Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rnqHaR-LeKxwfI-IzuYmmwbSLE.roa
File:                     8rnqHaR-LeKxwfI-IzuYmmwbSLE.roa (raw, json)
Hash identifier:          NPFD70MCsjNUWwQ27g4J15LLxbwNBcyWwiylvd0oJDI=
Subject key identifier:   F2:B9:EA:1D:A4:7E:2D:E2:B1:C1:F2:3E:23:3B:98:9A:6C:1B:48:B1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48ADEB7F5EDE596F178506834726366
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rnqHaR-LeKxwfI-IzuYmmwbSLE.roa
Signing time:             Tue 24 Jan 2023 16:09:44 +0000
ROA not before:           Tue 24 Jan 2023 16:09:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208188
IP address blocks:        2a0e:b107:27f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:de:b7:f5:ed:e5:96:f1:78:50:68:34:72:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2b9ea1da47e2de2b1c1f23e233b989a6c1b48b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:02:76:32:4e:fa:55:aa:f1:5d:d4:54:01:bf:
                    af:37:75:82:c3:2f:d5:e0:5c:52:85:69:c8:9e:a3:
                    69:df:a6:33:ae:6a:ee:35:7b:18:5b:79:72:e7:13:
                    30:23:24:85:51:9a:a7:8c:4c:fa:c5:70:30:bc:32:
                    ae:03:78:21:68:84:71:36:40:22:46:b8:ad:46:79:
                    29:ab:cb:e9:ea:2c:dc:c5:8e:d3:fe:ca:10:31:83:
                    ad:09:f0:40:58:69:13:ba:82:d4:1d:88:82:08:31:
                    41:2c:10:5f:0a:8c:7e:78:a5:08:57:dd:d2:6a:fe:
                    9b:d1:ec:c7:cf:ad:ef:f2:09:73:4a:ee:02:4b:62:
                    d4:23:90:3f:30:f2:56:f9:c7:79:41:25:4f:b2:b6:
                    b6:ae:29:4a:bd:1a:09:9b:2b:af:3d:0e:18:50:97:
                    51:1f:2d:21:12:5c:4e:4c:22:cd:51:b9:cf:35:e7:
                    58:e1:ac:9b:8d:3f:75:cd:fb:4f:6d:d2:75:fc:07:
                    b9:40:75:f9:ce:c7:78:55:08:5a:f7:45:c5:33:5b:
                    6e:86:cd:49:96:c1:19:54:89:96:d3:9a:9c:e4:c3:
                    0d:94:33:32:da:93:cc:1d:0f:45:a7:13:9c:7b:cc:
                    04:cd:b3:ba:30:93:bf:ed:d9:86:69:f2:9e:b2:91:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B9:EA:1D:A4:7E:2D:E2:B1:C1:F2:3E:23:3B:98:9A:6C:1B:48:B1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8rnqHaR-LeKxwfI-IzuYmmwbSLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:27f::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:65:fc:0c:3b:d0:ea:ca:77:61:55:68:db:e2:fe:24:c7:
         dd:d8:b3:96:99:c9:c2:85:9b:81:f2:08:af:1c:3e:ba:7f:ca:
         40:bd:bf:32:52:36:02:60:1d:ee:4a:e4:69:97:db:2e:9d:6b:
         a2:79:97:77:d2:5a:c5:84:46:d5:5d:70:e4:86:53:e0:4a:ac:
         a3:86:ba:36:31:f1:06:4c:12:a9:a9:3c:28:54:8b:68:09:56:
         3c:a9:6c:00:44:9d:47:f7:e7:9a:fe:3c:78:e0:ac:10:53:c6:
         19:43:b8:4e:f9:e4:bb:85:bf:36:f6:41:81:60:bd:ac:04:a3:
         ab:2a:43:15:43:1a:52:f5:60:5a:6c:5e:a9:64:f1:cd:31:c0:
         2d:df:15:60:66:bf:1e:88:a5:0f:98:66:ed:c1:e5:7d:65:fb:
         c4:56:f9:4a:b5:47:75:44:b1:05:b1:16:1c:5a:f1:ac:7e:d0:
         b3:15:f0:4e:3b:66:ef:13:26:77:71:c2:5d:9d:87:7e:9f:9b:
         7f:e4:f1:97:d9:19:93:04:31:1d:d6:cf:e2:7a:90:0e:41:40:
         66:93:51:39:58:3c:fa:0f:d3:83:93:62:82:6b:85:08:1f:4f:
         24:c2:71:0b:8a:cd:89:68:76:73:c2:98:68:9e:09:23:5f:89:
         4c:4a:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----