Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa
File:                     7jv0qI6rakVSta-H5vm0z7KwIY8.roa (raw, json)
Hash identifier:          h2Zc17enGkBqkRWhYWmcN7sU556LrIctXVYp/NP0mEU=
Subject key identifier:   EE:3B:F4:A8:8E:AB:6A:45:52:B5:AF:87:E6:F9:B4:CF:B2:B0:21:8F
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018A52D06B01A69D3E55E7C4BC6CC506D92F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa
Signing time:             Fri 01 Sep 2023 22:15:05 +0000
ROA not before:           Fri 01 Sep 2023 22:15:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199766
IP address blocks:        2a06:de00:11::/48 maxlen: 48
                          2a06:de00:10::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:52:d0:6b:01:a6:9d:3e:55:e7:c4:bc:6c:c5:06:d9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  1 22:15:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee3bf4a88eab6a4552b5af87e6f9b4cfb2b0218f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:f7:01:f0:43:81:db:78:a9:ec:e5:74:0f:
                    4c:6f:0a:c5:1f:98:ec:c5:e9:fb:f5:68:ed:d0:ba:
                    8a:ac:aa:1f:d4:d9:76:96:a6:37:ac:bf:8e:6d:16:
                    da:6e:65:db:43:eb:aa:37:09:2c:e4:ba:d4:28:a4:
                    9f:d4:0f:ad:b0:e5:6d:87:16:d6:b7:d1:e8:b4:48:
                    ea:0e:9b:48:6d:ad:68:fa:ea:a4:86:57:ca:84:a6:
                    0c:49:04:01:16:e6:89:fe:97:68:db:51:69:38:7f:
                    fc:7f:59:05:cd:8e:d7:b5:6b:b1:ba:70:d5:35:75:
                    8e:f3:c4:08:35:3a:46:86:e1:e8:b2:bc:f6:45:84:
                    cf:47:35:5b:6e:62:e0:c6:ca:3e:02:52:21:5d:19:
                    98:ca:70:7e:fd:b2:45:01:89:a7:14:e1:81:17:8c:
                    aa:19:2b:92:88:da:aa:55:c3:0e:00:6a:1b:ec:24:
                    65:23:60:55:9f:c8:45:df:a5:c6:67:42:71:b5:a9:
                    e2:cc:07:46:8d:99:6f:72:57:a3:30:9d:6d:20:9c:
                    b0:60:d4:36:e8:d8:21:47:03:eb:f8:d7:8e:a1:82:
                    13:fe:5b:f3:45:3e:bd:fb:42:04:32:a1:8b:8d:42:
                    cb:a7:d2:54:d3:cd:76:b8:3f:28:a7:a9:db:67:fb:
                    1e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:F4:A8:8E:AB:6A:45:52:B5:AF:87:E6:F9:B4:CF:B2:B0:21:8F
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7jv0qI6rakVSta-H5vm0z7KwIY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:10::/47

    Signature Algorithm: sha256WithRSAEncryption
         4b:c8:21:5b:a3:c7:93:5d:9c:5f:2f:bb:2f:60:ab:c6:be:46:
         e6:58:77:1b:d9:fe:34:d8:28:f0:17:33:81:4a:75:57:98:63:
         43:b7:a9:2f:ea:07:3f:3c:3b:32:84:46:29:a2:78:d2:17:be:
         ac:07:5b:a8:1c:0e:1b:9e:ed:97:b4:ee:79:ae:3d:53:99:ce:
         01:f9:69:d6:73:82:09:4c:aa:bb:a4:12:c1:21:b1:24:54:4a:
         a6:37:ae:92:4e:86:0f:73:3a:35:ff:f2:26:b0:02:0c:b3:c6:
         e9:2f:de:56:d6:ab:b2:64:17:ae:5e:ff:96:b2:bf:fd:05:87:
         f7:be:24:51:4e:1d:34:42:cf:60:d6:3c:d1:2d:79:9e:c8:38:
         fa:fd:2e:cf:4c:6e:45:27:bd:74:b9:15:99:a3:a6:39:ab:e5:
         31:50:8f:d5:d2:64:e9:0d:92:ca:47:36:0f:1f:da:e0:e3:e0:
         2f:c8:7f:1d:3b:fb:00:6f:51:59:7b:9c:68:d4:9c:2e:ba:0f:
         af:7f:03:8e:50:e5:32:d3:8a:13:2e:51:26:1a:2d:90:3d:93:
         50:2a:e0:76:ab:00:8d:dd:2f:72:38:31:f3:12:5d:a1:e8:c3:
         44:bb:68:66:5b:f2:7b:ab:77:f5:ab:ba:da:6d:1c:be:3a:42:
         df:c6:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----