Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Unt6pwBnTuKA0Z2BObBN8Z3Jco.roa
File:                     3Unt6pwBnTuKA0Z2BObBN8Z3Jco.roa (raw, json)
Hash identifier:          q2ngWRc9Vl/KtHKjgu7dunfQH7ndwIbP+2cGN7oL9Vo=
Subject key identifier:   DD:49:ED:EA:9C:01:9D:3B:8A:03:46:76:04:E6:C1:37:C6:77:25:CA
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E8105114F1E5A94ADFE86A94C3E672
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Unt6pwBnTuKA0Z2BObBN8Z3Jco.roa
Signing time:             Mon 02 Jan 2023 05:15:34 +0000
ROA not before:           Mon 02 Jan 2023 05:15:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211977
IP address blocks:        2a0e:97c0:120::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:10:51:14:f1:e5:a9:4a:df:e8:6a:94:c3:e6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd49edea9c019d3b8a03467604e6c137c67725ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:a1:2f:30:04:8e:ea:5f:9a:85:1c:50:dd:
                    ac:e0:82:bb:74:88:c3:43:b3:e2:0f:84:7d:48:41:
                    02:aa:1e:90:0d:a6:76:3b:01:64:b3:13:33:22:69:
                    dc:10:17:56:da:e4:73:25:ac:69:a7:9b:18:e0:b0:
                    90:3b:df:45:30:7c:93:cf:88:5b:bd:80:9b:a7:a7:
                    44:b5:20:8f:61:f4:26:50:e2:46:29:94:f6:43:2e:
                    9d:7f:53:5d:46:c4:44:17:98:3e:36:f8:42:0f:54:
                    7c:d9:78:1a:2b:e5:2e:13:4e:62:f7:3a:da:31:dc:
                    e1:1a:0f:db:6d:a2:16:c5:c2:9f:b8:dc:83:b2:a6:
                    9b:e9:7a:80:6b:95:6d:8f:c6:9b:24:38:53:fc:fd:
                    fc:6f:18:3f:93:ad:28:c2:a6:07:a7:07:a5:2f:4d:
                    8a:1d:fb:97:6e:ad:83:83:a9:d8:04:02:64:bc:ca:
                    ea:e2:72:e4:77:a3:55:e0:11:a9:66:35:4a:7f:13:
                    fd:14:24:7f:01:9c:4b:4f:ef:84:07:71:87:11:5d:
                    14:68:78:00:b1:4f:9f:27:70:b2:69:a8:6b:84:ae:
                    a3:03:3b:83:b1:69:14:03:f1:dd:fd:b4:c6:b7:f8:
                    ff:0e:20:79:e8:cd:34:57:6a:b0:5f:73:82:83:ad:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:ED:EA:9C:01:9D:3B:8A:03:46:76:04:E6:C1:37:C6:77:25:CA
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3Unt6pwBnTuKA0Z2BObBN8Z3Jco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:00:7b:02:59:28:9e:a6:6a:95:93:cd:4d:e9:65:74:20:
         5b:90:83:6f:63:f8:7d:23:b8:d6:5f:6a:e9:19:89:0e:9c:df:
         ac:49:b1:b1:e5:3f:4c:6b:90:65:61:90:7f:36:e5:96:d7:b2:
         f9:94:30:c6:0b:7f:e7:3b:f0:45:98:ea:53:c3:d3:5a:61:09:
         2f:ef:d9:bd:7f:56:2c:6a:ca:da:55:3a:8e:fa:3f:1c:ed:2e:
         4a:20:af:99:48:02:e1:ae:ec:26:cb:ba:00:16:72:4f:41:ae:
         5c:9d:23:f0:af:29:a0:7b:d8:d9:14:eb:5e:9b:01:e6:fb:7e:
         dc:cd:2d:93:2f:d8:99:ce:63:67:28:dc:45:cb:3b:fb:62:26:
         17:ce:94:8e:cf:60:d3:08:ce:2f:77:2a:27:8b:7d:db:f3:84:
         1b:e3:44:cd:10:17:ee:8d:91:1e:3b:48:1f:e8:41:89:b3:5d:
         5d:b9:42:69:58:e7:97:7a:28:58:68:cd:da:bb:40:50:35:d3:
         bf:f0:cf:ad:a2:32:69:70:74:03:15:d0:69:d7:9f:51:1b:c7:
         c9:f1:7e:76:55:8e:f7:10:f8:56:2d:cb:7c:1f:5c:8b:e0:61:
         d6:97:9b:c8:79:9c:cd:8b:a1:5d:65:d3:f3:6c:02:bc:de:b4:
         8b:81:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----