Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa
File:                     4p6SN9YItilRKee0WGH_6ye9ZKM.roa (raw, json)
Hash identifier:          y7OaruiefE8XOy/DaN3xl9n+KLOE5dYUTcnYqHRDhh8=
Subject key identifier:   E2:9E:92:37:D6:08:B6:29:51:29:E7:B4:58:61:FF:EB:27:BD:64:A3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E81554620A97B405DA6BE8DD01FAF0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa
Signing time:             Mon 02 Jan 2023 05:15:36 +0000
ROA not before:           Mon 02 Jan 2023 05:15:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212267
IP address blocks:        2a0e:b107:50::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:15:54:62:0a:97:b4:05:da:6b:e8:dd:01:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e29e9237d608b6295129e7b45861ffeb27bd64a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:8f:08:c1:47:69:c8:1d:e7:d7:39:9f:1a:
                    f4:d6:c0:ac:87:2b:64:69:8b:b3:28:80:f9:2b:ee:
                    ac:3a:c0:f0:7f:5b:7e:ec:0f:11:d3:24:4b:3a:54:
                    67:a2:ed:f4:5e:61:d3:71:f3:86:c4:02:03:e3:59:
                    ec:2c:79:2e:88:29:f3:23:60:57:e9:23:76:35:be:
                    c8:3a:ae:1a:8c:0c:20:8b:db:97:f7:2e:ce:1e:46:
                    fd:1c:1a:66:9d:b2:85:bc:4c:51:2b:91:c7:05:6e:
                    33:09:f0:13:af:03:95:79:1a:be:21:fc:c5:1e:de:
                    95:77:ee:95:1d:a3:7d:66:4c:9e:f4:62:0d:27:f4:
                    65:9b:5c:c2:7c:c4:7d:b2:bf:3f:9f:cb:d1:7f:40:
                    f4:22:f7:89:bb:f3:f9:70:ab:e7:00:31:1e:16:2d:
                    bd:1d:7a:1f:34:3e:54:3b:b6:2f:cb:d3:1b:90:ea:
                    e0:38:d8:fa:b3:79:92:10:a5:6d:6d:ee:8b:8f:d1:
                    50:7c:9d:c1:90:08:e3:2d:ba:cc:81:43:6b:2d:84:
                    56:48:a6:13:29:10:06:d1:e9:9e:ea:27:10:c8:f6:
                    de:dc:25:1e:20:b2:62:83:93:31:a7:32:c5:42:9c:
                    01:ce:16:6b:e0:93:ce:e1:0b:6a:8c:bc:5f:12:e1:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:92:37:D6:08:B6:29:51:29:E7:B4:58:61:FF:EB:27:BD:64:A3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4p6SN9YItilRKee0WGH_6ye9ZKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:4f:d0:3a:9b:3c:87:54:5d:21:00:26:02:f0:87:49:b7:
         d3:d2:e1:13:3e:61:3d:a9:e9:9e:7f:6c:b2:b4:1e:5b:6b:9a:
         8c:c6:5b:59:3a:2c:5c:3f:5a:82:2b:ba:49:7c:fb:e4:bb:92:
         24:44:36:6a:b5:82:81:f3:39:e0:03:0f:e9:e9:77:e6:5b:f9:
         25:ef:70:8e:4e:5f:96:5d:2c:87:b5:11:96:d3:2e:49:7d:bb:
         11:a8:ed:a4:09:74:90:10:4f:1d:a9:a1:1b:8a:70:83:35:d9:
         a2:5b:57:52:23:7c:c7:9f:01:35:ba:52:f7:1d:eb:9b:bb:7c:
         c8:a4:72:da:6d:85:89:15:10:2f:35:4e:49:f6:b4:93:15:2b:
         77:5c:ce:4f:23:75:42:22:77:02:2c:04:81:66:13:45:e0:8b:
         f9:2e:00:ca:52:f4:c3:aa:30:e7:43:bd:16:97:51:3f:40:d0:
         8f:7a:39:ae:88:42:9e:11:00:dc:ac:26:8f:aa:15:06:25:20:
         87:38:5a:1e:05:b6:a9:c4:45:ff:b8:a2:43:54:8e:6e:84:8e:
         f6:91:12:4e:f9:a1:bb:c0:8c:b2:14:f6:a6:2f:40:7c:cd:dd:
         25:35:78:9c:0d:c1:b9:79:bc:a0:cc:fd:90:90:6b:ef:4a:a0:
         4b:47:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----