Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa
File:                     2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa (raw, json)
Hash identifier:          eRJx3BRTEtLAlnFDVyzk7upX8bVU7tRBBHn/J2lEnto=
Subject key identifier:   D9:C2:D2:31:A0:29:C4:C8:61:E9:BE:83:76:9C:36:AD:FF:1A:88:23
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BE0BBBD10A1B90F350C042A889DEF4602
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa
Signing time:             Sat 18 Nov 2023 04:41:21 +0000
ROA not before:           Sat 18 Nov 2023 04:41:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208755
IP address blocks:        2a0e:b107:3a7::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:e0:bb:bd:10:a1:b9:0f:35:0c:04:2a:88:9d:ef:46:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 18 04:41:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9c2d231a029c4c861e9be83769c36adff1a8823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:49:c2:2f:54:b4:3a:f3:72:10:f0:ed:c0:
                    da:bf:ae:56:22:fa:51:c8:f5:64:35:28:0e:1e:3a:
                    b2:81:11:e2:29:3c:42:6a:82:5d:3b:9e:4c:44:5d:
                    0c:dd:f7:9b:4e:72:90:f7:a6:f4:58:36:b4:65:cb:
                    cd:39:43:88:34:db:49:1a:24:09:c1:80:a0:34:45:
                    73:91:9d:ac:12:69:fd:c1:58:57:28:22:d9:45:b1:
                    59:af:0a:1e:a0:20:50:a5:51:7d:6b:8d:f2:c9:8c:
                    5b:42:fb:c2:60:c3:c8:49:3c:5d:34:d4:7c:e0:e5:
                    27:ee:95:06:aa:22:1c:21:48:b6:f6:9a:1f:dc:52:
                    65:02:7f:2e:42:38:8c:2a:dd:02:e1:51:85:e6:8e:
                    ee:33:e5:94:ff:be:d7:97:99:1a:36:ae:50:9f:ae:
                    b3:d0:94:97:89:aa:c4:5b:c0:58:bb:0f:06:57:27:
                    b3:cc:52:17:f9:00:1b:6d:39:bc:e7:e9:c0:1c:9d:
                    57:d3:10:ad:8b:c7:32:36:ec:29:fe:1f:18:9a:71:
                    70:34:73:b2:db:6d:f6:32:dd:e6:06:f2:a7:f1:59:
                    71:e7:e0:d5:c4:07:14:b2:0d:e9:96:73:79:ae:47:
                    c0:44:31:9c:7b:b4:ad:29:95:a1:3a:9d:60:26:99:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C2:D2:31:A0:29:C4:C8:61:E9:BE:83:76:9C:36:AD:FF:1A:88:23
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2cLSMaApxMhh6b6Ddpw2rf8aiCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:3a7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:27:47:ee:ed:d2:51:3e:43:9e:aa:cb:be:30:92:1f:d3:
         ab:8a:21:b1:7d:ab:0f:0c:3d:b5:10:86:d7:67:e9:03:50:e4:
         30:e3:7c:1a:3d:4f:af:08:01:02:b2:d7:91:6d:8e:b3:7c:ef:
         7c:e9:dd:8c:0d:ac:63:de:d2:02:a2:ee:71:35:c1:9f:b0:9c:
         81:ff:81:b1:c7:78:61:98:fc:b8:2d:3b:72:05:3d:79:82:ad:
         9d:08:b1:b7:91:45:08:f4:56:f3:70:d2:66:6f:15:8a:c1:a2:
         fb:32:c4:68:46:5a:28:97:c4:b7:e8:71:7e:c8:4a:8b:30:b4:
         09:95:13:c2:be:e4:e9:0c:8c:be:7a:50:a8:a4:d1:9d:6e:0f:
         d1:a3:24:60:e1:c8:5e:63:23:7d:60:c8:07:b4:bc:92:ff:34:
         71:31:bb:37:ea:c2:8c:01:4e:90:d4:81:4b:9d:bd:c3:32:36:
         4d:a4:e4:29:7a:2c:da:aa:f2:ec:06:62:6b:9f:b7:80:83:d7:
         14:0f:0a:bc:2d:03:52:80:65:67:a0:49:cc:bd:5f:64:54:c9:
         40:9f:e9:03:d2:26:b8:cd:29:3c:2d:f7:62:c4:fa:ef:a8:3b:
         07:d5:ab:fa:c0:bf:2e:c9:b6:09:65:87:7e:d0:33:ee:38:14:
         6e:09:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----