Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WD_07NxfkiBlR_VchdiXjW59iE.roa
File:                     6WD_07NxfkiBlR_VchdiXjW59iE.roa (raw, json)
Hash identifier:          UfA/OCRvhn7rXM0E53wLZ/M2We7q9rVzcV+zPxJl6Pk=
Subject key identifier:   E9:60:FF:D3:B3:71:7E:48:81:95:1F:D5:72:17:62:5E:35:B9:F6:21
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E8275C2CFC5763C2A60B349FA6EA0C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WD_07NxfkiBlR_VchdiXjW59iE.roa
Signing time:             Mon 02 Jan 2023 05:15:40 +0000
ROA not before:           Mon 02 Jan 2023 05:15:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213250
IP address blocks:        2a0e:97c0:3e3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e8:27:5c:2c:fc:57:63:c2:a6:0b:34:9f:a6:ea:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e960ffd3b3717e4881951fd57217625e35b9f621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:0b:4f:38:2a:e2:5b:e1:b3:f2:69:a6:ca:
                    87:35:af:2c:33:a0:fb:e8:45:65:3d:c0:ed:6d:d7:
                    26:87:6d:4c:21:e1:0c:96:70:a6:c3:39:fb:8c:92:
                    80:90:41:7e:8f:aa:6f:c8:02:1b:6c:71:5e:cb:81:
                    15:9d:88:ba:fe:6e:9b:b7:88:df:30:92:f8:24:97:
                    7b:62:c9:2c:b9:56:97:56:43:a2:6b:0d:8e:b9:a3:
                    54:e8:9a:3c:74:df:6c:6c:9c:b1:26:a8:16:c2:a5:
                    97:e9:88:eb:71:42:61:25:12:dc:a3:09:59:aa:e4:
                    3a:d5:f1:16:2c:b1:3d:1c:4a:c8:d7:87:1a:1f:b8:
                    39:66:ff:a0:05:ac:64:ab:44:5a:a0:4d:24:46:72:
                    61:8f:58:ff:0c:7a:ab:1e:b9:74:8a:55:77:89:e8:
                    0a:d3:af:dd:cc:c9:06:42:01:18:e9:28:76:40:db:
                    ed:a5:25:3e:53:1b:e2:0f:39:54:fe:e6:57:25:6d:
                    6b:9f:3d:b7:bf:ec:d4:5f:a3:31:fc:15:97:3d:11:
                    57:fe:7e:0d:1c:de:4c:e6:df:07:8f:c6:64:a3:a2:
                    47:42:31:7a:71:bd:b5:03:21:41:2f:60:98:e2:fd:
                    f1:ec:1c:a9:e5:ba:a4:00:b2:b1:0a:2e:6a:e5:38:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:FF:D3:B3:71:7E:48:81:95:1F:D5:72:17:62:5E:35:B9:F6:21
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WD_07NxfkiBlR_VchdiXjW59iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:b8:5a:a3:1f:f2:7a:99:aa:14:04:36:b0:66:f2:1b:15:8c:
         10:da:a5:be:9b:4b:8a:68:0e:ee:01:bd:51:39:49:ca:5d:6c:
         5d:dd:b5:64:3e:d2:e7:eb:5a:33:bf:43:09:d5:53:d7:1d:32:
         cc:f6:9f:2d:32:19:7f:35:f6:bc:09:9f:e5:95:9b:60:3b:ff:
         78:79:38:ca:08:b0:00:d9:1d:db:c5:b2:cc:dd:f8:a1:b3:8f:
         96:13:e4:da:25:8a:7c:eb:d8:9c:e7:02:26:c3:e1:68:00:88:
         15:f2:55:9b:5e:70:26:84:8b:2d:be:e6:eb:40:ef:83:a3:70:
         1a:58:c5:19:0f:ca:8b:5b:18:63:e4:9f:74:26:21:7c:ff:37:
         3a:f1:95:de:8a:8e:a4:46:d2:b8:26:65:e4:d9:c2:c4:96:71:
         c6:64:88:40:78:be:80:bf:03:07:a6:a3:82:87:ac:77:b9:a3:
         a4:66:2b:cc:fe:39:98:8d:f8:f7:ef:48:8e:0e:ba:d1:b6:2d:
         88:a5:db:df:cb:e7:07:9e:13:45:81:d7:a5:55:ad:df:9a:6f:
         03:c9:21:23:0e:b5:de:94:b7:f1:d8:53:1b:c7:a8:d9:9e:c7:
         84:24:c8:6a:43:e4:36:7f:32:66:e3:89:7e:a1:4c:8c:88:2a:
         c6:5c:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----