Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75eaChb5MkNw7OGjB4vwjf8tHpE.roa
File:                     75eaChb5MkNw7OGjB4vwjf8tHpE.roa (raw, json)
Hash identifier:          2HD07AevOl1kF/w5WpJ4pdXJ+OAQqh3F/GlN7Uv3rhk=
Subject key identifier:   EF:97:9A:0A:16:F9:32:43:70:EC:E1:A3:07:8B:F0:8D:FF:2D:1E:91
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01874D7F3552CC8BB568E45F228404AD1EBB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75eaChb5MkNw7OGjB4vwjf8tHpE.roa
Signing time:             Tue 04 Apr 2023 18:19:54 +0000
ROA not before:           Tue 04 Apr 2023 18:19:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0e:97c0:220::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4d:7f:35:52:cc:8b:b5:68:e4:5f:22:84:04:ad:1e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr  4 18:19:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ef979a0a16f9324370ece1a3078bf08dff2d1e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:9b:94:e8:5e:c7:c3:33:4a:ba:8c:f4:41:
                    d3:9f:62:41:7b:e5:df:fa:51:25:e7:5d:d3:37:92:
                    b3:be:c7:2f:4e:b6:39:96:19:1e:90:d8:d4:71:f6:
                    03:a7:bd:13:32:e9:fb:93:61:04:65:77:da:56:85:
                    12:f9:2c:ec:ce:99:02:62:2c:a5:2f:fb:73:f1:35:
                    b7:7b:64:8a:bb:d5:7b:ef:03:42:8d:2c:96:99:87:
                    f1:77:8b:ad:23:77:b3:61:14:07:69:fa:7f:98:df:
                    61:fc:79:0f:44:f4:23:88:41:de:ef:fd:77:d3:96:
                    38:61:70:82:18:7b:29:ba:a4:9d:a4:2b:03:87:5e:
                    66:75:90:58:e3:81:9e:07:dc:8b:50:da:ef:2c:ef:
                    7c:4d:60:f9:1e:cd:71:fd:3c:f2:3b:76:70:01:78:
                    54:57:ff:a7:26:0e:72:a4:50:df:77:c3:c9:91:03:
                    63:d7:d7:4c:90:18:b0:17:77:64:d1:ae:25:b3:48:
                    f4:d9:a5:72:df:13:e4:72:ee:20:8e:04:bb:86:92:
                    03:85:49:5a:56:9a:82:77:66:73:a0:86:34:8c:9a:
                    5a:d4:ee:a6:81:76:ec:43:6d:c5:5b:8a:f7:4e:c4:
                    c0:74:9e:7c:b2:da:51:77:74:96:f2:bb:99:a0:d3:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:97:9A:0A:16:F9:32:43:70:EC:E1:A3:07:8B:F0:8D:FF:2D:1E:91
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75eaChb5MkNw7OGjB4vwjf8tHpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:ef:0f:e9:de:b5:c4:5c:ad:a7:c9:ba:bc:97:57:9f:83:
         f6:a0:5a:f4:2e:eb:50:cd:30:cb:18:c2:ad:d8:39:97:d9:37:
         3c:66:37:33:22:fc:a1:92:71:0a:5f:cc:1b:5b:8d:a9:cb:aa:
         15:a2:64:98:63:3f:e8:fd:61:f8:3d:5d:98:ec:49:da:92:9e:
         52:78:44:90:9d:e3:18:34:f4:15:a0:6b:08:a3:99:84:a3:a4:
         d0:f1:96:1d:58:16:32:68:3d:44:a9:a8:d5:d1:5c:6d:42:86:
         71:88:9d:fe:56:65:35:00:7f:69:6a:10:c0:8a:ca:a6:68:1c:
         17:c1:81:48:94:e9:1c:a1:27:9d:33:5d:c3:25:be:24:ff:eb:
         5c:87:31:4e:fd:96:e3:64:7a:d5:92:34:97:5a:ac:a4:49:23:
         53:b7:07:b6:01:54:33:c4:3c:06:49:b0:e5:5f:e9:9d:6b:d4:
         69:b0:9b:c8:d6:ea:cd:e5:b2:26:cc:0b:dc:86:6f:fb:a2:46:
         4d:95:5f:45:fb:06:89:a4:88:b9:0d:d1:23:44:71:23:8c:64:
         48:b5:16:eb:0a:10:80:90:38:57:08:01:d2:0d:8f:27:d6:44:
         c6:fb:66:32:32:d5:52:4a:3f:ce:2c:94:3d:08:a3:9c:48:ea:
         3b:a9:e8:0a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYdNfzVSzIu1aORfIoQErR67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNDA0MTgxOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk3OWEwYTE2ZjkzMjQzNzBlY2UxYTMwNzhiZjA4ZGZmMmQxZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EublOhex8MzSrqM9EHTn2JBe+Xf
+lEl513TN5KzvscvTrY5lhkekNjUcfYDp70TMun7k2EEZXfaVoUS+SzszpkCYiyl
L/tz8TW3e2SKu9V77wNCjSyWmYfxd4utI3ezYRQHafp/mN9h/HkPRPQjiEHe7/13
05Y4YXCCGHspuqSdpCsDh15mdZBY44GeB9yLUNrvLO98TWD5Hs1x/TzyO3ZwAXhU
V/+nJg5ypFDfd8PJkQNj19dMkBiwF3dk0a4ls0j02aVy3xPkcu4gjgS7hpIDhUla
VpqCd2ZzoIY0jJpa1O6mgXbsQ23FW4r3TsTAdJ58stpRd3SW8ruZoNMzWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO+XmgoW+TJDcOzhoweL8I3/LR6RMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNzVlYUNoYjVNa053N09HakI0dndqZjh0SHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAIg
MA0GCSqGSIb3DQEBCwUAA4IBAQCX1u8P6d61xFytp8m6vJdXn4P2oFr0LutQzTDL
GMKt2DmX2Tc8ZjczIvyhknEKX8wbW42py6oVomSYYz/o/WH4PV2Y7Enakp5SeESQ
neMYNPQVoGsIo5mEo6TQ8ZYdWBYyaD1EqajV0VxtQoZxiJ3+VmU1AH9pahDAisqm
aBwXwYFIlOkcoSedM13DJb4k/+tchzFO/ZbjZHrVkjSXWqykSSNTtwe2AVQzxDwG
SbDlX+mda9RpsJvI1urN5bImzAvchm/7okZNlV9F+waJpIi5DdEjRHEjjGRItRbr
ChCAkDhXCAHSDY8n1kTG+2YyMtVSSj/OLJQ9CKOcSOo7qegK
-----END CERTIFICATE-----