Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/78UgRz9pcEB0Qz6bZptjlyPZuus.roa
File:                     78UgRz9pcEB0Qz6bZptjlyPZuus.roa (raw, json)
Hash identifier:          vODP99QoO10jyqAknzSSI7uN/pAnJOGzZikU+AMIvaY=
Subject key identifier:   EF:C5:20:47:3F:69:70:40:74:43:3E:9B:66:9B:63:97:23:D9:BA:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AD30DDF3E5A5CAA9554C9F091805F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/78UgRz9pcEB0Qz6bZptjlyPZuus.roa
Signing time:             Tue 24 Jan 2023 16:09:41 +0000
ROA not before:           Tue 24 Jan 2023 16:09:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203899
IP address blocks:        2a0e:b107:1b20::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:d3:0d:df:3e:5a:5c:aa:95:54:c9:f0:91:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efc520473f69704074433e9b669b639723d9baeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:24:fa:90:36:cf:f6:c5:39:ad:08:66:a5:
                    d2:72:4d:aa:5a:f8:08:b3:4a:df:c8:42:ce:b5:7d:
                    ae:92:0f:33:34:a3:d1:f5:7a:28:65:7c:17:6b:b8:
                    45:e8:bf:9c:11:a3:dc:30:80:45:f8:92:41:a3:19:
                    81:1f:26:a5:50:10:88:6b:5d:1c:b8:d9:8b:f8:e5:
                    57:1c:99:80:15:6a:33:3f:63:00:fa:51:27:21:3e:
                    72:fc:82:6a:fd:a2:cc:46:53:f8:db:ac:1d:2f:4e:
                    53:4c:6a:bb:9d:6c:80:77:02:b0:16:b4:1a:19:6b:
                    dd:1b:71:62:bb:33:e1:1f:83:38:60:e3:a6:ad:bd:
                    06:c0:23:05:6a:45:3c:cd:1a:26:a0:41:27:93:e7:
                    4c:7d:ff:94:59:c3:9b:62:c5:0c:07:60:34:54:c1:
                    73:3f:a9:fb:f8:a7:a9:a5:1f:be:e1:82:72:0e:b7:
                    88:b3:10:29:e8:fe:fc:b3:f6:2c:03:fd:fc:66:23:
                    b3:be:03:d5:4c:ee:00:46:e2:ed:77:5e:b5:65:05:
                    ce:5f:fc:57:d9:39:4b:fe:b2:94:1a:5d:77:87:ff:
                    51:5b:8d:be:73:c1:81:35:27:85:6a:f1:9b:67:52:
                    a3:3f:10:08:90:2b:9f:f6:a7:a3:30:0b:2f:6c:23:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:20:47:3F:69:70:40:74:43:3E:9B:66:9B:63:97:23:D9:BA:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/78UgRz9pcEB0Qz6bZptjlyPZuus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b20::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:6f:62:c9:ef:32:8f:a7:58:db:4b:47:51:9a:41:e9:95:ff:
         bf:a1:3f:68:3d:7a:bd:18:7e:2b:d2:f7:53:f3:65:0e:d0:41:
         f5:d4:56:31:c5:0b:fe:10:6c:50:c5:b3:29:54:ff:9e:c0:1e:
         48:92:60:f6:64:a5:30:bf:06:cf:9e:49:7c:7b:4f:fa:aa:64:
         52:50:f6:86:e8:60:d9:d9:1e:b7:7b:34:77:67:64:10:96:d8:
         e8:1c:c6:4f:32:7f:3f:41:bb:77:11:86:30:33:31:73:94:ec:
         44:14:d5:a4:03:80:8a:fa:db:4f:8f:85:5b:90:a1:ae:91:af:
         d9:12:69:8b:df:45:be:16:8c:d1:29:05:a6:d4:45:08:c4:39:
         87:57:70:fb:3f:f2:f1:52:93:39:97:37:79:0f:ec:8d:0a:22:
         22:79:9f:fa:ed:1d:92:8c:f5:09:3e:95:c1:1b:48:bc:af:df:
         67:dd:ae:f4:b8:a2:d3:df:e6:6b:2d:90:1c:69:1d:50:c8:b1:
         2e:1a:ff:d6:88:d4:e3:dd:cc:8a:48:ee:e7:f4:90:89:f8:25:
         7d:25:d5:20:f4:ea:17:93:1e:76:06:15:0b:b6:9b:dd:b2:f6:
         7e:1b:d6:cc:dd:02:66:62:f2:0c:88:51:8f:ab:6e:33:21:19:
         56:25:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----