Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa
File:                     7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa (raw, json)
Hash identifier:          6pB1Nxcv+cFbXascbpGarUYy3qM481VRqxqPDkUE+6U=
Subject key identifier:   EC:1B:8D:B8:76:77:16:E0:C4:59:FF:FA:42:AF:E3:C3:ED:DD:FA:3A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A5BB729BDC978FFC6D72304D5A7DCDE5F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa
Signing time:             Sun 03 Sep 2023 15:44:04 +0000
ROA not before:           Sun 03 Sep 2023 15:44:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216411
IP address blocks:        2a0e:b107:2050::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5b:b7:29:bd:c9:78:ff:c6:d7:23:04:d5:a7:dc:de:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  3 15:44:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec1b8db8767716e0c459fffa42afe3c3edddfa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:55:84:99:94:42:f0:21:2b:d5:a2:bf:ae:
                    2f:73:3f:2d:f5:3e:15:90:f7:32:d7:d9:08:1b:02:
                    9d:de:57:c1:50:1a:df:2f:28:80:b6:69:56:e1:4e:
                    2a:3c:03:08:ec:f1:5c:8f:b2:b0:25:bc:0d:63:1e:
                    e7:ba:40:f8:73:63:5b:0f:e1:a8:2c:f6:6e:c7:51:
                    2e:d1:30:b8:5a:0b:ac:43:8a:25:c4:b0:7a:bd:e9:
                    46:ae:ce:4b:1a:01:5a:02:63:45:4e:bd:16:79:9d:
                    08:55:cc:e9:39:b0:c9:0b:de:f6:2b:75:ac:e4:74:
                    0d:c4:56:87:9b:9d:16:5c:a2:f0:7d:d5:3c:86:22:
                    5b:22:28:00:6c:2d:a6:e6:a5:0f:cc:33:b4:61:06:
                    54:06:80:d6:17:3c:b9:08:90:b1:23:85:5d:a3:66:
                    0a:ed:ff:65:cf:ed:6c:5d:b3:cb:c6:cd:5f:d4:57:
                    be:63:a7:78:db:0e:a6:e3:cc:42:d5:b7:56:7e:15:
                    8d:1b:e8:7e:31:40:09:ec:fb:44:17:81:27:77:2f:
                    7b:4e:39:bc:cd:3a:8d:b6:56:65:f8:ab:4e:3a:c0:
                    49:81:ed:cc:df:a6:ea:03:ab:35:be:85:51:30:df:
                    83:bf:21:c9:97:36:d1:08:9b:54:c4:33:dd:d3:f0:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:8D:B8:76:77:16:E0:C4:59:FF:FA:42:AF:E3:C3:ED:DD:FA:3A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7BuNuHZ3FuDEWf_6Qq_jw-3d-jo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:2050::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:f9:09:40:c8:cf:2e:a8:e7:35:ce:b4:cf:64:57:e6:49:
         d5:b3:a6:a8:5b:1b:d5:f7:5e:bb:4b:0f:ee:ab:40:86:48:3b:
         b7:4b:7c:95:86:b9:e0:fd:53:3e:2a:39:67:ae:06:0f:0a:c4:
         e6:ca:43:09:0a:0c:20:5a:c5:cf:95:39:eb:a8:d8:d6:6e:59:
         1f:9c:79:5c:2c:3e:77:33:f9:92:25:d6:5f:70:41:1c:99:12:
         77:7c:df:4a:26:af:16:86:d7:fb:af:c8:4c:dd:de:82:93:cd:
         66:d3:ef:60:dd:21:22:77:46:e3:a3:85:1f:ff:79:5f:dc:f9:
         0f:d5:0a:f0:e6:6e:32:dd:68:7d:0c:20:b1:c6:8e:a6:c7:38:
         2c:3a:f4:8e:9a:e2:0b:15:75:48:a9:51:f2:0e:a4:ac:e2:78:
         ab:bc:51:97:a6:db:a3:93:5f:d5:66:5c:35:85:26:45:42:c3:
         c6:c3:1b:9a:2e:03:4f:e5:4d:d0:6e:d2:48:57:5a:3e:78:8f:
         2a:27:79:e0:98:c0:f7:35:83:c4:23:4d:15:fc:f5:11:23:8c:
         b4:7f:ca:15:8e:6d:01:2b:e1:0f:77:6a:cd:4c:9a:9e:d4:6a:
         71:da:91:9d:b1:76:0f:29:46:f6:9c:49:4b:65:f2:b4:69:41:
         15:22:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----