Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Y-oH_S5V6RpbBzt3ZeVuhTDOoY.roa
File:                     5Y-oH_S5V6RpbBzt3ZeVuhTDOoY.roa (raw, json)
Hash identifier:          YetqZ5XgR99/OXX5MaawoSboQqesoCi2rJu/LY6JJ0w=
Subject key identifier:   E5:8F:A8:1F:F4:B9:57:A4:69:6C:1C:ED:DD:97:95:BA:14:C3:3A:86
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187D046044AC4ECB8E8CC33F497427B6284
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Y-oH_S5V6RpbBzt3ZeVuhTDOoY.roa
Signing time:             Sun 30 Apr 2023 03:47:42 +0000
ROA not before:           Sun 30 Apr 2023 03:47:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0e:b107:21c0::/45 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 09:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d0:46:04:4a:c4:ec:b8:e8:cc:33:f4:97:42:7b:62:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 30 03:47:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e58fa81ff4b957a4696c1ceddd9795ba14c33a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:82:a5:c0:88:89:5e:17:e1:6a:02:c4:ba:
                    be:63:7c:2e:fe:8c:55:4c:fb:dc:8e:da:87:6b:df:
                    97:94:7e:c1:ff:c5:b7:40:c8:e6:49:96:65:1b:9f:
                    59:49:7a:aa:cd:95:2a:11:e5:f4:c1:18:22:dd:9f:
                    7e:60:ca:40:fd:a9:0f:6d:c3:fb:06:16:9f:07:40:
                    f1:2e:5d:26:d0:dc:36:b3:61:b3:33:b2:ff:97:a6:
                    cb:c6:2e:b3:07:40:8a:f4:e5:db:88:6f:8b:0e:47:
                    21:12:85:0f:64:a8:39:72:35:a3:dd:2f:96:af:bc:
                    98:61:b5:ff:18:bd:d2:f5:07:a8:a6:38:a0:71:5e:
                    7d:92:f6:da:1a:6b:de:12:1b:ec:71:f8:15:28:6b:
                    05:33:05:91:44:cb:a7:5a:df:ee:57:c9:2e:48:3b:
                    a7:ac:e1:4f:07:2d:bd:c2:34:e6:05:53:75:50:e4:
                    32:7f:8a:33:09:6d:78:b7:2e:f1:16:4c:56:2b:c0:
                    72:eb:ba:c0:9b:c3:4c:bf:f8:f3:ab:f0:07:f3:f1:
                    5a:1c:1f:64:d5:64:5e:88:3c:23:3d:ce:28:cb:71:
                    8c:e6:32:6b:22:5a:34:9b:b7:74:60:3f:0f:98:22:
                    2a:33:42:31:e7:fa:73:1d:0e:8e:04:c3:bd:54:87:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:A8:1F:F4:B9:57:A4:69:6C:1C:ED:DD:97:95:BA:14:C3:3A:86
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Y-oH_S5V6RpbBzt3ZeVuhTDOoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:21c0::/45

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:f7:2f:d5:d6:41:e2:90:cb:2a:be:4f:9e:a6:7c:fb:1d:
         30:0b:9c:d7:13:f3:14:12:0a:56:11:3f:49:f0:50:b4:50:3b:
         31:98:bf:d4:e0:ba:98:a3:13:94:be:fa:c2:74:87:89:92:2a:
         c4:7a:be:a2:c4:84:04:a4:b5:2d:77:bf:38:0d:92:f4:d0:f9:
         b8:4a:06:c9:e0:32:55:75:3c:6e:26:5b:33:16:19:15:3f:cf:
         e1:cc:d0:e5:1e:ab:38:ac:8d:5d:6d:49:bc:f2:a8:1d:6e:40:
         d1:2e:ef:0a:a6:d7:0c:3d:55:6c:d5:d3:83:6e:ab:3f:b1:6c:
         1d:e6:4c:e9:ca:03:74:ad:ef:6c:3e:98:65:74:02:8a:b8:cc:
         a2:db:38:c7:30:bb:74:44:d7:ff:e3:88:96:55:4e:31:9f:2f:
         35:58:34:d4:f7:4b:57:2d:46:bb:77:2d:7c:66:80:c1:f4:1e:
         cf:1e:6b:87:0f:68:8a:cd:d0:e2:d2:66:43:2c:b9:05:f6:9f:
         67:67:9d:95:d3:d0:98:dc:74:52:54:31:2d:2c:9b:7c:71:07:
         09:3d:e3:52:b3:bc:f3:77:01:dc:a6:6b:94:a8:9c:ec:97:f2:
         c6:b2:d3:9b:99:90:34:eb:77:de:fd:21:f3:a7:c3:2c:af:3b:
         1a:ef:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----