Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa
File:                     3CMkMrjssQpNRNogsQt2X0pEGUw.roa (raw, json)
Hash identifier:          9fWq88da93QzzxTt8RFov29jXXoybhhhJSZGb8a/XLA=
Subject key identifier:   DC:23:24:32:B8:EC:B1:0A:4D:44:DA:20:B1:0B:76:5F:4A:44:19:4C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48B0E3BA4F40F69F9BC48BFC892F642
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa
Signing time:             Tue 24 Jan 2023 16:09:56 +0000
ROA not before:           Tue 24 Jan 2023 16:09:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213105
IP address blocks:        2a0e:b107:775::/48 maxlen: 48
                          2a0e:b107:77a::/48 maxlen: 48
                          2a0e:b107:774::/48 maxlen: 48
                          2a0e:b107:779::/48 maxlen: 48
                          2a0e:b107:77e::/48 maxlen: 48
                          2a0e:b107:773::/48 maxlen: 48
                          2a0e:b107:778::/48 maxlen: 48
                          2a0e:b107:77d::/48 maxlen: 48
                          2a0e:b107:a60::/44 maxlen: 48
                          2a0e:b107:10f0::/44 maxlen: 48
                          2a0e:b107:772::/48 maxlen: 48
                          2a0e:b107:777::/48 maxlen: 48
                          2a0e:b107:77c::/48 maxlen: 48
                          2a10:2f00:138::/48 maxlen: 48
                          2a0e:b107:771::/48 maxlen: 48
                          2a0e:b107:776::/48 maxlen: 48
                          2a0e:b107:77b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8b:0e:3b:a4:f4:0f:69:f9:bc:48:bf:c8:92:f6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc232432b8ecb10a4d44da20b10b765f4a44194c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:67:78:65:98:f0:68:72:d1:d2:ce:97:27:
                    b6:db:2d:55:ba:27:c2:88:a7:05:cc:68:eb:3d:bc:
                    cd:4b:eb:e5:f6:5c:c8:f0:d9:23:41:ff:4f:68:58:
                    79:54:4d:0e:f2:fb:a2:4f:97:ad:46:87:d1:9c:83:
                    79:b0:6f:7b:ae:9b:18:d6:b3:ea:fb:cd:32:6a:c9:
                    3c:c1:40:e8:bf:be:de:c6:81:5d:70:2b:18:7e:11:
                    f6:3b:c5:39:42:2e:a5:cf:b0:8b:91:be:a5:e2:b8:
                    96:c1:02:c7:41:3a:36:d9:45:16:3a:c8:46:37:e4:
                    6e:a1:3e:cd:91:11:27:41:38:02:69:33:bf:23:48:
                    14:0e:be:2e:42:3c:1b:e6:ab:59:cd:63:8a:5f:51:
                    40:5d:e4:ee:d4:a8:2d:9a:58:0a:64:ee:8a:ad:3b:
                    8b:1c:4d:a6:06:bc:a5:00:de:eb:f7:f5:d1:b5:f9:
                    17:7d:72:3a:ff:5c:fe:65:e5:0a:5b:09:a5:0c:92:
                    7d:74:78:29:04:ff:0f:5f:c5:7c:9b:20:d9:71:f7:
                    83:0e:6c:7b:80:5a:8c:71:fe:7c:b1:d0:02:eb:9e:
                    c0:50:f1:43:f0:59:38:3c:6b:25:7d:1f:b6:8c:8b:
                    8b:6f:a8:9b:d2:2b:e0:c9:f7:f6:4f:6b:d4:06:bb:
                    6c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:24:32:B8:EC:B1:0A:4D:44:DA:20:B1:0B:76:5F:4A:44:19:4C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:771::-2a0e:b107:77e:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:a60::/44
                  2a0e:b107:10f0::/44
                  2a10:2f00:138::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:74:d8:ba:99:ba:74:ee:4d:de:f1:86:0c:86:a0:93:41:01:
         6a:62:27:85:3f:8d:08:86:35:3d:a8:22:48:d6:e4:81:db:b2:
         75:6c:db:59:9c:bb:87:16:05:d4:5e:25:78:9d:1d:29:95:e9:
         21:c4:86:e9:ba:d1:f0:13:03:92:6d:2d:c3:1a:7c:4d:54:7b:
         c7:98:03:69:ac:ee:d3:71:44:6b:ac:ad:ae:62:d3:a9:ca:de:
         84:47:f0:43:f8:6f:dc:fa:86:58:dd:04:ef:e8:ee:bb:4c:f1:
         9f:96:07:49:f1:9e:3a:12:9d:e5:4c:50:db:43:af:bb:ee:12:
         86:bf:99:41:f5:8f:90:3f:2b:a9:a7:50:ab:8b:7a:14:88:17:
         c3:d0:bd:dd:6d:8b:8f:6d:ab:b4:c9:dc:5b:13:e7:98:ed:9e:
         36:0e:9d:ea:fe:ba:d7:19:8a:50:0c:6b:79:a4:9e:52:b7:54:
         0c:34:41:d1:a1:b9:34:d2:8d:c8:f6:38:e5:ae:55:b3:57:db:
         22:e4:f6:de:ee:da:bd:b2:27:b6:63:47:38:d1:9d:f7:ac:fe:
         03:b2:48:d9:87:e0:ae:89:b9:e3:57:f1:92:81:7d:08:13:4e:
         22:21:51:39:5a:85:e7:cd:6d:33:a4:c8:aa:b4:cb:c0:e2:5a:
         3f:14:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----