Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa
File:                     6uH5v0F4hIo-HZjIb_je1B3zbHA.roa (raw, json)
Hash identifier:          ICdkiuH1JPMjZQcz08OD/zoNKQRZLaams4AvqqvQHQc=
Subject key identifier:   EA:E1:F9:BF:41:78:84:8A:3E:1D:98:C8:6F:F8:DE:D4:1D:F3:6C:70
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7941356029F5EAD0815C7D0CAE3A4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa
Signing time:             Mon 02 Jan 2023 05:15:02 +0000
ROA not before:           Mon 02 Jan 2023 05:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140936
IP address blocks:        2a0e:b107:bd0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:94:13:56:02:9f:5e:ad:08:15:c7:d0:ca:e3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eae1f9bf4178848a3e1d98c86ff8ded41df36c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b6:8c:56:e2:70:96:e0:45:b9:97:c9:46:2b:
                    5a:25:d3:c9:37:1d:de:a5:db:ec:53:a0:72:06:fb:
                    79:60:63:6b:59:0a:36:af:95:3e:ad:d3:c0:f7:71:
                    bb:6b:89:22:81:d6:4d:ee:12:ea:43:5b:02:3a:af:
                    08:b1:c2:9d:82:c9:84:32:cd:cc:f7:63:f8:6e:46:
                    eb:be:28:29:f4:84:64:d0:fa:05:59:0c:6a:e3:fb:
                    92:aa:b0:57:75:08:44:36:cf:98:d2:2d:39:4d:89:
                    fb:a0:4d:4a:ad:e0:8c:73:b9:3f:5f:95:b5:e2:39:
                    13:6a:ec:ce:c9:ba:cc:62:8c:d8:7d:08:28:af:d9:
                    eb:7e:1e:7e:92:a0:f7:48:af:72:28:90:37:ab:1d:
                    b2:74:14:7c:d7:b1:c6:9d:c6:f1:2c:e3:8a:26:f0:
                    7a:8a:2b:1a:6a:fc:34:5c:0e:f3:c8:45:69:61:9b:
                    c5:99:35:f9:ae:06:25:82:2c:e5:a5:ed:d3:7e:7e:
                    7f:ea:16:c4:50:5f:bd:49:04:de:fb:87:05:6f:4e:
                    6b:94:93:78:58:c5:a2:b0:ee:f3:b8:36:ce:0d:8d:
                    f4:cb:20:1e:6f:6d:4f:62:20:43:a3:ce:bd:95:6c:
                    09:de:eb:74:9c:f0:80:bd:12:39:ca:15:14:4c:c1:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:F9:BF:41:78:84:8A:3E:1D:98:C8:6F:F8:DE:D4:1D:F3:6C:70
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6uH5v0F4hIo-HZjIb_je1B3zbHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:bd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:82:f1:e1:c0:d3:92:f4:c9:52:dc:a8:ab:9c:b0:37:fa:2f:
         b0:58:ce:73:12:4d:6f:6c:af:a9:f3:17:25:05:54:7c:0d:e7:
         27:e5:50:0e:12:5e:a0:14:41:2e:e7:a6:2c:9a:6c:36:ec:58:
         39:40:72:84:f1:52:ed:42:11:05:f3:da:5c:82:47:cc:b7:5b:
         52:5f:29:75:2d:c2:52:da:37:43:7d:a0:94:9c:00:8a:e1:9b:
         60:d4:99:e0:2c:f4:f7:d0:9a:c4:53:01:53:5e:01:1e:21:14:
         5e:89:9b:b1:64:1c:97:9b:3c:2c:30:48:ad:07:2e:e6:99:00:
         a3:5c:f5:84:3e:50:d0:96:25:43:9b:14:31:6b:8a:8f:02:1e:
         9c:b1:8e:f2:43:d6:84:ac:41:95:10:9b:04:1b:1f:72:a2:40:
         27:8a:a6:8d:44:7c:dd:f2:ec:c1:17:89:98:78:52:af:40:6d:
         06:79:c2:b1:3a:68:5c:46:bb:92:7a:70:bd:35:b2:92:47:8b:
         83:ab:53:1d:4f:53:d7:4c:aa:1d:77:66:1d:f8:81:43:13:cf:
         de:bb:03:c8:7e:56:41:49:6c:56:7b:fb:04:43:fe:0c:30:9a:
         d0:3c:a6:26:1e:9c:f8:1a:90:f5:3b:f6:ef:43:a7:22:b8:94:
         40:3a:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----