Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4QS1xLncxc9Ovl1L00Pc9_Arc4c.roa
File:                     4QS1xLncxc9Ovl1L00Pc9_Arc4c.roa (raw, json)
Hash identifier:          ZFZaxBr67QeK4tHyERyqwGFAexZxSi8q0wq+MGRmVTM=
Subject key identifier:   E1:04:B5:C4:B9:DC:C5:CF:4E:BE:5D:4B:D3:43:DC:F7:F0:2B:73:87
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E774703BAD0D19E4041939283F9350
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4QS1xLncxc9Ovl1L00Pc9_Arc4c.roa
Signing time:             Mon 02 Jan 2023 05:14:54 +0000
ROA not before:           Mon 02 Jan 2023 05:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0e:b107:19a0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:74:70:3b:ad:0d:19:e4:04:19:39:28:3f:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e104b5c4b9dcc5cf4ebe5d4bd343dcf7f02b7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:93:eb:59:f3:41:7f:20:4d:4a:1f:7b:91:
                    96:77:1f:bc:85:cb:d0:ca:ba:53:81:aa:7a:99:42:
                    f5:8e:2e:ee:df:b3:03:34:6b:87:dc:41:82:15:44:
                    33:66:31:f1:7e:00:d0:fd:22:9e:1d:79:64:a4:27:
                    9a:cb:08:c3:60:26:2f:98:fe:9a:cb:ae:e3:21:02:
                    3f:c1:d7:f6:8b:1d:51:4b:a6:91:81:0e:0d:7f:db:
                    31:03:7b:04:7a:53:b9:9b:96:84:cf:65:96:00:24:
                    b4:c6:f6:ff:01:49:c5:c4:47:93:d4:75:c7:19:f5:
                    77:ac:0b:d0:0c:55:02:a8:02:d6:fe:da:f0:da:92:
                    d2:44:45:7e:9c:43:3d:24:e8:e8:78:f6:6a:66:20:
                    3d:17:3a:25:cd:9d:cf:95:33:a2:d8:30:7f:ea:78:
                    9c:cc:c8:33:d6:04:57:5f:d1:bf:dc:9a:ce:5b:7e:
                    03:9e:ad:fe:74:16:23:03:7c:f8:37:e6:51:5a:0c:
                    09:35:71:60:62:e8:ae:d9:bf:fa:91:af:74:07:b9:
                    4d:42:6f:34:9b:9b:6f:04:ef:4b:7a:ad:f9:4c:9b:
                    6b:5a:17:47:37:88:88:3a:e1:07:e6:f6:85:28:04:
                    9c:36:c9:80:6f:ea:9b:c9:b9:78:5d:03:ec:32:03:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:B5:C4:B9:DC:C5:CF:4E:BE:5D:4B:D3:43:DC:F7:F0:2B:73:87
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4QS1xLncxc9Ovl1L00Pc9_Arc4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:79:8d:1b:e9:07:15:d1:4b:8c:3d:05:ff:cf:23:a7:78:
         d9:4b:13:71:f9:5f:d7:1f:90:4d:ad:bb:08:88:79:b0:c8:08:
         49:db:1d:97:d9:75:57:77:9b:2b:a8:b4:b1:7f:6a:62:53:79:
         6c:e5:c2:b6:e6:0a:43:47:15:80:c6:3c:4a:fe:d2:6f:55:70:
         44:ad:b7:9e:04:07:e4:7b:34:a4:f7:3d:6c:9a:8a:b3:cb:b9:
         bc:7a:31:90:1a:4a:15:86:e3:44:1b:8b:35:fa:b1:f0:5d:d1:
         10:dd:01:b7:e5:c9:a5:89:f8:dc:ee:98:23:08:e9:1d:4d:bb:
         19:4f:11:94:06:3b:e7:db:90:ed:63:a2:db:cc:f4:d0:a9:e7:
         bc:f0:99:0c:4d:dd:52:75:e8:ac:b5:e8:14:20:a6:7b:00:bc:
         28:59:bc:a5:d7:2b:8f:f3:0f:6b:53:cc:26:41:40:dd:a5:65:
         45:f7:bb:65:85:58:fe:db:6f:11:da:08:c7:18:59:3b:9b:dc:
         a1:4d:24:ca:c2:5c:36:0e:36:6f:e4:1f:60:60:e4:96:55:c9:
         a6:b0:1e:90:73:89:97:50:fe:1f:11:39:56:ac:09:8f:5d:02:
         47:44:34:f5:df:72:b3:e4:be:df:e7:0c:db:dd:ca:a7:bf:f1:
         21:1a:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----