Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8W9R4XhwjMWvGVKynEZ0Ku7sxAg.roa
File:                     8W9R4XhwjMWvGVKynEZ0Ku7sxAg.roa (raw, json)
Hash identifier:          g4O6Fvy8mg3Le9gEDhptJgpgm3biNjNPtoL30eyg914=
Subject key identifier:   F1:6F:51:E1:78:70:8C:C5:AF:19:52:B2:9C:46:74:2A:EE:EC:C4:08
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7FFE7F898061D957739B819E8FCFB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8W9R4XhwjMWvGVKynEZ0Ku7sxAg.roa
Signing time:             Mon 02 Jan 2023 05:15:30 +0000
ROA not before:           Mon 02 Jan 2023 05:15:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211284
IP address blocks:        2a0e:b107:13e0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:ff:e7:f8:98:06:1d:95:77:39:b8:19:e8:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f16f51e178708cc5af1952b29c46742aeeecc408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:e4:a5:a4:3f:e5:c7:fe:a3:20:ef:5a:ad:
                    93:13:79:94:33:79:3a:26:f5:82:e5:83:6e:ab:1a:
                    d5:1c:b4:ac:50:0b:c7:d4:ad:f5:61:8f:58:59:18:
                    90:5d:38:d2:79:e4:cf:1f:45:20:4a:67:12:e3:ce:
                    05:c8:6f:cc:1e:19:9b:0d:fa:51:52:ec:83:0d:a3:
                    18:1d:03:34:0d:af:46:e3:ee:29:d8:51:c6:38:da:
                    3f:b9:8a:05:2c:90:2c:01:63:17:fe:2a:7d:58:27:
                    49:33:19:6f:7e:11:0e:6e:08:d8:b5:5d:44:3e:dc:
                    1b:7e:2c:1d:28:19:65:be:6c:05:db:09:2d:b5:a6:
                    7f:48:35:40:61:fc:c9:bf:78:aa:11:c9:f2:e8:a6:
                    b0:e1:b5:35:e7:c7:44:78:e4:45:5b:e7:f8:61:2f:
                    36:ee:0a:c3:fc:8f:7e:a3:79:46:db:23:08:f9:1c:
                    54:ed:e9:1f:32:49:9e:80:23:21:d0:09:5a:4f:a3:
                    34:91:07:6a:14:5f:2c:27:8f:5c:56:0c:7a:eb:85:
                    85:ee:f1:dc:88:1e:82:ac:ec:3a:0b:da:d0:11:49:
                    e6:2c:d5:0a:96:99:33:85:66:e7:dc:6a:2f:25:2e:
                    6b:3e:23:6b:5d:2b:20:7c:68:cb:80:b4:c2:7d:74:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6F:51:E1:78:70:8C:C5:AF:19:52:B2:9C:46:74:2A:EE:EC:C4:08
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8W9R4XhwjMWvGVKynEZ0Ku7sxAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:13e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         cb:51:3c:13:14:c4:6b:78:1a:df:a8:dc:98:93:7f:42:8a:8f:
         1d:3c:f0:1a:96:6d:92:88:32:90:81:c8:0b:63:37:a8:dd:92:
         9d:40:93:6a:b9:1f:04:cc:cc:57:bc:93:85:10:fe:e1:4c:c1:
         31:86:64:6b:67:c6:ef:0d:33:ab:25:98:bc:a7:38:a0:98:93:
         38:96:02:29:e9:8f:f5:71:59:40:11:01:eb:c6:a1:4f:6e:e9:
         4a:62:61:aa:f2:55:2e:b1:5a:38:3e:9d:cb:22:d3:01:6b:fd:
         2a:5f:42:a5:01:c1:49:35:f0:26:01:6d:b4:78:4d:0c:14:f3:
         bf:a9:5d:ee:44:42:52:bd:d2:6a:af:64:e2:d5:87:53:42:5b:
         8a:ea:b5:b6:9b:fc:8c:65:ca:d5:de:69:a6:58:f6:c3:00:d4:
         e5:54:be:1b:bc:aa:9e:f3:d7:c6:66:5c:e3:64:e7:05:62:a2:
         88:c4:4e:dc:92:d8:d1:9c:73:14:8a:ff:42:6d:ac:37:b7:de:
         44:41:32:b8:96:1b:15:9f:e4:67:60:98:3f:93:c7:3c:34:12:
         89:6b:f7:f7:f8:52:71:bc:37:95:55:f2:ca:96:c7:fb:2d:1b:
         af:78:c4:51:b4:93:43:67:13:81:16:85:bf:bc:3c:21:f9:48:
         4d:04:9b:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5//n+JgGHZV3ObgZ6Pz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTZmNTFlMTc4NzA4Y2M1YWYxOTUyYjI5YzQ2NzQyYWVlZWNjNDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCPkpaQ/5cf+oyDvWq2TE3mUM3k6
JvWC5YNuqxrVHLSsUAvH1K31YY9YWRiQXTjSeeTPH0UgSmcS484FyG/MHhmbDfpR
UuyDDaMYHQM0Da9G4+4p2FHGONo/uYoFLJAsAWMX/ip9WCdJMxlvfhEObgjYtV1E
PtwbfiwdKBllvmwF2wkttaZ/SDVAYfzJv3iqEcny6Kaw4bU158dEeORFW+f4YS82
7grD/I9+o3lG2yMI+RxU7ekfMkmegCMh0AlaT6M0kQdqFF8sJ49cVgx664WF7vHc
iB6CrOw6C9rQEUnmLNUKlpkzhWbn3GovJS5rPiNrXSsgfGjLgLTCfXRLSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPFvUeF4cIzFrxlSspxGdCru7MQIMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOFc5UjRYaHdqTVd2R1ZLeW5FWjBLdTdzeEFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxPg
MA0GCSqGSIb3DQEBCwUAA4IBAQDLUTwTFMRreBrfqNyYk39Cio8dPPAalm2SiDKQ
gcgLYzeo3ZKdQJNquR8EzMxXvJOFEP7hTMExhmRrZ8bvDTOrJZi8pzigmJM4lgIp
6Y/1cVlAEQHrxqFPbulKYmGq8lUusVo4Pp3LItMBa/0qX0KlAcFJNfAmAW20eE0M
FPO/qV3uREJSvdJqr2Ti1YdTQluK6rW2m/yMZcrV3mmmWPbDANTlVL4bvKqe89fG
ZlzjZOcFYqKIxE7cktjRnHMUiv9Cbaw3t95EQTK4lhsVn+RnYJg/k8c8NBKJa/f3
+FJxvDeVVfLKlsf7LRuveMRRtJNDZxOBFoW/vDwh+UhNBJv4
-----END CERTIFICATE-----