Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa
File:                     84vwA-2M6cAHHi-1xcbksMAhiGM.roa (raw, json)
Hash identifier:          uqdZ/cZ1tXbq8EB6SuAAo7HDMYUpg3GvKtl7INcJSuY=
Subject key identifier:   F3:8B:F0:03:ED:8C:E9:C0:07:1E:2F:B5:C5:C6:E4:B0:C0:21:88:63
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7C483346E8155CD87669565D355E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa
Signing time:             Mon 02 Jan 2023 05:15:15 +0000
ROA not before:           Mon 02 Jan 2023 05:15:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205531
IP address blocks:        2a0e:b107:178b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:c4:83:34:6e:81:55:cd:87:66:95:65:d3:55:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f38bf003ed8ce9c0071e2fb5c5c6e4b0c0218863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:09:e3:b5:c5:0b:a7:2f:a5:e2:02:fa:23:
                    ba:5f:cf:84:73:b5:d5:fa:c0:cd:b1:7e:02:9f:90:
                    61:92:a8:f8:6a:46:8c:81:82:74:2c:25:e1:91:b5:
                    fb:cd:ea:be:21:a0:bb:e3:11:4c:f3:fe:7b:ae:ce:
                    15:4c:8c:fd:33:c8:e2:1f:15:f4:dd:ed:4b:5a:6c:
                    a8:f4:c3:ac:c4:f1:db:47:60:7e:ee:c6:2c:17:14:
                    38:a3:35:b6:3a:86:99:9a:cc:03:8e:91:db:f6:7f:
                    dc:0f:c5:5f:5f:b7:1b:1f:68:80:15:36:64:7f:db:
                    62:1a:0d:ef:11:2e:8e:36:7d:fd:3a:58:3c:eb:bf:
                    d5:16:d6:f9:16:e3:e8:ad:58:77:99:e2:5f:26:5a:
                    0d:b5:73:5d:7f:e4:8e:08:d4:87:e2:7c:f3:2e:30:
                    c4:23:50:ee:de:fd:b6:3f:01:e7:dc:fd:3a:dc:59:
                    60:16:b2:b2:c5:1b:66:cd:60:d7:c2:c3:69:ec:c5:
                    3c:03:e0:32:98:0d:9e:b4:68:02:79:1b:82:2a:a1:
                    c6:c8:e4:14:ff:38:f8:96:ee:94:44:56:97:ef:ab:
                    b4:4b:c9:11:17:9b:5a:5d:b5:80:74:7f:21:ee:60:
                    aa:9e:8e:db:ea:d9:4d:85:e1:6d:5d:e8:22:8f:cd:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:F0:03:ED:8C:E9:C0:07:1E:2F:B5:C5:C6:E4:B0:C0:21:88:63
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84vwA-2M6cAHHi-1xcbksMAhiGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:178b::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:16:e1:63:35:82:90:4a:ce:90:fa:5a:68:37:8f:d0:93:
         97:3f:52:34:72:44:81:e7:6a:2e:e4:ae:98:58:55:cf:8e:be:
         3a:d4:0f:30:c1:fa:de:76:6e:74:ab:9d:71:d8:ed:54:7f:ff:
         22:30:b3:d6:05:5d:30:57:cb:2d:f0:5b:01:5e:e6:94:f6:f0:
         98:8b:5c:8d:74:5c:4e:2e:5c:81:b7:54:bb:e2:2a:e1:8e:15:
         e7:7f:c2:e4:ae:a5:1d:af:cd:11:f5:9e:f8:02:61:fe:f9:66:
         c9:d6:71:47:d5:e0:1a:76:e7:81:8b:00:ad:78:dd:e3:e5:b5:
         93:2a:2e:a3:b0:59:2e:d7:d6:07:17:41:a7:81:dd:80:dd:96:
         d0:41:8f:44:a9:7a:ae:8e:40:90:1c:3b:5a:a5:a7:ad:49:f4:
         1a:c4:c6:87:a6:29:f8:f7:bb:e5:16:3c:7c:b5:04:13:ef:1d:
         fe:b3:6e:4f:13:84:6f:d4:ea:10:1c:1a:5c:2c:15:10:93:6b:
         0e:87:1f:e9:e6:28:da:0a:47:e6:b8:e9:68:d1:95:e2:32:66:
         96:db:fc:0e:29:45:ac:94:b7:f4:58:cf:8c:78:bd:10:2e:6b:
         a9:28:6f:79:68:b3:04:bb:d2:2e:2d:40:7b:21:5b:f4:fc:d3:
         90:f8:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----