Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa
File:                     6ULTAhyQrtsLLt2nRH99UbvYwZg.roa (raw, json)
Hash identifier:          rFM8UalKiv6HeDAo9ghU48G/aQEpLqSTmi5ANnoxx7c=
Subject key identifier:   E9:42:D3:02:1C:90:AE:DB:0B:2E:DD:A7:44:7F:7D:51:BB:D8:C1:98
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BB524EBC7F3E5586E69B67ACD0E8BB77F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa
Signing time:             Thu 09 Nov 2023 17:32:57 +0000
ROA not before:           Thu 09 Nov 2023 17:32:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        45.148.116.0/22 maxlen: 24
                          2a0e:b107:1870::/48 maxlen: 48
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a10:ccc0:110::/44 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a10:ccc3:ccce::/48 maxlen: 48
                          2a0e:97c4:ac00::/38 maxlen: 48
                          2a0e:97c0:792::/48 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a10:ccc7:9000::/38 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:b107:278b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b5:24:eb:c7:f3:e5:58:6e:69:b6:7a:cd:0e:8b:b7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  9 17:32:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e942d3021c90aedb0b2edda7447f7d51bbd8c198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:69:66:02:bd:b7:ee:b7:8f:7f:a6:62:9b:
                    e9:db:86:31:94:8e:ca:3a:b7:43:18:c5:14:02:51:
                    51:54:49:ec:cd:77:bc:94:e7:2a:f6:b8:49:ff:16:
                    0c:7b:8d:90:f6:f9:2a:6e:9f:32:8f:b7:2b:00:2a:
                    a0:41:a0:a0:7f:11:22:93:30:b8:9d:28:51:d8:c8:
                    ea:b9:19:72:6d:1f:8f:90:da:0d:e4:80:b5:da:5a:
                    d7:f7:00:04:48:71:49:21:76:44:f6:7b:e4:e6:5c:
                    ae:8d:55:38:f6:2e:ec:0a:c8:9b:48:34:22:47:c3:
                    2b:41:bf:2d:bb:ac:95:20:82:59:6e:20:65:8b:83:
                    15:0f:0f:39:bd:47:5f:09:67:a6:0c:3f:8d:c4:bc:
                    a8:9b:58:c5:1e:3e:d0:36:27:68:1a:56:7b:29:b5:
                    79:1e:9c:10:76:22:23:42:85:0a:38:0e:68:88:c1:
                    ac:7f:20:4b:4a:97:40:ed:5c:f5:29:34:c9:7a:9f:
                    cd:4e:9f:a5:65:a9:64:d5:85:8e:6f:5e:93:8e:fe:
                    28:de:ea:e3:58:ef:0a:42:cd:64:f8:b5:bf:92:8c:
                    c4:1a:17:7f:94:4d:cc:ea:df:c3:06:01:ee:c8:48:
                    1c:b4:70:28:75:39:db:cf:0e:b4:d8:24:58:b1:b8:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:D3:02:1C:90:AE:DB:0B:2E:DD:A7:44:7F:7D:51:BB:D8:C1:98
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6ULTAhyQrtsLLt2nRH99UbvYwZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.116.0/22
                IPv6:
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c4:ac00::/38
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48
                  2a0e:b107:278b::/48
                  2a10:ccc0:110::/44
                  2a10:ccc3:ccce::/48
                  2a10:ccc7:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:f8:14:d8:68:1f:2b:5d:bd:78:9a:b8:69:c8:75:a0:33:
         47:5f:62:15:da:0f:3b:4e:5b:06:c5:a5:a8:9c:7f:d9:ec:58:
         9d:a4:0e:c9:ad:a6:76:62:7b:38:d1:38:0e:19:d2:68:97:b3:
         65:d9:48:35:2e:72:af:15:4c:69:e5:fc:07:51:27:39:88:af:
         a0:3c:0a:57:2f:0c:9a:41:33:2a:72:16:94:d0:73:ff:08:64:
         e2:cc:34:d6:7a:3e:3e:ad:76:97:dd:6b:46:e7:9b:06:67:e2:
         ec:bb:22:63:de:7f:e8:c2:18:7b:3e:16:03:d0:b4:18:e1:86:
         9c:90:70:39:02:1e:f7:18:db:01:0d:ad:bd:58:ff:db:1f:a1:
         30:5b:17:d6:3b:18:b3:1c:ab:76:bb:11:06:af:bd:bf:38:80:
         b2:af:d2:5c:1f:fb:c1:35:9a:d6:68:c9:48:53:4f:ed:ce:46:
         1a:1d:7b:69:a2:03:f7:18:e0:d5:50:da:15:85:7f:aa:e8:a3:
         87:2f:f5:4b:43:c2:82:ae:a9:32:6e:32:e6:26:71:41:8e:db:
         1f:3e:9c:5e:ef:a2:85:72:3a:36:1f:1a:4e:85:6e:1e:51:53:
         7f:6a:b8:c9:96:c8:3f:0c:69:b7:7d:3e:3d:db:e2:af:25:9c:
         e0:4f:2b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----