Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9vXmSTiUEHMmDMDT7DvGsgsMU9Y.roa
File:                     9vXmSTiUEHMmDMDT7DvGsgsMU9Y.roa (raw, json)
Hash identifier:          8Azlwaa/XfKmnSfS2NpK7/9nVjfOOCMDkhQAT6tj41M=
Subject key identifier:   F6:F5:E6:49:38:94:10:73:26:0C:C0:D3:EC:3B:C6:B2:0B:0C:53:D6
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018570E7A50D5E6C83A83F42811EE14A5631
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9vXmSTiUEHMmDMDT7DvGsgsMU9Y.roa
Signing time:             Mon 02 Jan 2023 05:15:07 +0000
ROA not before:           Mon 02 Jan 2023 05:15:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201398
IP address blocks:        2a0e:b107:1c88::/48 maxlen: 48
                          2a0e:b107:1c80::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:a5:0d:5e:6c:83:a8:3f:42:81:1e:e1:4a:56:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 05:15:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6f5e64938941073260cc0d3ec3bc6b20b0c53d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:90:ba:ea:41:17:d7:8a:82:33:e2:a4:5a:
                    49:4a:3f:52:d2:4f:5e:01:92:a2:b4:b7:11:ab:dc:
                    39:9f:58:0a:56:dd:36:b6:f7:c2:d0:f3:28:2f:1e:
                    b6:64:3e:a8:1a:f6:3f:dc:f7:0d:85:28:7c:f8:79:
                    b7:08:d1:93:11:50:7d:d6:8a:19:a2:f5:40:96:26:
                    55:3d:8e:c9:08:6a:13:b7:56:01:2c:59:6d:23:6d:
                    84:b4:12:2c:e4:f0:d0:29:6a:c5:e0:dc:f1:d8:04:
                    66:b7:1a:b1:9f:7c:a6:63:f2:18:6d:d1:58:5e:5d:
                    18:22:10:26:22:da:16:25:4e:da:73:5c:d5:b5:c4:
                    a6:f8:e3:cd:91:3f:a6:b1:cc:c3:46:6d:4f:0c:eb:
                    76:c4:a7:2a:4a:b8:26:84:e9:25:eb:38:a5:81:7e:
                    cc:35:55:f5:c1:92:dd:7e:ed:f4:fa:a7:6f:64:17:
                    e0:7c:e8:65:e0:f2:a1:a0:bb:ec:9c:44:b0:d9:47:
                    3e:2e:1e:94:3f:83:15:bc:cb:a6:ce:97:90:78:10:
                    ee:c1:91:68:e8:56:75:05:36:86:26:91:d8:67:a5:
                    c1:31:e0:dc:d4:1b:a4:17:a8:98:7e:fe:0c:e7:b7:
                    58:8c:86:ae:42:96:88:c9:82:1b:4e:7b:ee:4a:15:
                    68:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F5:E6:49:38:94:10:73:26:0C:C0:D3:EC:3B:C6:B2:0B:0C:53:D6
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9vXmSTiUEHMmDMDT7DvGsgsMU9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:45:b9:ad:77:70:83:dc:25:be:7c:c2:29:9e:b8:d0:43:
         51:78:4f:1b:10:59:dd:78:ec:29:06:c2:35:db:0c:7f:70:df:
         ae:62:75:ce:94:49:88:78:9f:8b:07:94:aa:0a:fe:ec:16:62:
         fa:18:ef:aa:16:e9:36:79:de:e6:fe:a3:27:5d:9c:50:a9:b1:
         c7:33:38:bf:97:de:40:af:66:90:8d:a4:0f:8a:6a:a4:b9:35:
         8b:e7:f2:da:04:a4:28:25:da:65:dd:78:68:95:41:22:51:0b:
         cd:00:ef:4f:40:25:4b:d8:af:b4:51:24:c9:94:bd:d0:2f:2a:
         91:3f:54:c0:6f:54:fe:22:54:5e:a2:14:3e:0b:86:c8:e7:cc:
         22:d9:70:4d:01:a2:7c:47:4e:96:05:06:f8:cb:d1:2f:04:68:
         5c:4a:b2:4c:ae:7b:c4:c2:21:9b:a4:4e:f8:f8:c2:7c:aa:46:
         a7:b9:4b:36:0b:a4:1b:30:22:19:2c:b6:e2:b7:f1:ca:55:61:
         c2:a2:cb:94:95:e6:f4:2e:2c:0d:cc:6a:7e:48:59:b9:f8:07:
         20:98:7d:5c:ab:2c:87:2d:87:7c:ed:1a:ca:e8:63:82:65:91:
         6d:2c:da:c2:98:53:0e:82:47:8d:e9:b2:46:9a:92:98:19:99:
         e5:77:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----