Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa
File:                     9zGT_aTw32qDZceQHlekER9wpgc.roa (raw, json)
Hash identifier:          ZZ1qY8aTBONf5xwOM8py8K4Ogb1eSHoCl6+8I0gH+R4=
Subject key identifier:   F7:31:93:FD:A4:F0:DF:6A:83:65:C7:90:1E:57:A4:11:1F:70:A6:07
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AF2623650C051B87F6C6CFABBA58C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa
Signing time:             Tue 24 Jan 2023 16:09:49 +0000
ROA not before:           Tue 24 Jan 2023 16:09:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211169
IP address blocks:        2a0e:b107:15b0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:f2:62:36:50:c0:51:b8:7f:6c:6c:fa:bb:a5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f73193fda4f0df6a8365c7901e57a4111f70a607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:b0:19:b0:bf:9b:48:31:34:fa:56:58:fd:
                    f9:59:69:61:a6:c0:49:cd:43:ce:a1:32:76:fa:cb:
                    cb:20:db:bf:43:1f:96:2d:1c:6e:8f:95:74:b7:7d:
                    6c:e1:ba:32:09:d4:bb:b8:9d:26:50:0f:1c:ef:69:
                    2a:c6:8d:8f:6a:ee:37:65:0b:45:56:a2:c5:90:2d:
                    55:7b:f2:b9:32:99:c0:b2:0c:ef:be:e6:92:63:18:
                    c6:06:4a:89:b9:db:2c:8b:89:ca:7a:8b:e0:70:66:
                    8f:da:71:93:a9:4d:c1:6b:b4:86:f5:84:62:41:68:
                    86:b4:0b:ec:e4:0f:6c:ee:85:59:a7:e2:8e:aa:8e:
                    6d:44:f5:4f:69:a0:48:56:77:42:6e:39:ec:ee:76:
                    81:34:53:42:8b:b5:58:95:ca:ca:0f:40:fb:f9:7e:
                    39:8c:e5:ec:26:3a:3f:b2:74:51:f6:4c:3d:66:94:
                    58:39:3c:72:26:7c:e8:50:92:15:a6:19:46:39:d7:
                    55:92:17:a0:33:be:62:24:9b:46:2d:95:4e:25:6c:
                    23:35:e5:15:ae:51:a6:d5:0d:d7:54:34:c8:7f:3b:
                    ca:1d:55:cf:82:d9:fb:b8:de:1b:36:68:40:ea:68:
                    8b:84:b0:20:3a:b3:26:87:0c:f1:93:5b:6e:0e:93:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:31:93:FD:A4:F0:DF:6A:83:65:C7:90:1E:57:A4:11:1F:70:A6:07
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zGT_aTw32qDZceQHlekER9wpgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:15b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:64:af:f7:63:12:21:2e:8b:1a:c8:82:93:0a:45:9a:9d:
         18:cc:dc:12:09:16:85:67:3a:b2:e9:5a:a0:27:b1:b5:9f:b1:
         76:6c:76:e0:61:ba:df:13:ba:72:68:95:88:24:01:56:25:7d:
         05:0f:9b:0e:13:56:f1:be:e4:dd:07:a5:4c:07:91:01:ed:ae:
         04:54:dc:b9:c9:f5:b9:61:da:b9:90:4b:50:42:1e:4f:5e:99:
         aa:41:90:47:52:05:6c:ed:b6:e9:f4:3e:39:75:ad:a7:c2:92:
         39:31:37:35:2b:35:5b:94:a1:2b:30:c5:8a:d2:2a:81:dc:aa:
         48:90:38:e6:03:81:64:e6:40:dd:5e:0a:6d:fc:92:48:91:bb:
         83:84:a6:b9:88:5a:78:d7:fa:f8:d7:50:12:11:eb:12:c3:f3:
         44:27:ba:47:aa:81:39:42:2c:97:eb:71:5d:fd:62:1b:e3:4b:
         62:3f:43:92:f6:21:5d:af:4f:58:30:7c:94:6a:c3:26:7a:b8:
         c2:cd:2a:0e:02:4a:81:41:db:d1:06:a0:c5:46:25:66:98:ff:
         77:46:b3:89:f5:c2:26:b9:c9:14:cf:94:09:52:e6:1a:55:22:
         e5:1f:ed:0e:9c:44:05:91:76:d2:2e:a3:82:d4:3f:1e:69:e3:
         cc:eb:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----