Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa
File:                     ASINuFquN7P2-sZ3rRhkaTA7PCE.roa (raw, json)
Hash identifier:          m9Z4Bha4w1Rr20dgBqONokFg17se2ml1/lkm9LFqxfI=
Subject key identifier:   01:22:0D:B8:5A:AE:37:B3:F6:FA:C6:77:AD:18:64:69:30:3B:3C:21
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185E48AEE1A4267571E1B03A4383C80BECF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa
Signing time:             Tue 24 Jan 2023 16:09:48 +0000
ROA not before:           Tue 24 Jan 2023 16:09:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210842
IP address blocks:        2a0e:b107:1600::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:8a:ee:1a:42:67:57:1e:1b:03:a4:38:3c:80:be:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 24 16:09:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01220db85aae37b3f6fac677ad186469303b3c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:57:27:8d:33:2b:a7:71:1e:cb:2f:29:33:
                    ea:ee:f0:bc:21:5f:cd:5c:69:73:4c:e2:b5:8e:a2:
                    33:5e:c4:23:40:8e:4c:9e:08:57:f0:30:fd:e6:21:
                    6e:9d:f4:0f:7c:68:60:bf:ea:b6:14:a1:67:51:5b:
                    9e:20:15:78:36:3b:68:8b:09:c4:7a:64:bc:66:9a:
                    08:e8:65:2c:72:6d:e0:f3:c5:c0:af:58:c8:8e:4c:
                    14:09:cd:a5:54:b8:f8:31:9d:bb:05:9b:81:42:23:
                    f8:82:62:ba:81:a5:79:12:ed:4f:15:88:bd:29:bb:
                    e3:63:9d:9e:ce:81:8b:e5:a9:32:e2:56:8e:1e:ec:
                    97:f2:e9:c2:eb:ea:1c:8c:27:01:60:57:94:4d:5b:
                    73:5d:6d:d0:ff:61:e3:16:55:1a:ee:99:e7:64:3c:
                    74:b5:bb:d0:0f:78:d8:d9:88:62:f3:4f:e9:76:f7:
                    e9:22:e0:15:06:49:aa:f2:c5:3a:75:08:16:6d:08:
                    cf:33:88:66:c2:88:c9:db:e8:bb:59:c0:0f:7f:9a:
                    31:10:12:b6:96:6d:d1:f5:44:c1:49:fe:a5:bc:29:
                    0a:b5:f7:5a:87:f0:13:28:32:ee:94:ec:81:dd:2b:
                    2e:45:81:60:08:13:72:80:ef:20:28:e6:0b:74:65:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:0D:B8:5A:AE:37:B3:F6:FA:C6:77:AD:18:64:69:30:3B:3C:21
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ASINuFquN7P2-sZ3rRhkaTA7PCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1600::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:5c:3b:75:9c:94:b7:42:5a:48:9a:22:10:28:02:0a:67:
         ce:66:83:6e:f7:40:de:29:d2:ad:b2:c0:d2:05:89:b5:60:18:
         68:53:3a:93:c4:7a:0e:3b:f5:b6:82:00:b3:97:63:78:91:ea:
         ce:75:5d:1b:0c:40:4d:b3:78:0e:ce:82:ce:24:7d:9c:c4:1a:
         43:90:21:32:b7:45:e5:df:aa:0d:a2:25:f0:1b:4a:aa:82:32:
         e3:d9:e3:75:88:0d:82:e1:2f:f6:45:dc:f3:03:d3:97:14:e5:
         80:23:e8:eb:af:a0:ec:c5:ab:9f:41:f6:5b:54:0c:1b:7d:64:
         09:7f:5c:19:25:bc:d6:e5:65:6e:80:51:36:4f:36:33:c1:24:
         ec:9b:69:bd:62:66:3f:57:ab:3f:43:3f:3f:70:9b:93:42:30:
         5b:c5:59:22:f1:a3:41:37:c1:5b:7a:3e:5c:77:11:ab:df:84:
         a9:05:e3:77:a6:79:01:f4:e3:35:91:f8:ac:9c:51:a6:bb:d1:
         15:38:68:b4:0c:e4:71:19:99:8a:3a:84:01:d8:93:be:d8:bc:
         62:34:2e:7f:f5:1f:fb:f8:51:42:ef:22:3a:16:54:2b:38:b7:
         f9:a7:83:c7:a3:bd:b7:5d:97:6e:ff:91:08:9e:7e:3d:b0:52:
         6b:2c:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----