca:31:f6:78:a7:d8:1c:5a:
                    f5:5c:26:05:3d:3a:31:7e:99:b5:a0:b0:72:86:5c:
                    82:7c:da:ea:be:e5:bd:94:c6:1d:f3:ff:6f:a3:62:
                    e4:3b:a9:4d:76:81:96:15:6f:4c:b9:0d:66:1a:69:
                    8a:c6:44:58:94:c7:9f:0b:bc:fb:c1:7c:b3:af:72:
                    33:ee:a2:98:a0:ef:8a:ff:19:6d:d6:1b:e1:3f:de:
                    89:23:8f:60:0b:63:e3:8b:c8:aa:e1:9f:c1:42:68:
                    6c:e4:85:7b:ef:37:ac:7e:28:a6:8c:d7:5d:c6:58:
                    24:6b:47:d5:3a:dc:e7:bb:ec:6f:1c:7b:bb:cd:1c:
                    30:4c:4e:03:9e:e2:39:ef:4e:c8:ac:47:2a:e4:f6:
                    b3:a7:8a:4f:48:62:fb:17:af:31:aa:6d:2d:56:b9:
                    c6:fc:5b:ff:cc:e2:bb:e8:d0:ee:80:08:c0:9b:ef:
                    56:8a:e9:c8:6e:e8:19:b8:33:3d:d5:79:ee:f4:32:
                    42:ec:96:12:14:cf:d3:23:fc:5c:74:69:f9:c4:e1:
                    1a:6c:b5:e8:b1:c3:2b:ce:c7:57:fb:c0:e3:72:5d:
                    b1:90:5d:c6:83:ee:39:dd:e7:1e:2d:9e:b6:36:2a:
                    58:5e:53:ae:b9:96:de:89:87:05:53:67:a5:6b:97:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:3E:83:3D:A0:AB:A2:D3:07:0C:78:12:2E:6C:BB:FF:E5:6F:77
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1CY-gz2gq6LTBwx4Ei5su__lb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:220::/44
                  2a0e:b107:21c0::/45

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:86:1e:54:80:54:7e:da:49:e5:63:c2:bd:83:c9:71:e3:
         8a:73:ce:a0:3c:f0:33:8c:8f:23:9c:b6:09:ac:24:6f:6d:c3:
         db:03:97:07:36:df:21:b3:71:48:70:f0:c2:ce:14:c0:50:e8:
         e1:56:11:21:85:ed:69:8c:ad:40:43:76:40:30:f6:a4:63:d3:
         e0:e6:1a:6b:b6:de:9d:8b:cf:75:13:4c:7d:59:dc:91:aa:b5:
         1d:70:b7:f7:73:1a:29:4f:6e:19:b4:f6:05:9e:78:fb:79:8e:
         da:0d:3d:e8:2b:cb:2c:af:0c:0e:3b:41:e1:52:05:3e:fd:84:
         ba:3a:86:24:f4:ed:ea:f7:c8:93:6d:d0:5c:8d:35:88:9d:80:
         46:c7:4a:f1:f8:7c:2a:14:77:01:a9:c9:59:fd:52:81:cd:ee:
         5e:42:64:59:d1:fd:1a:eb:0c:69:ed:2c:82:ad:8c:e2:08:2d:
         2a:e1:7f:17:c7:c8:69:63:03:20:ce:65:24:e5:5d:57:37:ab:
         0e:2c:76:9a:b1:a4:dd:75:f2:81:cd:64:18:7b:15:f9:d1:5a:
         94:34:48:50:b3:24:30:06:f3:18:74:9f:d2:bc:88:1d:e6:ce:
         b1:50:6d:18:5c:dd:3a:30:08:e1:b4:70:13:6a:54:e7:d7:c5:
         88:3b:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----