Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mva6wB6q9P9puFIz8Wz9NX7aTA.roa
File:                     9mva6wB6q9P9puFIz8Wz9NX7aTA.roa (raw, json)
Hash identifier:          KK3tzRewL7ZG/ORAAhbTfuqq+7aanqfJR7iPbIwn0kY=
Subject key identifier:   F6:6B:DA:EB:00:7A:AB:D3:FD:A6:E1:48:CF:C5:B3:F4:D5:FB:69:30
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0187D15501BF99B8BF549AC1EB87899D2ACE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mva6wB6q9P9puFIz8Wz9NX7aTA.roa
Signing time:             Sun 30 Apr 2023 08:43:41 +0000
ROA not before:           Sun 30 Apr 2023 08:43:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199266
IP address blocks:        2a0e:97c0:2f0::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 May 2023 17:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d1:55:01:bf:99:b8:bf:54:9a:c1:eb:87:89:9d:2a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 30 08:43:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f66bdaeb007aabd3fda6e148cfc5b3f4d5fb6930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:33:d0:0a:ad:39:16:13:5c:6f:a1:23:d9:
                    d0:fd:e8:88:47:3c:36:c3:97:0c:92:fe:87:b3:17:
                    69:53:27:84:b3:69:e0:a9:37:64:8d:0f:e3:69:83:
                    2a:8c:43:fb:f5:0d:e8:c3:af:d0:68:d0:05:15:88:
                    86:20:54:f5:87:a3:21:1d:5c:67:01:ab:df:5f:f4:
                    f5:90:2a:a9:0b:9c:19:ff:ee:95:cd:e9:fc:f3:3e:
                    f4:7d:62:5d:05:9b:13:4a:25:29:53:11:8e:52:39:
                    be:61:2a:ce:83:61:7f:a7:e1:b7:b5:b4:f4:3c:c4:
                    b3:ca:e3:e1:9e:83:1f:bc:44:45:b8:2d:8c:50:ce:
                    73:94:f2:f0:64:a7:b3:33:33:08:d4:a9:03:54:8a:
                    13:ae:e2:14:7c:f4:8a:b1:1f:0f:1e:7f:19:36:4f:
                    e1:1e:7f:c9:b8:a8:ac:06:35:b5:43:07:e8:11:91:
                    0a:b6:de:c4:38:c7:c2:b3:2c:49:83:3c:c5:1b:85:
                    49:84:97:6c:ac:8b:8c:18:69:03:7d:34:9b:b9:74:
                    53:51:8b:8d:ac:d8:ea:8d:f2:dd:14:ac:87:d2:96:
                    b9:ee:35:a0:00:cc:51:7a:02:e8:0c:5e:99:ea:58:
                    2f:1b:c2:b5:4c:1b:53:50:20:6c:b9:a3:da:af:f5:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6B:DA:EB:00:7A:AB:D3:FD:A6:E1:48:CF:C5:B3:F4:D5:FB:69:30
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9mva6wB6q9P9puFIz8Wz9NX7aTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:58:77:d6:21:9f:f7:6c:12:94:c1:ba:1b:a1:bb:96:ed:3a:
         e0:b1:91:51:82:f3:68:8a:9b:39:76:1a:e3:d7:24:0a:44:88:
         31:0f:e5:99:db:f7:ef:1c:d9:ea:a0:4c:15:c0:79:a0:1c:09:
         ed:6c:81:f2:eb:56:1a:ab:8d:4a:0c:91:29:7d:87:cb:5b:40:
         6e:17:64:61:ab:1a:52:98:3d:7e:6a:0a:84:46:f5:d8:cc:25:
         0c:0a:50:e0:0f:74:f8:8b:7c:db:31:3e:8c:a0:ee:3d:8e:e4:
         66:43:8d:b1:b9:4f:bd:42:5f:8c:fb:af:6f:83:da:cf:18:00:
         50:22:29:65:ec:eb:96:98:ba:69:7a:f1:e5:8a:1e:f3:fc:94:
         58:93:56:60:23:cc:33:e7:54:9b:6d:ff:83:af:f1:f3:3e:b9:
         78:c7:84:e1:96:c9:78:26:43:ac:3f:d1:49:b2:68:b3:e6:34:
         32:e9:7e:e6:76:cb:84:77:51:18:24:be:19:f2:19:f8:e7:87:
         a2:f0:0d:71:80:bf:dd:b0:79:df:e4:a7:df:f3:e0:be:74:42:
         0b:6b:b5:3f:d4:fb:13:99:b7:6a:b3:33:b6:16:8f:91:f7:7e:
         83:bf:fc:1b:47:14:3f:55:d9:eb:f9:c5:ec:9b:99:04:81:cc:
         2c:9b:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----