Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7WNIWF78td3eIg_uG6eYfcFhbOs.roa
File:                     7WNIWF78td3eIg_uG6eYfcFhbOs.roa (raw, json)
Hash identifier:          TedT6z6BtRsYpL3J3m2RFsYYy5TdZIPKJalJCzhKEP4=
Subject key identifier:   ED:63:48:58:5E:FC:B5:DD:DE:22:0F:EE:1B:A7:98:7D:C1:61:6C:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185DE40B765658AF0EB6F065B10576AC18D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7WNIWF78td3eIg_uG6eYfcFhbOs.roa
Signing time:             Mon 23 Jan 2023 10:51:01 +0000
ROA not before:           Mon 23 Jan 2023 10:51:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400542
IP address blocks:        2a0e:97c0:a46::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:40:b7:65:65:8a:f0:eb:6f:06:5b:10:57:6a:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 23 10:51:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed6348585efcb5ddde220fee1ba7987dc1616ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:1f:fe:ec:68:e5:21:58:c8:f4:29:af:4f:
                    20:e8:79:e7:c7:b5:fe:39:08:34:8c:1e:e6:ff:a6:
                    10:59:da:7d:c9:81:1f:ea:12:00:bb:24:c5:7e:75:
                    d0:55:13:65:b4:15:74:c1:6c:3b:24:e8:bd:c3:a9:
                    8d:82:08:d4:c1:c9:28:6c:c6:68:2a:c2:16:32:11:
                    57:f5:d8:d1:f6:36:7f:3c:07:86:c9:91:1f:a3:64:
                    ab:da:c8:6d:ff:00:56:89:ff:c3:aa:62:e6:89:46:
                    3f:99:1f:bf:4e:e5:4a:91:6d:93:5b:e6:2a:c4:f6:
                    51:c4:a2:ea:20:bf:20:86:b3:e2:35:b8:15:15:3d:
                    b3:74:56:bf:b3:f0:66:81:72:86:d0:12:f6:53:46:
                    65:31:c1:89:64:db:6f:f5:da:f7:e7:93:c3:de:7e:
                    ff:b8:f5:3e:a8:db:45:f0:2f:04:49:2b:2d:80:09:
                    25:9c:23:b9:3d:d7:4c:1d:f2:3b:bc:f3:e3:fb:7b:
                    3e:fb:17:0e:8f:f2:e6:6d:65:7f:fb:6e:93:33:25:
                    96:5f:bc:4b:72:19:9b:33:0a:78:05:90:e2:c3:0f:
                    91:64:a0:aa:d8:97:31:db:14:46:ef:40:bc:88:f1:
                    55:c9:bc:08:4c:52:47:51:0b:fe:2c:68:43:7f:c0:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:48:58:5E:FC:B5:DD:DE:22:0F:EE:1B:A7:98:7D:C1:61:6C:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7WNIWF78td3eIg_uG6eYfcFhbOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:a46::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:69:65:86:2e:11:c4:af:98:4a:ab:aa:aa:8f:f5:18:d9:
         11:fc:28:da:34:c4:49:c4:51:e1:04:1c:2c:0c:e4:31:34:af:
         db:95:1e:4a:2d:f5:5d:09:ea:75:32:dd:01:ea:cb:c2:99:3d:
         25:bc:0b:85:0e:58:84:5e:6f:cf:5f:5a:ce:a7:23:de:e8:c2:
         33:2d:d3:d0:12:94:26:94:43:c6:49:7f:71:34:2b:de:04:42:
         52:4f:4b:1a:a5:b7:55:09:3e:63:74:47:19:6b:ef:05:f0:71:
         54:a2:b7:9c:51:97:91:04:64:0b:61:ad:fa:6d:86:90:ae:d0:
         fc:2f:68:58:53:38:6f:6b:2b:fd:05:53:8d:fb:5c:b3:08:b9:
         c9:d8:89:0d:09:b0:bb:f5:a6:47:ba:7d:1a:05:f4:78:78:de:
         bd:c5:4f:6c:00:aa:f6:59:a3:cf:ba:56:88:af:a1:cf:93:1f:
         8a:de:be:2a:e6:5a:f8:ce:87:b7:51:8a:fc:b8:50:e6:19:f8:
         0b:d8:4f:da:d3:61:8e:12:64:48:8f:d1:6d:8d:c3:40:ff:83:
         88:65:4a:cc:8d:6c:f3:16:45:38:0e:14:e2:8e:99:00:2f:a9:
         86:e9:6c:a9:c4:7d:ac:a7:c5:d8:40:7b:6e:34:99:00:92:65:
         98:e1:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----