Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PMxq8We1HBr56KAUdDyE2WvC7E.roa
File:                     7PMxq8We1HBr56KAUdDyE2WvC7E.roa (raw, json)
Hash identifier:          xWNYSeKpb3soYzLdzeMUdal+MN/JusrukOQ55Y73TBQ=
Subject key identifier:   EC:F3:31:AB:C5:9E:D4:70:6B:E7:A2:80:51:D0:F2:13:65:AF:0B:B1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0186407E5E7A97FD0D08F9D2BCE7D0081667
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PMxq8We1HBr56KAUdDyE2WvC7E.roa
Signing time:             Sat 11 Feb 2023 12:41:08 +0000
ROA not before:           Sat 11 Feb 2023 12:41:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199918
IP address blocks:        2a0e:97c0:880::/44 maxlen: 48
                          2a0e:97c0:880::/48 maxlen: 48
                          2a0e:97c0:88a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:40:7e:5e:7a:97:fd:0d:08:f9:d2:bc:e7:d0:08:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 11 12:41:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecf331abc59ed4706be7a28051d0f21365af0bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:0e:d5:89:a9:3f:c1:7d:1e:b8:d2:5f:8e:
                    cd:6a:3f:5d:13:9a:4c:a7:80:83:8d:f4:1f:89:52:
                    d9:7d:97:68:56:29:49:4c:59:46:e2:7b:bf:0e:87:
                    40:8f:5d:ea:36:df:45:34:9d:12:9c:40:a0:73:ec:
                    90:77:01:ef:d2:a2:db:f2:63:82:05:03:71:70:16:
                    83:63:ed:1a:b7:55:f8:08:bb:62:89:4c:bf:9c:13:
                    42:df:a7:ef:ac:c6:f4:fd:9b:08:ad:7d:0d:d0:5e:
                    b4:63:b6:f5:cb:2d:8f:a7:08:4a:71:a8:2e:1b:c6:
                    19:5f:3b:70:82:19:46:ef:42:65:aa:d8:fa:77:cc:
                    a1:55:9e:99:7f:0f:41:60:49:a1:2a:30:6a:bc:8d:
                    65:a1:2b:11:25:bf:c6:d3:98:58:7a:80:3a:64:eb:
                    b8:38:0f:95:84:ff:91:56:c5:50:90:8a:d6:1d:fa:
                    0c:4e:b1:89:2e:35:32:9c:08:ec:12:54:ba:35:69:
                    86:8c:23:f6:69:a4:56:dc:f8:3a:7c:d5:b6:b6:83:
                    f5:31:a4:6f:ba:1a:20:f5:ed:a7:71:c2:c9:48:2c:
                    a5:b2:b4:cf:08:8b:08:1f:d1:44:df:4c:5f:aa:07:
                    ac:3f:98:ae:04:9c:c0:f1:78:08:79:61:72:1e:8c:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F3:31:AB:C5:9E:D4:70:6B:E7:A2:80:51:D0:F2:13:65:AF:0B:B1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PMxq8We1HBr56KAUdDyE2WvC7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:880::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:4f:2c:a0:9b:25:6c:5b:b0:71:67:e0:af:30:47:82:ec:
         fa:5e:5d:22:3a:6f:a1:46:ab:23:60:49:07:45:fe:24:6b:2f:
         12:16:53:ec:16:73:b3:4f:fc:ff:d0:98:bc:95:5e:94:8f:dd:
         8d:53:20:64:0c:a9:03:6d:29:69:95:ce:0a:bc:8a:f4:70:a8:
         d4:05:9a:ae:a8:3b:4b:55:42:9f:12:58:5f:eb:dd:ba:74:a3:
         e1:92:e0:22:e6:7c:99:7f:b0:3d:84:81:90:50:19:5b:3e:b4:
         6f:40:de:93:4a:f2:2a:12:a7:36:a9:ba:58:25:4e:a3:e4:ae:
         d9:be:a9:8f:38:29:42:26:36:1f:5c:57:d7:23:b4:72:79:71:
         97:d0:cd:86:e8:61:0c:ee:fb:b8:5e:3d:04:6a:ad:d2:c4:4b:
         1f:2c:aa:65:85:28:35:b6:d9:85:ef:e5:dd:58:a6:b7:a3:e2:
         fe:0b:03:9c:7f:2d:7b:c1:3c:b0:bc:35:6e:49:44:a8:1c:bb:
         51:c7:b0:76:68:3e:3a:ba:13:53:bb:fe:02:45:0a:79:ac:5d:
         45:0f:05:55:81:e4:5c:db:08:1e:26:a7:ad:f3:95:0a:ff:89:
         aa:de:fc:84:3c:5a:4f:f7:b4:45:9f:eb:c2:f8:30:11:4f:de:
         2b:e3:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----