Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8JtMnRXB3WL5sLSLtYEBy9TyN7U.roa
File:                     8JtMnRXB3WL5sLSLtYEBy9TyN7U.roa (raw, json)
Hash identifier:          EwJMS5SKpx6yGV+K3itUvWIpFUIM2LU9kgSgGYMnWPc=
Subject key identifier:   F0:9B:4C:9D:15:C1:DD:62:F9:B0:B4:8B:B5:81:01:CB:D4:F2:37:B5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7E96757277F8A3852B3E15C507B34
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8JtMnRXB3WL5sLSLtYEBy9TyN7U.roa
Signing time:             Mon 02 Jan 2023 05:15:24 +0000
ROA not before:           Mon 02 Jan 2023 05:15:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210445
IP address blocks:        2a0e:b107:1a60::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:e9:67:57:27:7f:8a:38:52:b3:e1:5c:50:7b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f09b4c9d15c1dd62f9b0b48bb58101cbd4f237b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ec:d1:3b:6b:05:d0:af:5a:6c:f1:ab:30:75:
                    65:65:7b:15:cf:eb:d0:01:f0:76:09:13:46:98:e3:
                    99:42:5f:38:65:f0:c3:5a:d4:e7:e3:b3:81:91:2d:
                    97:5c:0f:c5:b4:0c:7f:ca:6c:c7:76:af:dc:7d:77:
                    ea:a9:c5:ca:37:fa:55:4d:d8:6b:3b:42:ae:ac:48:
                    aa:dc:9f:db:5f:71:98:9e:0d:ff:0a:a0:ec:f8:a7:
                    57:31:43:c1:78:f5:ac:0d:f3:91:75:6e:7b:31:aa:
                    5e:93:e8:f4:59:83:52:df:51:e3:72:68:c5:4d:cc:
                    81:24:13:8a:97:67:93:7e:7a:12:d9:be:4d:70:ec:
                    7f:1c:7d:0f:bb:dd:aa:21:16:f8:c3:d2:0f:8c:a8:
                    8e:53:7c:ce:fb:e6:63:dc:ed:3a:f3:24:8b:cf:b9:
                    af:5e:25:ff:16:bb:39:bd:86:55:02:c3:79:c4:6c:
                    4a:32:8c:8e:27:0c:5b:0b:67:8d:54:10:67:6b:fb:
                    97:dd:3d:4b:bf:44:77:98:ff:83:20:86:0f:57:37:
                    9c:5e:3a:b6:cc:b4:dc:23:24:0d:c7:79:e3:1b:ea:
                    2c:d1:d0:c4:13:fd:ac:7c:fb:1b:d7:b1:b0:1c:e0:
                    bf:38:b4:b4:9b:ee:02:33:cf:f4:60:11:39:e5:b9:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:4C:9D:15:C1:DD:62:F9:B0:B4:8B:B5:81:01:CB:D4:F2:37:B5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8JtMnRXB3WL5sLSLtYEBy9TyN7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1a60::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:8a:ee:89:f3:25:c6:a3:25:71:b0:7f:fc:14:e5:d3:a4:
         ee:bd:4c:2e:0e:f3:3f:d0:72:e6:ce:a0:eb:75:6d:ba:00:25:
         17:18:90:09:26:b7:25:f2:c7:d9:da:a5:5e:8c:41:83:44:81:
         99:dc:81:2b:91:51:8f:40:06:ac:c9:35:91:6b:3a:9a:14:c6:
         e3:16:27:88:57:a8:7f:97:26:4e:e7:85:a5:45:c1:8d:51:41:
         ca:0a:94:42:05:63:83:3e:42:3a:bb:48:ac:42:d8:4f:2e:4d:
         c0:35:fc:08:94:30:63:c4:7f:c3:ad:43:39:3f:d5:7e:5c:2c:
         d5:b8:83:60:bc:c0:1c:01:10:4f:6a:0f:52:97:5f:84:4f:0c:
         df:16:2a:62:21:f4:28:63:fc:0c:0c:69:b6:a8:c8:ac:c8:b8:
         fa:28:e1:00:2a:a7:75:e8:bb:eb:16:02:97:d4:96:65:1e:7d:
         75:ac:01:87:a2:ae:90:4e:59:6b:ba:9a:d4:15:6c:d4:3d:c5:
         a8:75:d2:f9:0c:0b:c7:1c:ac:41:db:b3:1c:59:0a:16:45:80:
         49:2c:30:b5:75:2e:7b:9e:49:a1:a6:ca:36:41:aa:26:7d:74:
         dc:27:f1:82:69:cb:a2:13:fc:05:e5:48:52:27:94:ba:fb:f9:
         9b:f3:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----