Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa
File:                     6sEhVCzlpylyWIpwb2QR0GRxYic.roa (raw, json)
Hash identifier:          32+3FLYX+vYkVWFJBKqjn2dkw5sPro/IceTmwfNYsWk=
Subject key identifier:   EA:C1:21:54:2C:E5:A7:29:72:58:8A:70:6F:64:11:D0:64:71:62:27
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018C6503F3F9DD4686A17E01C67058494270
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa
Signing time:             Wed 13 Dec 2023 21:10:07 +0000
ROA not before:           Wed 13 Dec 2023 21:10:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216418
IP address blocks:        2a0e:97c1:130::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:65:03:f3:f9:dd:46:86:a1:7e:01:c6:70:58:49:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 13 21:10:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eac121542ce5a72972588a706f6411d064716227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:36:16:d4:94:2d:22:87:f9:37:f6:61:bf:
                    6f:fe:6c:f0:b9:d6:98:56:0d:48:4b:4b:52:b7:9b:
                    7a:05:5e:b3:de:6b:80:b2:90:a1:56:57:84:20:a9:
                    f1:d2:69:ab:aa:6c:3b:17:79:6b:2c:39:2f:c2:ec:
                    19:71:04:a9:da:e2:c5:cd:14:62:9c:cf:f5:7f:32:
                    1f:ec:96:db:e8:d8:72:97:cc:1c:bf:7d:8a:3a:0c:
                    f6:54:58:41:17:be:23:62:91:a4:b8:d0:e1:07:ff:
                    ee:77:c7:ad:d2:66:0a:fe:e5:07:f6:f2:81:93:0d:
                    b2:7c:3b:d9:89:0a:01:bf:94:95:2b:37:b0:e6:fc:
                    54:8f:eb:60:e1:4e:9a:ed:4c:75:ca:ab:0d:c5:6b:
                    85:f9:f6:96:3d:d2:af:ce:b1:5a:37:c5:95:5c:a5:
                    d3:74:7a:17:37:99:7c:6a:7b:4a:22:48:29:de:d0:
                    8b:1c:db:b2:a6:79:2b:72:3e:d0:10:17:79:a4:1d:
                    f0:3c:d3:3b:7a:f3:7c:4d:67:41:78:4e:9b:30:f3:
                    39:ad:7a:a0:79:f7:e8:6d:4e:5c:b9:3a:d5:2c:c4:
                    58:af:d9:a2:a4:ff:fc:03:4b:79:9e:d6:69:e5:33:
                    ef:07:50:ce:1f:d3:e6:47:4b:5d:98:72:96:01:9f:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:21:54:2C:E5:A7:29:72:58:8A:70:6F:64:11:D0:64:71:62:27
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6sEhVCzlpylyWIpwb2QR0GRxYic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:a6:14:50:b7:0a:d5:25:80:5f:87:26:74:bc:d0:9f:84:
         d1:b2:12:e9:95:eb:01:26:45:aa:bc:4c:e7:6e:b1:5c:59:c7:
         c8:6e:8a:2a:65:26:ff:62:2b:7f:93:9d:d6:2b:68:64:29:68:
         1d:9b:ec:7e:20:d4:df:ce:9f:9a:87:53:4a:01:cd:ba:bc:35:
         38:bc:37:70:3a:37:ab:6b:74:6a:d5:27:0f:e2:cd:0b:0e:b3:
         6e:68:47:5f:6f:11:3e:eb:19:c1:f7:ef:d7:96:fd:ef:83:5a:
         66:23:45:56:1a:5f:54:b3:32:c0:e4:2d:07:b1:1a:5a:6f:72:
         7a:2f:ab:c0:b6:b1:da:7b:2c:20:60:af:73:dd:50:ed:ea:28:
         e2:eb:ce:9b:4d:08:b7:9d:a0:7e:b8:64:ba:de:75:62:6a:14:
         a3:bb:45:8b:4e:87:85:a9:7a:01:b1:4d:84:2c:1b:e6:d9:8e:
         87:85:56:77:9a:32:3c:b0:31:5e:82:b0:3a:5d:00:10:63:f2:
         cd:1c:7f:4c:ca:e4:14:4a:59:be:17:31:90:55:41:7f:f1:39:
         d8:c1:75:88:cf:a8:14:83:71:8f:ee:32:2e:89:6d:4b:f5:bb:
         e7:fe:ad:a1:7f:a1:f7:69:ac:52:60:e7:4a:ce:6c:ab:e6:34:
         73:77:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----